Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba39f9c-b965-4a18-b4b5-9195cacc3282.roa
File:                     cba39f9c-b965-4a18-b4b5-9195cacc3282.roa (raw, json)
Hash identifier:          ulHWvdBLTIut7mXEDDalceCGeQPDkeaogsY3GtKbb6Y=
Subject key identifier:   CB:B9:89:ED:FA:24:49:7E:5F:8E:C8:CF:5F:9A:9B:D7:75:D5:C3:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E81421AF8135BB10FD87F23394D9EA72CED6C46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba39f9c-b965-4a18-b4b5-9195cacc3282.roa
Signing time:             Wed 29 Oct 2025 00:50:11 +0000
ROA not before:           Wed 29 Oct 2025 00:50:11 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:a480::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:81:42:1a:f8:13:5b:b1:0f:d8:7f:23:39:4d:9e:a7:2c:ed:6c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:50:11 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=047569f7f5baee6c8d7ac0093513767ca88df32acaa115a90a8c77784cfdfe25, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:4b:70:69:b5:9c:f4:56:a2:b0:0a:69:ca:
                    a8:9d:1d:1d:c1:14:91:1b:97:37:33:2d:09:57:c1:
                    df:0a:0e:95:28:90:eb:ea:59:f4:44:80:b6:aa:e1:
                    ea:ed:3c:23:27:52:6b:95:34:eb:50:c8:95:4a:18:
                    39:cc:9b:2f:a5:50:97:f5:bc:5a:5e:47:64:a7:38:
                    df:3b:37:16:fe:0f:57:b6:c2:28:65:10:b5:c1:90:
                    be:1c:fd:28:f2:96:93:52:15:36:62:93:f3:b3:1b:
                    de:7d:2a:95:1b:5f:cf:d4:9c:82:1e:53:af:36:10:
                    9f:02:c9:9c:b4:98:48:09:f0:98:06:45:50:d8:b9:
                    a3:c2:66:48:24:96:3e:2b:78:77:39:3c:4d:ca:f6:
                    84:15:93:82:b9:6a:4a:59:27:96:de:db:c5:f3:ef:
                    2d:07:dd:81:20:13:bf:57:aa:37:2b:1e:0c:30:71:
                    86:74:13:8d:e6:ce:0c:6f:9f:db:ce:ee:ae:e5:2c:
                    16:b3:10:24:e9:5b:d8:74:39:c2:d2:76:ee:3c:aa:
                    df:99:ca:fa:c5:f2:05:c2:2c:01:a9:11:cf:38:9e:
                    53:bd:87:3d:eb:34:23:05:ea:0a:e0:b7:6f:d6:20:
                    7f:93:c5:0f:73:12:8e:db:f0:ee:81:37:19:fa:6b:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:89:ED:FA:24:49:7E:5F:8E:C8:CF:5F:9A:9B:D7:75:D5:C3:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba39f9c-b965-4a18-b4b5-9195cacc3282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:a480::/46

    Signature Algorithm: sha256WithRSAEncryption
         66:5d:53:a1:eb:55:6e:92:b1:a8:a0:58:35:fe:4c:79:c6:34:
         81:ad:7c:e0:c1:3a:48:6e:91:4e:7e:e2:85:c1:a3:ab:3e:cf:
         af:3a:8e:5f:c4:86:b0:7e:1d:a6:47:40:c0:e6:f4:48:df:56:
         30:9f:b5:d5:75:9f:fb:4c:83:26:9f:a3:34:5b:1c:bf:cd:e8:
         55:cc:d5:7e:68:cc:cc:00:f4:04:42:4f:ad:75:84:7f:89:a5:
         5c:3a:98:8f:f2:8d:ba:94:50:6f:b6:d3:10:20:2b:31:64:60:
         bf:9b:c9:80:de:e1:1b:1c:a1:e3:94:b0:e3:33:8c:45:7a:cd:
         a3:d6:db:91:b4:6c:75:05:58:0f:e1:af:ca:85:c5:fb:1d:b4:
         cd:75:82:67:10:52:d1:a2:5e:b8:95:4e:03:ac:59:84:24:26:
         9a:25:8b:6a:e3:70:1a:7a:be:1a:77:f7:da:45:28:37:78:04:
         e7:12:68:51:ea:80:76:f0:8d:a9:d3:2d:5f:2a:6e:a4:33:cd:
         46:f7:c7:27:19:42:3d:01:db:7c:6e:42:ec:08:ed:e4:5a:fc:
         67:fe:39:15:bc:63:af:0b:ff:6a:0f:77:01:54:f5:c7:7b:43:
         61:b2:49:d5:6d:1a:d7:bd:13:36:7a:e5:30:86:49:59:87:ac:
         9e:a8:f7:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----