Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa
File:                     af800973-d2a0-4250-88e7-9c8ae26b16ec.roa (raw, json)
Hash identifier:          hp7JPsCBrm/GV4wK4i75R/SIbhsc6fCOF3wS9kJjiPA=
Subject key identifier:   27:B6:5E:CE:7F:F1:6F:37:6D:85:5F:56:1B:B0:40:E9:A2:A3:B5:53
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       70A92B3D98A72E99C9A89D53D31A13EEBDCF0362
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa
Signing time:             Fri 23 Oct 2026 00:40:11 +0000
ROA not before:           Fri 23 Oct 2026 00:40:11 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:d80::/43 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a9:2b:3d:98:a7:2e:99:c9:a8:9d:53:d3:1a:13:ee:bd:cf:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 23 00:40:11 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=f09bfb3ddb6ae0645da1e61fcc65393bff81faf440a25ebcdcc3b4f4e80d695c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:b9:e0:88:6b:d4:78:c9:03:2e:38:97:b7:
                    88:2c:52:5a:c7:08:44:34:ef:25:b3:90:fa:0f:e8:
                    44:1b:9c:43:09:3d:04:fe:9c:d7:13:bf:f8:e1:16:
                    ad:37:4f:42:65:d7:33:d4:5c:0f:ca:1d:33:98:3a:
                    77:ea:21:72:70:88:9d:5a:1b:21:2a:49:7e:57:db:
                    09:95:18:7c:8c:25:05:37:48:a7:92:e7:42:7d:65:
                    39:79:84:da:49:1b:d3:bb:01:c8:3d:40:05:a8:be:
                    a9:cc:a9:0d:a6:a7:34:64:44:12:0f:eb:69:ef:15:
                    2d:12:b5:0e:c6:cd:95:bf:48:d2:aa:57:85:8c:c2:
                    f5:3f:b9:e7:ca:6a:f4:51:03:a9:0b:47:a6:a5:08:
                    f6:d9:b7:78:6c:98:8f:31:34:54:d5:6d:d3:73:d1:
                    cb:83:4b:f3:b0:7e:0b:62:5c:60:bd:32:2e:c5:e1:
                    5d:29:dd:5e:5b:41:a1:a2:82:7a:c8:08:03:0c:ac:
                    eb:5e:73:9e:fd:24:a5:77:8d:56:83:43:11:6c:4c:
                    29:24:72:c4:b0:90:9e:b7:b4:72:73:60:d9:e7:91:
                    40:07:70:0f:f1:b3:55:1e:0f:74:1d:63:9d:73:db:
                    35:aa:cb:55:24:2a:cf:53:b3:07:88:73:a5:92:24:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B6:5E:CE:7F:F1:6F:37:6D:85:5F:56:1B:B0:40:E9:A2:A3:B5:53
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/af800973-d2a0-4250-88e7-9c8ae26b16ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d80::/43

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:88:ae:17:25:e3:ef:7a:70:5d:96:eb:bf:f0:b0:2c:70:
         bd:17:c6:d3:9c:41:c6:b8:8b:bb:6c:cf:f1:97:83:e8:11:53:
         36:a1:f4:f9:5d:02:95:37:cd:09:71:dd:12:5b:e0:7f:c1:ea:
         23:19:e5:9d:ac:4c:ee:7e:2f:12:03:fc:37:fb:cf:59:f7:fc:
         cc:25:f5:9e:0b:ea:33:3a:03:3c:f0:63:13:85:6c:86:d2:14:
         2d:1d:2c:4a:97:69:76:08:e1:bb:d8:c2:a8:be:d4:38:e2:f6:
         4d:87:18:45:6b:de:73:f4:9f:d2:48:87:f4:34:c7:38:a8:35:
         08:7c:7a:87:83:13:45:1f:f7:57:34:69:85:df:1c:dc:64:5d:
         fc:6f:9f:c2:51:7b:59:1b:e4:12:3a:de:87:a0:b4:e8:1e:87:
         b3:f6:df:ce:04:44:89:75:3e:03:39:c5:69:52:d3:c2:e0:a9:
         b4:76:28:0b:12:40:a2:00:32:da:10:11:90:2f:cc:21:f0:09:
         f1:21:e2:1b:94:cf:ef:1a:c0:96:2b:2c:c8:ce:36:26:32:98:
         c5:1f:b1:5c:d2:f7:ca:c0:fd:56:3c:ed:dd:f8:1c:fe:55:d7:
         7e:45:99:8c:1b:2a:13:00:bc:b0:3d:4e:e5:25:0e:cb:a5:3f:
         d3:e7:ce:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----