Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa
File:                     fe36f809-544c-406a-9026-627fbf7d8377.roa (raw, json)
Hash identifier:          b6i2awodeg8R/NtASFWxrStSq35AX9II8zXHuBZ/Whw=
Subject key identifier:   D8:1D:2D:28:56:56:5D:BD:8F:F8:D5:D5:AF:2C:44:2F:F1:2F:77:8B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       522D3600005D609DD58AB0532F43A867FA5B0A01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa
Signing time:             Sun 02 Nov 2025 00:20:06 +0000
ROA not before:           Sun 02 Nov 2025 00:20:06 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2d:36:00:00:5d:60:9d:d5:8a:b0:53:2f:43:a8:67:fa:5b:0a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:20:06 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=8955d857aad64b9d3d61b7a9696e2672153b7414e8168dbd2ff42bb42704f4e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:27:1f:74:15:fc:55:5a:24:4c:8e:90:db:
                    76:35:b3:65:e9:f7:74:16:e7:fe:94:34:7c:80:d3:
                    7d:90:e7:bd:e4:6b:17:3d:3d:5a:6e:bf:34:83:79:
                    1f:41:19:82:6b:21:e5:7e:d6:0d:04:8a:60:21:55:
                    cc:f0:13:bc:e2:90:84:dc:34:5e:e0:ab:90:92:7a:
                    36:55:67:8c:23:1a:85:eb:04:74:ce:6f:26:c5:04:
                    cd:8a:73:68:c6:c5:fd:35:d4:64:f5:a9:dc:ad:da:
                    f7:33:00:49:3a:dc:26:48:6c:d4:9f:33:61:bf:25:
                    1f:e1:71:f7:48:16:1e:78:4b:62:3a:87:5b:4b:7a:
                    dc:6f:f6:38:23:d1:d1:8b:9e:6d:d0:01:ba:18:4a:
                    c5:f4:ea:3f:0c:4e:48:b0:05:23:0e:8c:96:76:c4:
                    ab:ef:34:07:e8:9a:1d:12:99:26:4b:70:b5:59:05:
                    8f:df:66:dd:ee:ba:a6:f9:21:4f:4d:70:d0:af:25:
                    64:12:ab:d5:f4:42:30:0f:06:02:bf:0c:a0:e2:d8:
                    a2:c6:b3:9d:eb:1a:21:0f:2c:3e:82:63:d8:c0:24:
                    0d:cd:26:d4:63:f8:32:fa:7f:7a:9c:cb:0f:30:cc:
                    87:bf:77:e8:30:72:df:d8:62:cd:40:54:e8:dd:ca:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1D:2D:28:56:56:5D:BD:8F:F8:D5:D5:AF:2C:44:2F:F1:2F:77:8B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe36f809-544c-406a-9026-627fbf7d8377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:b7:e3:b8:85:cd:93:a4:e9:a2:fc:d7:42:6a:7d:4a:36:
         33:1e:d8:0b:77:14:db:e1:a6:e2:8f:ba:b6:16:a3:82:2a:8a:
         33:47:74:5f:23:ef:e4:ea:f2:94:fc:93:43:2e:81:19:f1:4b:
         34:70:a1:d4:ac:da:a2:e0:9b:43:dd:cf:09:4b:87:01:b2:0d:
         b3:de:3b:98:82:90:eb:fe:5f:0b:3b:e6:87:1c:04:80:39:c3:
         ad:bc:84:16:04:fa:a0:16:39:a7:7e:df:5a:d3:27:96:1e:5a:
         0a:a1:93:45:09:53:38:e7:95:50:0b:06:71:b4:63:f5:c2:5c:
         ec:8b:fe:74:b3:64:87:06:94:04:f4:54:35:e4:7d:25:97:b9:
         b3:be:2c:66:f8:ae:d0:5c:f4:72:ef:c6:a0:02:5c:f1:c1:08:
         5d:26:b9:b6:16:0d:ed:d1:86:b5:3d:0b:b0:0c:91:73:fb:8e:
         d7:9b:74:13:c9:71:52:50:b2:e4:d3:2b:f4:19:32:86:55:f0:
         9d:36:0f:40:c0:a8:c3:b2:27:02:b4:40:6f:ba:f0:18:40:7a:
         ac:12:c6:65:f7:a3:d2:65:1b:3c:16:f2:26:4e:e3:a6:3f:3c:
         02:dd:a6:9a:e4:35:0c:b3:48:56:14:47:15:fd:cf:ea:09:af:
         2b:00:13:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----