Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa
File:                     2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa (raw, json)
Hash identifier:          gzs7RxoRmv0HWVgunzOWfpyJGSBqaNHkRA0iQaLWDKw=
Subject key identifier:   86:03:D0:5C:02:DF:1F:5B:95:3F:C6:37:41:1A:7E:6C:B6:4E:DA:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30CE4A7636AE2573377A313FB4D3515DAC51EA36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f23:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ce:4a:76:36:ae:25:73:37:7a:31:3f:b4:d3:51:5d:ac:51:ea:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=cd96c915ae827795e30e94f0a0666dc23e9c8c7e0a554b3c561728259d06955b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:82:c7:18:c5:c0:05:b2:03:bf:f1:11:27:
                    b3:8f:89:92:5e:66:1b:4d:e6:48:d2:96:e7:7a:ca:
                    31:5c:6b:b6:f9:24:3a:61:eb:b8:7c:3c:93:47:bb:
                    a3:a3:22:11:b7:fd:65:00:68:3e:96:2d:6b:c6:a1:
                    81:d2:e1:d4:54:5b:74:07:5e:d0:05:ad:e5:22:02:
                    81:59:16:e0:fe:c6:96:b7:77:63:0c:f6:68:12:16:
                    76:9f:2f:90:b0:ae:60:87:97:b5:ec:a9:73:48:bd:
                    b1:f9:2d:ab:96:e4:4e:49:7a:94:e3:ce:4f:85:29:
                    9b:3e:79:45:5c:30:14:fc:c5:2a:e0:90:2a:50:e0:
                    47:fe:8d:94:7f:67:00:ea:91:e0:d1:25:4c:b0:92:
                    98:67:b9:ef:f7:3e:29:a0:ea:0a:97:1d:27:fc:79:
                    db:0c:ef:3e:98:89:ce:18:50:f9:e0:ea:bc:06:7e:
                    1c:a6:cf:c8:5d:a3:01:48:4f:4f:4b:7a:88:41:00:
                    c0:0f:9b:75:b3:fc:8c:24:6c:60:e1:22:fe:99:10:
                    45:7e:da:40:31:c7:d8:b6:b0:1b:3c:5f:a6:95:5d:
                    a4:b4:cc:ba:e2:64:eb:db:c8:80:d6:85:ae:93:6d:
                    e3:7b:eb:e2:70:ae:21:10:30:56:08:e6:76:03:98:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:03:D0:5C:02:DF:1F:5B:95:3F:C6:37:41:1A:7E:6C:B6:4E:DA:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f23:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:64:9b:57:95:52:85:3c:fb:24:36:9e:0e:fc:d9:ba:83:
         8e:14:af:d7:72:7f:bd:af:27:37:71:ef:6b:2f:9b:49:7e:cd:
         d1:d6:fb:4a:42:14:50:e5:9b:72:98:f3:aa:31:8a:b3:ec:ee:
         e3:20:02:78:ec:60:02:55:f8:07:62:e1:84:06:7d:23:6e:58:
         dc:30:3b:f3:e2:79:65:cc:8d:41:95:46:70:4b:80:df:4a:96:
         eb:44:4d:de:c3:67:ef:16:a4:55:f1:d8:ef:bf:69:f4:52:a6:
         bb:c4:32:34:29:b3:70:3e:96:74:03:93:2d:55:49:20:bd:6f:
         3b:3c:4f:d0:c2:03:5e:a5:d0:5d:72:1e:5d:04:8f:29:43:99:
         8a:7b:85:d7:69:69:3d:00:7b:fe:b5:7f:28:b4:74:29:d1:15:
         a7:73:53:a2:ba:a8:ba:eb:7f:70:e9:54:db:3b:39:64:3b:3d:
         cc:f9:1b:2c:98:42:33:fa:f7:40:68:17:4f:e4:80:f6:bd:d9:
         ea:36:26:4e:5c:4a:c4:7a:3f:26:22:73:84:ab:eb:6e:03:d3:
         f7:01:9f:b0:47:e8:dc:25:0a:d9:ea:61:9a:43:76:ec:40:79:
         c0:5b:51:e0:a3:99:6b:6d:11:2d:14:98:1e:4c:17:0b:da:95:
         ee:c3:5f:55
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----