Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a550a077-6712-4851-9f2f-91b6a544e8ac.roa
File:                     a550a077-6712-4851-9f2f-91b6a544e8ac.roa (raw, json)
Hash identifier:          iikb0AI+bFjMgUS98fhLop1UuoZbUfTkV+rEAyivnUk=
Subject key identifier:   76:AC:DF:26:0C:CE:E6:F0:6C:A4:F5:E2:BF:2D:E5:8C:B5:7F:AE:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EDA7EFC00BF2233F629080F5508014118D97779
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a550a077-6712-4851-9f2f-91b6a544e8ac.roa
Signing time:             Wed 29 Oct 2025 07:26:39 +0000
ROA not before:           Wed 29 Oct 2025 07:26:39 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:e0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:da:7e:fc:00:bf:22:33:f6:29:08:0f:55:08:01:41:18:d9:77:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:26:39 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=186618f08be6ff5f14d3e9aa7e474a8ed0b7d6a056eed48f2de64bd2edcd9df4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:94:a3:c2:94:db:41:60:94:65:66:d2:94:
                    4d:ee:dc:5b:a9:c2:99:94:ac:af:2f:17:e4:d9:df:
                    cb:f1:a2:0f:d4:b1:f5:51:32:39:2b:1a:1a:b9:12:
                    c1:e5:55:b0:d8:fc:14:2f:db:78:35:3b:f1:5c:51:
                    f4:34:22:2d:21:de:bd:a7:4c:ad:61:e3:5c:cd:30:
                    29:22:2a:b2:ed:43:2f:2b:ec:75:e4:5c:1d:c6:57:
                    1d:ab:61:d0:58:d3:eb:3d:42:3e:6d:f5:06:8c:5d:
                    b0:d7:d2:ce:46:90:64:1e:cb:50:c8:2f:bf:c0:66:
                    d3:72:e7:61:70:ce:3e:4a:7b:02:f9:61:47:5a:0d:
                    35:f2:cb:da:dd:41:1e:b0:6b:d8:d5:6f:4d:fb:1d:
                    de:82:f9:11:16:50:d6:61:68:55:a5:cb:63:57:67:
                    63:e8:c5:55:53:e1:74:6e:f2:3c:fe:4e:ed:6d:11:
                    48:12:3c:43:90:a5:69:19:86:e7:f8:26:b2:4d:85:
                    dc:de:40:f6:01:dd:5e:37:0b:1a:50:91:25:f6:85:
                    ff:a5:94:fe:25:81:f1:46:05:e4:f0:d5:91:62:5b:
                    0d:98:38:03:8b:8c:13:fa:2d:c3:6b:9d:b9:10:37:
                    3b:e2:0d:77:6b:22:b7:38:84:13:01:07:6e:02:18:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AC:DF:26:0C:CE:E6:F0:6C:A4:F5:E2:BF:2D:E5:8C:B5:7F:AE:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a550a077-6712-4851-9f2f-91b6a544e8ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:68:4d:0f:75:60:a9:0e:55:be:7e:d1:74:0f:2a:3f:6e:3b:
         04:09:7f:82:5f:54:84:e9:31:ec:37:f9:c0:bb:0c:ef:2e:27:
         9c:6f:38:6a:09:d9:0e:56:59:75:ca:0d:f2:a6:ec:34:41:b3:
         51:70:ca:6f:91:94:d3:0e:dd:cb:50:44:3d:b5:8a:94:43:7e:
         f4:39:54:78:4c:ea:e3:a2:92:80:77:a8:3d:f3:3b:52:4d:2f:
         fa:da:f9:85:ac:49:c2:36:bb:4f:de:16:ba:d8:1b:fe:ca:2a:
         b7:62:8e:6f:91:ec:f1:01:df:8c:7d:df:fe:71:5b:54:23:9e:
         3c:1f:6b:96:57:e9:d9:04:e7:6a:73:fc:f2:f0:08:35:f8:f5:
         34:ae:a9:bf:2e:32:92:cd:2e:58:66:cb:bf:db:ab:92:5c:64:
         48:5e:dd:37:51:c1:c5:7a:ea:c0:7f:ec:53:17:1e:d4:a5:39:
         2e:87:32:7f:21:1a:e0:14:eb:46:37:30:ca:5d:13:c0:a7:25:
         6c:ec:70:1c:59:50:6c:71:98:8f:1f:19:f1:9e:93:2d:4d:7f:
         68:05:5d:11:10:3f:32:e2:36:fb:df:ae:63:30:af:b3:e8:a5:
         df:3f:3b:53:0d:ea:fb:69:c4:c6:83:62:bc:82:65:88:ee:bb:
         26:5e:81:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----