Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8df755bc-dbe8-4f97-a0d6-45e556d9de0d.roa
File:                     8df755bc-dbe8-4f97-a0d6-45e556d9de0d.roa (raw, json)
Hash identifier:          QEIhC8ffZyezM1NSJLaqAuPp0QCWOYT6eOX8XXwl3PA=
Subject key identifier:   BC:47:F1:00:5C:36:7C:AF:FF:A4:28:D7:B0:7A:07:EC:1C:4D:2A:7C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7AC404180B1D29F3961E05DEBC1F0719ADD44CBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8df755bc-dbe8-4f97-a0d6-45e556d9de0d.roa
Signing time:             Tue 28 Oct 2025 00:50:08 +0000
ROA not before:           Tue 28 Oct 2025 00:50:08 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4000::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c4:04:18:0b:1d:29:f3:96:1e:05:de:bc:1f:07:19:ad:d4:4c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:50:08 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=541e4d0ced41191f4b02e501f4072365b5a06696f5c524c824d200bac936a71f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b7:73:6e:74:f8:af:c9:d9:09:40:2a:c5:39:
                    b6:00:34:94:26:7d:6b:2a:e1:85:5b:e7:31:78:8b:
                    e1:dc:86:91:8d:77:78:ee:1a:0e:65:2f:a4:c7:79:
                    03:38:38:91:b3:d8:b5:5b:43:e5:7d:0f:18:16:a1:
                    d3:ce:63:e4:ef:04:77:28:f6:59:83:54:e9:73:fb:
                    8a:ae:ef:21:4f:78:65:a3:4d:c4:2a:2f:d5:c7:48:
                    7a:9e:d4:d8:43:9a:51:d5:1b:5b:14:f9:c3:b2:46:
                    da:f7:a2:ae:45:47:ae:f1:05:f1:2c:35:98:e5:1a:
                    90:24:ee:37:6d:56:4f:93:20:6d:05:a2:a1:98:12:
                    8b:ac:a0:3e:d4:c1:77:0f:12:6c:22:61:b9:09:4e:
                    64:4f:f3:d4:50:79:e0:4e:2f:d4:a7:cc:ae:6b:8c:
                    7b:fc:aa:39:09:64:86:f4:65:fc:f8:9d:89:86:29:
                    58:c9:8b:03:b1:cb:ec:32:fd:64:a5:78:94:7b:c2:
                    28:95:6d:cb:76:dc:96:ac:36:cb:0c:2e:0f:35:80:
                    b6:49:2e:d8:71:2b:52:80:18:43:91:00:a8:d4:f5:
                    6f:19:cc:a7:00:c4:3b:74:ae:7e:45:5f:53:80:97:
                    52:c7:cf:75:e6:94:3f:70:0e:ad:99:e4:96:93:dd:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:47:F1:00:5C:36:7C:AF:FF:A4:28:D7:B0:7A:07:EC:1C:4D:2A:7C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8df755bc-dbe8-4f97-a0d6-45e556d9de0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:30:ce:56:d1:a0:2f:71:05:b4:e1:0f:b1:17:94:64:56:5e:
         94:33:77:24:7a:a2:2e:e5:5b:7e:8b:06:b0:17:00:de:f4:c7:
         1d:34:9f:5e:16:bb:f0:08:2c:d4:ce:62:2e:c2:5c:a5:61:fe:
         e2:b8:0e:ef:ae:e5:ef:b2:5b:db:50:a2:69:a7:df:ec:a1:d4:
         62:fb:e6:99:38:34:bc:4c:92:18:c7:13:52:49:8f:ee:cb:93:
         60:76:c8:29:99:a1:c1:ed:3b:28:49:07:dd:18:42:87:fc:ac:
         30:3f:23:12:57:df:d8:73:f1:ff:d1:dc:c3:ca:d0:2a:82:0f:
         c4:cd:b2:b8:0e:ef:ee:68:2d:11:09:ce:0d:30:96:2f:e7:fe:
         f6:cb:31:c5:1d:1f:91:7c:eb:56:ef:b2:34:3e:23:31:b0:df:
         b7:f3:a8:99:20:fb:4e:3b:32:87:ca:0d:ff:de:2b:d7:3a:6c:
         64:e9:1f:31:d0:05:7a:38:43:75:30:e3:d5:e4:ca:82:bd:21:
         70:f5:23:35:f2:0d:ce:68:70:6c:13:63:51:2e:70:bc:db:23:
         b2:dc:63:e5:54:6a:dd:93:a3:57:5d:cf:f0:4f:b8:2a:88:fd:
         b7:d6:44:07:cc:31:ce:d4:24:bd:1c:b3:94:18:96:18:5a:76:
         eb:d5:fb:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----