Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa
File:                     26b55cb8-f721-470c-8d92-772c9c57d579.roa (raw, json)
Hash identifier:          SiYeDT0lNG66Dp2gbDXFzoTE6C10iPjOY5ELPikjcPA=
Subject key identifier:   B6:6F:A6:F8:A6:1B:68:C4:01:8B:3E:31:96:58:F0:C1:62:AB:E8:98
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17EF262A2F23AC2468DDCCA6BC32BB934F0581DE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:26:2a:2f:23:ac:24:68:dd:cc:a6:bc:32:bb:93:4f:05:81:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=e1fb8ecc7b1d807abcf14e282ed97d8ea83ddd17d9b55d1e4b90da5f25352c73, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:4b:51:1c:dd:72:7a:4d:d4:74:2c:b7:51:
                    c6:43:8e:16:e6:68:b6:03:f7:05:98:c3:57:f6:aa:
                    bf:52:a5:34:b2:29:50:ff:b8:2c:c5:75:49:7f:c7:
                    60:5e:46:8f:f0:ba:e4:92:8d:90:79:fe:ec:b2:4a:
                    8b:14:bc:12:65:0a:3f:b0:d0:bc:64:84:97:79:f5:
                    ba:d7:72:6d:15:d3:69:3b:71:a5:27:00:3d:98:be:
                    57:df:82:3d:da:dd:19:ad:9f:c8:35:63:bf:7f:2a:
                    8a:7f:dd:70:33:a5:84:a2:5d:12:6b:67:d1:8c:70:
                    6c:d2:52:95:b5:9f:51:25:ef:7d:fa:71:e5:68:06:
                    4b:93:e3:32:6c:89:d6:c1:0b:cd:02:81:19:7d:be:
                    d9:e0:f5:ca:ce:a2:23:ca:4e:28:85:bb:78:a4:4c:
                    ca:ca:d0:0d:64:04:b9:2f:42:64:00:4c:6a:11:26:
                    e7:cc:4b:9c:e9:81:ef:f9:45:32:d7:66:3e:c5:31:
                    84:fe:b0:5a:97:1e:a6:e2:83:df:42:11:1a:b6:af:
                    0e:e3:0a:6d:f9:ef:92:24:be:0f:d0:2a:d2:68:11:
                    9f:2f:f6:68:32:e5:5b:11:4e:0c:fd:56:05:e7:25:
                    f9:a1:be:20:32:1c:cf:d8:b9:c8:08:ce:c5:71:ed:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:A6:F8:A6:1B:68:C4:01:8B:3E:31:96:58:F0:C1:62:AB:E8:98
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b55cb8-f721-470c-8d92-772c9c57d579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:37:ad:0d:a8:b5:43:71:05:9f:62:7d:57:bb:58:bf:c0:d5:
         84:51:4c:2a:bd:97:62:67:2e:e4:fa:e1:cd:3c:70:80:45:a9:
         2b:80:d8:e4:f3:fb:73:5c:15:ed:3a:d6:55:98:0b:59:26:6c:
         fb:30:f1:8d:dc:0a:05:53:b1:d1:03:e1:59:ee:f3:23:0d:cb:
         51:7f:e9:47:fc:06:d4:92:0f:dd:bc:41:79:c0:c2:64:0d:3d:
         7f:e9:cd:02:e2:4a:12:e6:5b:36:b5:1c:33:48:86:8f:61:57:
         96:32:9c:49:5d:1c:fa:cd:62:dc:1d:48:e2:68:f2:a9:39:d3:
         6d:fc:cc:b0:7d:26:a4:2f:9d:45:5f:7d:58:c4:7e:77:1d:3e:
         33:ae:c5:c7:53:f6:f2:6f:9e:31:cf:ec:72:bf:d4:05:31:53:
         11:c6:8c:e2:de:a9:4f:7d:4e:c4:d5:c1:e4:c0:94:29:68:7c:
         cd:c1:96:c1:53:5d:5e:ec:18:cb:fb:a7:a2:f3:56:c6:e6:7e:
         92:b4:ed:e9:30:9b:cd:7f:71:0b:0f:44:98:91:be:19:38:bb:
         dc:20:80:5d:66:02:67:38:80:56:9e:32:ab:26:bc:fd:0c:bd:
         ad:cc:c5:bb:9f:ba:44:74:84:b9:d5:f1:3f:02:78:ca:6b:1e:
         da:1e:a2:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----