Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5011b07-b4b9-40a4-ab94-be219bc86b92.roa
File:                     f5011b07-b4b9-40a4-ab94-be219bc86b92.roa (raw, json)
Hash identifier:          +Ls1HVUjx/qgoFVn8H1jzCCpPFStIN1Qj9fl8QatFMs=
Subject key identifier:   41:E1:2D:54:F4:19:DA:D3:F6:79:49:29:45:11:93:8E:BA:78:56:B2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       589B21D006281400DB513C9FE29BEA8974D16B4A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5011b07-b4b9-40a4-ab94-be219bc86b92.roa
Signing time:             Wed 29 Oct 2025 00:50:11 +0000
ROA not before:           Wed 29 Oct 2025 00:50:11 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff3:74c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9b:21:d0:06:28:14:00:db:51:3c:9f:e2:9b:ea:89:74:d1:6b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:50:11 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=ccae3194358e3097e58667e086cc973e56020834fd8f4864ddefae8baf0b27c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ba:46:e0:30:69:ac:15:62:ae:ca:cf:01:b0:
                    fc:e6:63:0d:79:ff:2f:27:7d:0e:7e:8d:4d:7e:df:
                    64:bb:09:bc:0c:3d:bc:54:9a:57:f6:ec:81:f9:54:
                    d0:91:9f:cb:cd:f3:6b:ec:e5:2e:79:e6:59:a8:ca:
                    10:23:34:8f:64:89:14:60:cc:eb:b9:2f:0f:20:24:
                    43:fd:e6:55:54:d4:c3:a8:21:c9:8b:11:0b:74:65:
                    27:2e:21:2e:56:11:c1:19:4f:0e:24:ec:bc:80:57:
                    38:87:4b:cd:fe:fd:0c:16:5f:1f:c0:0a:af:df:ed:
                    1d:40:f4:f8:2f:71:21:6f:6c:8a:17:92:1f:df:d5:
                    96:2f:a4:8e:e9:98:a5:e0:23:da:a0:d0:de:b8:47:
                    55:fb:63:bd:7c:e8:2a:f4:91:a0:d8:79:7a:2f:a1:
                    e6:bc:46:65:f8:40:35:97:90:0b:94:52:cc:57:48:
                    43:48:09:66:5d:0b:af:c7:1f:db:a6:7a:00:7b:21:
                    ec:45:25:28:fd:e7:a7:32:e8:e2:91:8d:12:cd:4c:
                    99:99:fd:51:85:1b:55:69:c7:77:52:af:da:8c:17:
                    e4:a6:6f:6b:4f:44:73:8d:c7:89:d1:ef:e9:2a:96:
                    8e:05:95:fe:4a:24:69:80:84:bb:00:4d:d6:c6:29:
                    41:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E1:2D:54:F4:19:DA:D3:F6:79:49:29:45:11:93:8E:BA:78:56:B2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5011b07-b4b9-40a4-ab94-be219bc86b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:74c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:d3:50:db:a9:2f:ba:c6:1b:6e:21:0e:4e:2b:7a:67:2b:
         bf:06:8c:ba:37:3b:bc:d4:3e:50:f0:5b:84:a0:a1:08:bc:10:
         2a:b0:85:f4:f4:e9:24:cd:fd:aa:1c:ee:9c:d8:ac:0b:69:c9:
         e2:49:9d:ab:f6:ed:8a:b6:7e:53:d0:e3:bc:50:1f:97:47:c8:
         27:6b:2c:e9:9a:54:34:3e:ea:04:1f:ac:df:ff:29:0e:7c:ce:
         5e:6d:f1:d6:0a:a0:95:b1:c7:41:24:d1:08:25:2e:9c:ff:0c:
         d3:57:48:c1:69:aa:17:e7:dc:6d:b3:e2:a8:8d:45:ab:e1:73:
         10:e3:5f:95:97:5e:5f:03:d7:05:63:86:b1:a5:15:63:17:49:
         a0:ba:24:a4:47:26:fb:ea:f2:ea:d6:1f:85:67:a0:0f:9b:85:
         a4:54:40:52:03:9b:d0:b9:09:72:14:12:75:2f:fa:e6:9d:0c:
         cb:72:61:63:b5:22:fd:a9:56:05:d2:3f:f7:12:c1:04:72:bc:
         1d:e6:82:3e:b2:44:2f:dc:1d:63:62:96:87:52:fb:52:23:4d:
         a1:68:6d:d4:34:93:9a:58:2f:80:7c:70:fe:53:fe:89:40:b9:
         45:4e:3c:48:51:fd:3c:f5:26:2c:c7:98:98:80:11:78:b1:2f:
         e2:48:a2:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----