Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b47ffe-cbe3-4f55-81f1-6e179eaaeed8.roa
File:                     d7b47ffe-cbe3-4f55-81f1-6e179eaaeed8.roa (raw, json)
Hash identifier:          F2TeEJw+oiZ95FSmq4/XJmpLvLxeQprGyw3KAyV6FAA=
Subject key identifier:   A8:C8:7F:82:CE:B1:12:57:18:96:1E:34:A3:8E:1A:AF:45:21:2D:4E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3FBB5A1E5B75EE63F029B17365CD20B808C6FB06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b47ffe-cbe3-4f55-81f1-6e179eaaeed8.roa
Signing time:             Wed 29 Oct 2025 07:25:01 +0000
ROA not before:           Wed 29 Oct 2025 07:25:01 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fea:5040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bb:5a:1e:5b:75:ee:63:f0:29:b1:73:65:cd:20:b8:08:c6:fb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 07:25:01 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=5b17961fde21520959dc5f45c55465281bf1e4108b230100e7472ce209f6f47e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:93:13:06:9c:29:66:a8:c3:81:ec:47:a3:
                    8b:d5:1b:37:f1:61:e2:fa:f7:23:e2:05:d1:d7:ee:
                    93:95:a4:55:b3:dc:41:1b:83:c7:69:97:ee:af:3a:
                    53:b4:ed:59:4a:07:6d:02:6b:a0:7b:f5:df:be:2a:
                    ba:a4:a6:25:97:c0:3d:14:26:34:b3:85:fa:ed:2e:
                    e4:5f:ed:c7:63:42:da:3b:3e:72:0d:8e:ff:df:5c:
                    1a:5e:10:83:53:40:53:00:18:09:0a:30:bc:10:26:
                    0e:78:16:8f:8d:ee:64:b8:3d:db:7e:ea:97:f9:d9:
                    a5:df:85:4d:b6:43:cc:c7:49:e1:e7:71:9f:2b:d9:
                    dc:b3:a0:f9:7d:98:2e:0b:0f:d2:a7:01:8c:60:22:
                    44:84:aa:6b:54:dc:38:10:ee:33:70:18:3e:4b:65:
                    e9:a2:aa:9f:a8:84:44:87:93:5c:1d:6d:25:b5:fc:
                    6b:91:e9:43:95:ad:00:dd:e6:f8:c3:05:24:d0:0a:
                    9f:29:ac:58:46:03:b1:37:28:ba:5f:09:f9:bb:ec:
                    b7:95:01:47:50:6a:b5:8d:bd:ed:42:db:c9:9d:54:
                    b0:87:91:af:b7:85:a2:3e:c3:cd:7f:ae:5c:e9:42:
                    ad:56:77:86:a7:72:90:7f:cb:bb:45:08:0c:73:f4:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C8:7F:82:CE:B1:12:57:18:96:1E:34:A3:8E:1A:AF:45:21:2D:4E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7b47ffe-cbe3-4f55-81f1-6e179eaaeed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fea:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:8e:06:e9:98:f4:43:18:cc:4b:4c:88:0b:7b:82:1a:1d:
         dc:d3:8f:e6:5c:88:1c:0c:bf:13:4c:3d:b7:bf:89:3b:cd:63:
         b4:db:0a:59:4c:7c:9e:b8:a0:d4:6a:42:cb:25:21:eb:5f:b5:
         4c:90:41:5a:69:58:1f:b8:f4:72:85:c0:64:83:18:a5:b3:82:
         39:1b:94:74:9e:d1:8a:53:88:6e:43:f4:8c:c3:c4:1a:9d:6c:
         9f:fb:1e:c7:be:57:b4:73:7e:44:f9:6b:15:cd:57:8b:43:35:
         28:2f:f0:74:36:b8:64:fe:88:82:f5:54:c6:b1:0d:49:1f:a4:
         7b:d3:af:d3:d9:4f:bf:42:8f:60:52:fc:cd:c1:00:97:54:ad:
         e8:93:87:b6:ac:04:d3:fa:8a:42:d1:72:04:63:d1:4a:b9:0e:
         54:5f:a0:d5:e2:75:79:01:e2:c3:c9:da:da:b0:ea:b5:d4:58:
         85:22:34:5b:f0:6b:b3:92:d8:f7:c5:88:d1:87:de:92:82:5b:
         cc:76:bc:ea:d0:5d:f2:81:61:e3:a3:72:26:8f:eb:fa:6c:c0:
         4b:9e:46:bd:f8:df:87:75:66:69:b1:2f:9a:17:4b:00:25:ff:
         b5:70:f9:e5:30:72:42:f2:fb:a1:10:54:ea:9e:ca:3c:22:42:
         5e:1d:9c:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----