Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
File:                     1186eb64-ee57-4357-90a4-25d99e03e859.roa (raw, json)
Hash identifier:          jA1P6lcgNjQsmL+G4vUjaFQMjBjjYiMpEiAg8SBnh2E=
Subject key identifier:   62:29:2F:04:51:35:4C:58:66:9C:1F:01:94:59:D8:AB:19:C5:5F:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       125B02DCD2DFE2A6677FBB40119D6EBFA7FA46CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f11:4800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:5b:02:dc:d2:df:e2:a6:67:7f:bb:40:11:9d:6e:bf:a7:fa:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=cef5d9f59f4d94efbcebb1502ec73f1feae377502ce44f56b3a206425bca6e10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:e0:43:7f:61:89:1a:f0:e4:3a:c2:51:5e:
                    73:e7:c5:a9:c2:b9:7e:bb:62:ac:8a:bd:1b:b7:29:
                    00:a5:bb:bf:3f:72:40:24:9c:2f:94:72:19:cf:16:
                    ef:9e:aa:2c:ce:d3:b5:28:2e:73:67:81:1a:6f:5e:
                    9d:4f:b6:49:1e:2c:ac:2f:bf:81:eb:eb:ca:23:ea:
                    b7:e5:af:17:1e:8b:40:aa:89:4d:e5:48:d2:62:5d:
                    13:b8:94:39:95:9d:09:f7:35:8a:ff:e9:16:e4:01:
                    24:97:1a:71:73:d1:7b:10:00:1c:42:91:f5:ac:cb:
                    1a:96:17:8b:5b:99:59:64:29:f2:7f:d4:19:7e:f9:
                    92:ac:d8:0d:9c:36:58:b3:fa:6e:2b:fb:6e:99:3d:
                    07:85:58:d1:05:97:91:f5:31:4c:c9:13:61:8b:2d:
                    6f:99:cd:e1:1b:b7:1b:dc:ed:8d:90:5c:51:f7:eb:
                    65:a1:ba:f2:c9:02:e4:2c:16:e3:25:d1:5e:1d:1b:
                    55:e8:3e:2e:53:92:1f:14:42:68:ce:be:7d:80:60:
                    d9:e8:60:69:48:8c:a3:3b:f0:62:f8:b7:e9:da:ca:
                    26:dd:f4:94:6a:65:e1:e6:2e:0d:92:7b:d3:ef:2c:
                    b3:98:50:02:af:a6:b7:0f:63:84:f8:76:d6:b3:5d:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:2F:04:51:35:4C:58:66:9C:1F:01:94:59:D8:AB:19:C5:5F:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1186eb64-ee57-4357-90a4-25d99e03e859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f11:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         ac:ce:5e:2d:2c:47:42:6f:78:c2:f6:85:0c:3a:6a:e3:52:d8:
         d8:fb:4c:2f:6f:05:6a:e1:04:7f:0c:6f:4b:ca:4e:de:a7:ce:
         67:b2:05:78:5d:e6:cc:50:c5:9e:15:dd:8b:b1:c6:ea:8b:29:
         8e:94:f9:1c:e0:c4:cd:40:75:bb:29:b5:6b:b9:57:30:3b:a0:
         1d:10:c1:d5:96:8f:4b:4f:17:23:90:ee:93:50:76:34:53:0a:
         46:a2:1a:81:78:b1:d0:1e:13:48:72:34:1e:b9:86:fa:82:52:
         2a:66:c7:9b:86:0e:72:21:39:4d:06:a0:11:1c:d1:f0:2d:34:
         82:94:28:83:28:f5:c6:87:b0:3d:99:83:25:6e:91:87:93:f6:
         ed:bb:5f:73:7c:6c:4b:10:af:32:92:4f:fb:44:2b:95:9c:d1:
         66:44:5f:22:57:ed:df:ff:df:19:10:51:35:98:49:ab:8a:83:
         fc:1a:30:c5:f6:a8:b6:2d:f6:2a:70:e6:5e:5f:cc:3a:15:51:
         61:50:3b:9d:19:f4:46:8d:b4:6e:d5:9a:4d:10:07:9f:00:69:
         fe:d8:30:92:b9:3d:74:c2:29:18:3e:8b:68:72:b3:8e:77:ca:
         83:4e:eb:d5:7c:74:79:11:46:51:69:97:92:8a:82:fe:89:f7:
         2d:20:d6:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----