Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c4b3cc1-2758-4f84-93c3-9706e2d1a0b4.roa
File:                     0c4b3cc1-2758-4f84-93c3-9706e2d1a0b4.roa (raw, json)
Hash identifier:          AINQSNozMtIxy/mnzbwUBpiGmx2THVM6wH7bxB1PazE=
Subject key identifier:   07:6C:E6:79:1B:A0:C6:CC:65:F8:63:A5:36:9A:06:F7:90:05:1E:03
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       318ADFE2C5573CBD2AAE5EC7468B647C83F40AD0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c4b3cc1-2758-4f84-93c3-9706e2d1a0b4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8a:df:e2:c5:57:3c:bd:2a:ae:5e:c7:46:8b:64:7c:83:f4:0a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=55c4763bbd04f82a181d743b356bed0b033e0a880aa2aaa26ad46fe34d77fa8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:d1:68:7c:42:b4:03:27:a0:b2:3d:b7:7d:
                    ba:04:6b:98:ab:30:14:ae:c3:c4:13:29:76:b2:0a:
                    59:41:2c:81:68:58:49:26:77:83:25:80:1c:ae:9a:
                    d6:b8:9e:4e:eb:b6:8f:84:58:79:8b:31:ff:78:28:
                    ac:d7:46:e8:f6:94:d5:67:7b:45:1a:b8:f0:be:65:
                    92:7d:ca:89:e8:86:fa:22:72:34:a6:0c:6f:ee:a4:
                    65:f2:4f:93:1d:81:ac:2d:36:d7:f8:a1:df:05:11:
                    9a:80:88:c3:26:68:f1:ae:35:ef:a5:0e:08:1d:f4:
                    60:36:08:d7:c0:25:7a:03:16:4e:ac:19:7a:76:aa:
                    45:9e:4f:83:e2:bf:c8:05:3b:a2:11:24:04:de:92:
                    06:1d:41:1d:af:50:34:ec:94:20:d4:43:15:8b:c1:
                    c5:9b:37:b8:c6:b6:cf:a6:14:73:85:dc:90:b3:d7:
                    11:57:9c:ef:1c:fd:61:9e:4f:a3:5f:6f:da:da:57:
                    9a:33:cf:55:43:90:75:6a:39:c0:d1:cf:21:87:0c:
                    96:c4:fd:d4:5f:1c:26:41:84:c5:44:ac:65:62:4c:
                    de:da:04:7e:16:69:66:8d:c6:d4:58:cd:48:6a:17:
                    26:b0:16:54:c9:f9:cd:1d:77:2e:25:7b:5d:7a:e0:
                    f2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6C:E6:79:1B:A0:C6:CC:65:F8:63:A5:36:9A:06:F7:90:05:1E:03
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c4b3cc1-2758-4f84-93c3-9706e2d1a0b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:8c:ba:46:52:2f:a2:43:0f:46:58:4e:5c:54:e1:d5:d1:7f:
         4e:3c:e9:b8:24:00:5b:da:8f:a7:85:69:03:38:62:b1:f2:d9:
         83:4e:5e:53:db:f4:27:7a:7e:61:2c:04:1e:9c:9a:2e:ae:16:
         b3:b9:ec:c0:02:f1:82:2e:9a:87:ee:55:e9:7c:4b:39:36:fc:
         77:a0:6c:52:f4:f9:59:50:93:80:04:51:9c:e2:e7:a4:f3:ca:
         ef:cd:4c:4c:05:40:89:d4:9c:55:1f:2d:b4:ff:3b:ad:bd:66:
         ae:a8:4b:9f:91:d3:af:e5:39:25:5f:81:6c:f2:4e:89:e6:19:
         3f:2a:7e:92:72:4f:58:af:3c:fc:69:33:06:ad:75:7c:fd:83:
         46:16:fa:ec:37:4f:26:9d:1b:6d:36:42:61:37:d4:12:f4:12:
         58:64:4a:fa:de:d6:40:a5:61:33:7f:39:f6:f5:c3:0c:22:92:
         e1:a1:bc:bd:55:53:a1:f9:52:bf:df:85:49:2d:fd:db:0c:40:
         f5:2b:6e:44:70:3f:63:49:a1:e8:8d:01:aa:ce:dc:d1:45:19:
         f6:ae:82:a9:d5:a8:0a:62:16:1e:b7:8c:5b:24:da:5a:5c:b2:
         5e:c8:3e:3c:d6:64:25:a2:05:20:a1:19:07:44:85:b6:78:b9:
         13:7a:b6:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----