Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df92ae9-a94e-43b4-96d0-8d1d0cbaa750.roa
File:                     2df92ae9-a94e-43b4-96d0-8d1d0cbaa750.roa (raw, json)
Hash identifier:          qT0AH3kiwJ6MwiUHZKUeDcLPwlOsiG+ypI6BvnspIxE=
Subject key identifier:   9B:E6:93:DC:AE:EE:14:2F:98:12:8F:C7:D9:11:6E:EB:F9:34:DF:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E8BD3F14E03736FC7C229DC794798136FEEBB31
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df92ae9-a94e-43b4-96d0-8d1d0cbaa750.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:8020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8b:d3:f1:4e:03:73:6f:c7:c2:29:dc:79:47:98:13:6f:ee:bb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=901edaa2abfd5ccee5ba5b7a27ca0725c901d1fb151c6a7f4580e069ac22148e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d2:65:c5:ee:99:55:f8:0a:df:d7:72:c5:26:
                    3f:25:f5:19:0a:a1:38:f2:b2:3b:b5:f6:13:78:3a:
                    f2:7f:45:ef:44:23:29:53:82:a9:a2:ca:b2:b5:9e:
                    d5:01:d4:30:a3:84:4e:c6:37:70:fc:e0:52:3a:71:
                    d0:be:21:16:96:2c:b1:ff:8c:d0:cc:06:75:cc:ac:
                    f2:5d:22:48:2c:5d:d3:f2:6b:10:80:e2:ff:50:39:
                    9c:8d:88:30:fc:df:47:c5:bd:8d:30:96:47:d4:c3:
                    b3:f7:3e:a3:05:89:97:8a:66:6e:41:33:81:a4:02:
                    63:30:cc:fc:74:ec:4a:4e:bd:ff:d6:c3:75:a0:c1:
                    e6:3a:11:92:41:d4:bf:6e:a5:2b:94:db:7c:67:8b:
                    d1:e2:7c:bf:55:3b:c1:dd:80:88:84:73:2d:f5:37:
                    de:e0:97:05:5f:5a:b9:a1:2c:9d:c6:92:71:6b:74:
                    3e:74:18:68:f3:e9:0a:33:ea:60:51:fb:f0:3b:69:
                    3e:72:61:e8:94:59:28:c5:30:28:c0:b5:ef:50:c2:
                    e4:e8:ad:d0:d6:a8:5f:b6:31:2a:0e:d7:b4:5e:96:
                    38:f6:c1:23:b1:c3:5b:dd:f6:64:f0:99:1b:06:e4:
                    93:65:1f:8d:dc:35:07:64:70:ea:e2:59:1e:b6:95:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:93:DC:AE:EE:14:2F:98:12:8F:C7:D9:11:6E:EB:F9:34:DF:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df92ae9-a94e-43b4-96d0-8d1d0cbaa750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8020::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:50:47:4b:79:73:50:19:54:6b:9e:0a:e3:4b:4b:b5:eb:f9:
         b7:da:86:7b:74:1f:ff:79:01:1d:6a:34:f2:50:e0:ae:0e:28:
         0e:a1:c7:cf:8d:ad:4a:2a:56:97:5d:ef:df:8d:47:c7:12:f6:
         e6:44:3e:e1:e5:d3:88:99:9a:98:7c:66:ee:02:a1:4f:ea:dc:
         46:17:9d:85:22:04:8e:2e:7b:9d:fb:94:1c:de:be:17:3f:df:
         12:c5:91:05:0d:37:17:41:04:d3:28:ca:73:3c:16:fe:cc:c2:
         3a:f8:2c:e1:1f:a9:2d:01:f8:cd:f3:26:5a:15:dc:ea:e2:92:
         5a:48:26:3d:e9:a8:0b:4b:54:4a:33:4e:b7:ca:fb:58:69:2b:
         3b:3a:93:65:03:a7:a3:41:00:1e:ba:50:51:6b:84:bc:81:98:
         8a:d7:d7:6f:7d:6c:bc:e0:ca:31:b1:72:0a:38:cd:bb:64:52:
         eb:10:20:b3:9d:cd:49:4a:83:81:f8:00:8e:43:a6:da:94:6a:
         8c:14:1a:65:99:76:77:e0:12:1a:83:30:c4:63:90:32:1b:8e:
         4f:f1:fc:b6:d3:8b:ce:50:2b:9f:dc:42:03:08:3b:48:f5:02:
         f6:60:40:59:76:15:ea:94:11:88:43:5a:75:40:55:e1:1c:d7:
         99:e7:52:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----