Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09e0eed7-f971-49f0-8b15-65706a28f0d4.roa
File:                     09e0eed7-f971-49f0-8b15-65706a28f0d4.roa (raw, json)
Hash identifier:          2A/UqriFRMZwuWB1fHRoH9BAMeGvezQjF27rWdkp7Jk=
Subject key identifier:   B6:8F:11:94:F8:AA:54:06:B1:5D:B1:81:A3:64:EA:37:71:F3:0C:4A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       126995FF5392FB46C335F5C4FACFD10723D31645
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09e0eed7-f971-49f0-8b15-65706a28f0d4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:4010::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:95:ff:53:92:fb:46:c3:35:f5:c4:fa:cf:d1:07:23:d3:16:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=164ce759c0146bb0c6f3a2ebc8ae726e53f32a70a1e863b9a610bc489253ceed, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b5:37:c1:16:f1:c7:23:07:6b:e5:60:67:d9:
                    e8:ad:f8:a9:74:37:be:30:3e:3e:7a:51:b7:4b:c9:
                    73:06:48:bb:2c:62:79:04:2c:82:3e:53:d0:d3:78:
                    7e:9a:36:a7:92:ff:84:3b:ac:b7:6a:6c:50:02:cc:
                    bb:f6:f4:da:bc:46:c8:ce:62:6b:5f:e1:10:11:29:
                    3c:d8:52:5f:ad:d7:46:40:85:5c:78:ea:73:67:c8:
                    f4:54:63:a1:75:99:28:af:77:ec:35:2d:66:bd:23:
                    4e:80:00:d9:57:38:51:ff:eb:49:e0:44:3c:93:7f:
                    18:0c:4a:b5:4c:92:42:d7:97:73:78:f6:27:23:70:
                    d7:c1:0a:6a:a0:40:0b:0f:bb:6f:7d:a9:a7:fa:a2:
                    b3:30:6e:e3:d9:97:69:39:8b:c6:41:55:52:ed:bc:
                    1a:b6:95:28:10:b7:a9:f0:4e:56:06:62:7b:e8:d7:
                    62:28:14:7d:1f:e4:e2:45:bb:c9:e8:26:e8:57:4a:
                    ab:b0:e0:a4:46:5e:2d:2e:42:dd:17:42:42:49:b2:
                    42:df:72:4d:ee:2c:73:f7:f6:28:15:bb:7e:fd:96:
                    2a:35:5a:e9:8f:7a:b9:db:7a:9b:9b:13:cc:c3:17:
                    a0:b6:65:92:28:0f:e5:a0:f2:69:8d:1c:57:f5:a7:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:11:94:F8:AA:54:06:B1:5D:B1:81:A3:64:EA:37:71:F3:0C:4A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09e0eed7-f971-49f0-8b15-65706a28f0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:4010::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:db:09:ca:b6:6e:a8:8e:72:de:d2:db:21:df:ee:7a:7f:
         1c:c2:1f:aa:e2:e7:cc:67:84:62:be:4a:fc:9a:b9:01:f1:e8:
         08:8d:e9:0a:8e:48:c9:bd:ab:4f:90:a6:50:ab:37:f7:75:6b:
         c3:e2:d0:87:63:61:a1:12:21:1a:b9:66:48:35:44:60:31:14:
         a6:01:82:ff:ba:b2:21:e5:f3:af:f6:d7:46:92:e8:ef:39:29:
         18:68:12:a4:67:3d:32:67:b0:21:8d:4f:16:62:8d:35:e9:31:
         f7:94:80:15:b9:15:76:8c:27:ff:15:cf:d8:01:8b:87:b4:dc:
         c9:fd:37:e7:65:19:00:88:2f:d8:c8:38:01:89:ef:6b:30:aa:
         18:9c:bd:f0:36:66:cf:10:86:5c:13:df:63:f1:f7:c3:b3:1c:
         1a:c6:b0:6f:8e:0c:8a:0d:0f:0e:d4:b8:60:15:41:be:23:54:
         97:f1:71:1b:16:95:b9:16:71:ff:52:6d:47:0c:03:31:63:2c:
         3c:9d:fb:69:13:11:13:db:97:fb:4d:3e:8a:14:12:f3:4f:cb:
         d1:86:29:33:cf:01:f3:4b:29:41:ba:8f:f1:c9:75:f1:ea:bd:
         57:11:f6:53:1a:78:29:55:9f:49:29:d5:21:74:80:76:ed:d6:
         66:b1:b5:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----