Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa
File:                     11922458-95a1-49eb-ab5f-e50a3e748405.roa (raw, json)
Hash identifier:          cyIMHGNE0PqWnlT7OmRq3+0KDZA9dCK/QwuyT8notR4=
Subject key identifier:   6C:82:34:32:25:D2:54:CB:B8:44:F1:70:18:08:50:9F:4E:3C:29:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49603FFE0C25AE486F5850D84A589AC8FE2EAD8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f15:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:3f:fe:0c:25:ae:48:6f:58:50:d8:4a:58:9a:c8:fe:2e:ad:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ca7aeaa9d16d436ad532e7361ce8c3be532ba0bf65b35d19dcd6c70a1616c128, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:cc:3d:e2:55:eb:2f:2a:0b:fd:9c:46:82:
                    fd:62:d4:7e:a9:b6:97:e5:1d:0d:91:89:9d:2b:05:
                    29:7a:bd:f9:0c:2d:10:d7:b0:ed:72:f9:dd:b8:f7:
                    07:e5:4a:2b:c0:3e:af:b9:9d:15:8d:0c:2d:5b:d0:
                    2d:02:f5:9b:31:17:3f:20:02:6d:51:15:51:79:94:
                    bc:2c:35:01:bf:87:e2:41:a7:0c:16:a4:0e:78:0b:
                    c6:c3:15:d3:30:9a:4c:30:7a:97:64:2e:53:96:00:
                    c7:7f:86:0b:ca:17:35:5c:00:1f:08:3a:14:a1:bd:
                    17:f9:8f:16:4e:57:f0:79:91:2f:dd:48:53:5f:de:
                    3e:82:18:80:63:35:97:65:be:d5:d3:74:e0:b2:07:
                    40:4d:0d:60:9a:66:2f:00:4d:e4:9b:e3:42:1b:4d:
                    94:aa:51:68:16:31:29:f9:89:03:fd:94:19:52:9e:
                    c3:02:56:8c:b2:6e:30:82:a2:11:ab:97:d3:c2:e0:
                    07:53:7f:01:07:32:38:ac:03:ec:fb:75:45:50:cb:
                    0a:d9:02:a9:3c:36:03:25:c0:96:b9:9a:93:5d:71:
                    32:15:de:f5:98:38:e6:c7:e1:1a:d7:e3:09:be:f2:
                    b3:73:8a:64:af:4e:c2:53:8e:ec:92:82:77:db:c6:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:82:34:32:25:D2:54:CB:B8:44:F1:70:18:08:50:9F:4E:3C:29:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11922458-95a1-49eb-ab5f-e50a3e748405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f15:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:b7:c4:53:06:8b:62:f9:91:dc:80:c8:d6:60:a3:1e:d7:ce:
         72:87:4d:af:31:c7:d4:df:7e:32:43:15:68:a3:2e:26:f8:4c:
         62:12:3a:68:48:d8:cd:f0:fd:30:bc:1b:82:42:69:bf:cc:0c:
         3c:3f:bb:9c:3e:d1:13:58:e2:db:a4:47:46:f1:28:4f:4b:f8:
         15:5d:85:14:86:e9:9f:2b:53:f5:e1:db:4d:70:11:33:fc:02:
         25:dc:8d:df:5b:8c:11:3a:2a:d8:26:67:39:bf:af:b7:ca:04:
         93:ee:5a:32:f1:a2:28:06:50:71:0e:2c:30:8d:1a:6f:26:66:
         ac:44:64:57:d5:60:35:e2:25:4c:4a:57:ef:8a:48:f8:82:9e:
         55:ea:88:a8:18:77:65:8d:8c:6e:28:03:b4:dd:38:f5:6d:32:
         a3:05:d5:30:41:23:14:c2:24:13:a0:80:3c:14:ca:9b:26:36:
         e1:aa:44:29:0b:72:3a:b4:1e:d0:93:bb:55:bd:1c:a9:2b:49:
         6a:19:16:ed:2a:29:5d:e0:57:92:c6:98:84:73:9b:de:f4:c4:
         f5:b1:9f:ad:09:9d:fc:82:35:2d:b3:3c:75:90:dd:aa:12:be:
         09:20:57:5b:7f:8c:47:36:b9:44:65:8b:93:3a:6e:51:42:2b:
         31:8a:ba:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----