Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa
File:                     c8f71b7e-9974-4779-8c24-e352d24c707e.roa (raw, json)
Hash identifier:          WfyxZXuLs4awVZbBeXFbcYBzVrLHuq4NWyQabJybHAE=
Subject key identifier:   29:40:37:4F:57:60:F6:09:E4:E1:1A:CE:FD:1D:29:29:EA:AD:0B:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F6CB402793EE40DE6C01A06E2F1A4FFA844853F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa
Signing time:             Sun 26 Oct 2025 00:21:03 +0000
ROA not before:           Sun 26 Oct 2025 00:21:03 +0000
ROA not after:            Sun 30 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:5000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6c:b4:02:79:3e:e4:0d:e6:c0:1a:06:e2:f1:a4:ff:a8:44:85:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:21:03 2025 GMT
            Not After : Nov 30 23:59:59 2025 GMT
        Subject: serialNumber=be2ea25bb36c6abdb8bdadc4b32a20815b2392dc40f01ca14777446dc8bb24a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:e8:6b:e5:8a:61:6a:43:b2:1b:ec:c3:7e:
                    09:ae:14:fe:de:55:fe:d1:20:33:33:ef:f7:4d:ce:
                    56:4a:1b:5c:f2:1f:b4:80:ed:a5:4e:a9:ca:a3:88:
                    42:45:0f:b9:2c:a0:2d:e3:18:ab:42:bb:b6:93:84:
                    f8:c1:0b:a9:57:d4:29:56:fb:24:66:ea:97:b9:c9:
                    3e:bd:3c:39:87:11:d4:e4:f9:03:3c:71:a4:99:1c:
                    ae:bd:20:73:63:e6:5c:35:36:32:f1:26:d1:87:70:
                    2f:f7:7d:30:d8:6b:2f:93:e0:8c:52:2d:bc:a0:a5:
                    37:d2:78:80:ba:bd:12:4e:9a:5e:de:d1:e2:3f:10:
                    3f:e3:1f:5f:1a:81:34:bf:98:cb:43:e1:12:d2:4b:
                    11:55:b9:11:9a:c7:ec:eb:fe:b2:73:84:20:2d:ef:
                    8b:14:42:fd:88:aa:43:90:bf:8c:6d:18:ae:2a:76:
                    f4:64:ef:81:85:7d:8f:62:19:9a:a9:07:5c:fa:37:
                    91:0d:a7:72:aa:34:49:c9:df:8b:f9:c1:3a:09:f4:
                    62:3c:65:1d:72:8f:f7:65:62:ae:87:45:56:66:73:
                    d9:de:3e:06:ed:fd:08:1e:d7:13:5f:ca:86:6d:d8:
                    77:78:d0:d7:4e:77:85:69:78:27:bb:cf:13:55:e5:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:40:37:4F:57:60:F6:09:E4:E1:1A:CE:FD:1D:29:29:EA:AD:0B:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8f71b7e-9974-4779-8c24-e352d24c707e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d3:07:96:05:7e:72:19:b5:07:55:56:23:ae:2c:58:00:0c:2b:
         de:2d:d5:51:75:af:4f:2c:85:1a:42:f2:5e:d6:66:cd:de:bf:
         75:eb:66:aa:be:22:79:4f:c6:25:f5:74:c8:5d:91:03:78:4c:
         2e:54:5d:eb:40:5d:73:c0:dc:a5:35:59:25:82:b7:e8:58:08:
         32:cf:fd:30:c9:eb:af:bc:26:e1:5c:b6:c6:1e:0a:46:02:11:
         c1:b8:87:50:9a:3c:a2:3d:43:ab:a3:27:a7:85:77:f0:17:a3:
         e1:e3:bd:13:06:7a:69:22:93:ff:20:59:4f:70:a1:8c:3d:40:
         a5:de:22:61:10:35:b9:7b:2c:24:67:70:49:0e:dc:e7:2f:d4:
         5f:c3:26:87:28:01:a4:1b:da:33:2f:4a:27:19:45:8e:0b:8f:
         78:39:2e:80:ae:dd:ce:3c:10:70:7f:0f:e7:78:a8:2a:96:d9:
         7f:aa:97:15:01:94:9d:7c:90:cd:53:76:12:a0:e8:7c:73:81:
         d7:79:36:81:fc:7a:a8:0e:04:7b:26:b2:7e:fc:db:f2:27:81:
         99:07:95:76:c0:4e:68:68:2c:4e:29:19:32:92:1f:5e:c3:bd:
         e7:f9:c5:c4:70:37:38:22:ec:83:26:a6:fd:e0:9e:c9:28:30:
         a3:f3:a9:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----