Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa
File:                     39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa (raw, json)
Hash identifier:          6AkfpZykFzCqSudEKaI4BM/+q1UwZST+RBgEQ/ORoh8=
Subject key identifier:   2F:A8:BD:C1:95:0F:6E:44:27:FD:AC:71:F5:D1:27:95:98:48:CC:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6666DAC1A78AC0A67CA7F70BABAEE9A57E934C94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:40a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:66:da:c1:a7:8a:c0:a6:7c:a7:f7:0b:ab:ae:e9:a5:7e:93:4c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1cb20040aa12759893f175b25078601690e20cfcf8d66805d7985554df32ef2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:31:ec:d9:70:74:cf:7f:d3:54:d2:10:c9:
                    f4:79:83:4a:0f:b0:cb:d5:5f:38:b7:d8:b8:fd:2b:
                    e0:c0:98:02:d3:8b:fe:53:52:26:f2:74:e3:88:28:
                    17:11:c9:e1:25:da:ce:1c:bb:fb:49:42:17:40:6d:
                    ff:09:86:9f:9e:de:38:b0:de:21:8e:d1:3e:57:57:
                    ac:45:65:bd:ea:ff:0a:ec:7c:f0:f7:16:3f:cb:e3:
                    3e:9b:db:e1:ce:82:53:09:e3:29:e2:5a:86:96:ba:
                    3c:9e:91:91:3a:25:5e:9e:6c:b9:42:25:61:35:4e:
                    7e:80:51:ca:00:d6:1a:ba:2e:fc:da:52:8b:0a:19:
                    e5:69:c6:6f:eb:d8:87:d7:d0:9c:62:3b:69:d7:a8:
                    66:93:12:05:d2:ab:4e:df:3f:30:b3:96:7e:e5:10:
                    ff:84:d5:8f:36:67:8e:ff:7c:4d:5e:fe:68:e8:b6:
                    5e:b2:e2:0e:da:de:6c:28:02:9d:b6:b9:9d:50:cf:
                    e0:cc:f9:d5:80:a0:71:30:ed:c0:12:d2:79:73:b2:
                    5e:e9:c0:b1:e2:cd:35:68:ef:1d:0f:fb:16:58:23:
                    20:1b:17:f7:c2:f0:0d:43:88:bb:18:42:ab:eb:61:
                    11:87:8e:5f:96:ea:16:6b:08:ea:e7:45:32:8e:1c:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:BD:C1:95:0F:6E:44:27:FD:AC:71:F5:D1:27:95:98:48:CC:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/39d7aacd-f349-4a6b-a4b8-d829e9d29a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:40a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:17:c7:f3:04:95:1d:c3:67:1d:9e:f9:4c:3d:9e:1d:ab:
         c3:76:16:a7:3d:90:10:31:cd:22:2c:e9:65:77:19:bb:ab:a5:
         ac:21:fa:0b:8e:d7:58:35:73:80:05:97:3c:07:e8:b3:67:97:
         5b:1d:62:73:0d:f7:71:8c:a8:88:9e:85:86:f3:8c:9f:e0:de:
         eb:c1:14:66:59:18:85:08:0a:72:2d:ed:60:31:76:d2:47:a8:
         68:1b:25:6b:4f:b9:e4:17:70:75:de:80:89:2b:1c:4d:92:1e:
         a6:fd:e2:33:90:8b:9e:72:fc:95:c9:2f:87:4c:e4:e7:4a:9f:
         27:20:e5:81:b5:eb:88:03:a8:59:58:0a:17:8e:a8:01:1f:18:
         07:0e:ef:9e:a6:93:ba:23:a8:ff:55:9d:57:99:96:cf:50:4b:
         17:d0:8e:5e:fb:a6:00:93:29:c4:93:fd:4c:c0:e0:08:46:7b:
         90:30:55:71:2f:a7:ff:0c:f9:c1:48:7a:d5:70:0f:86:51:c2:
         3f:80:4f:a1:8f:b1:e3:54:be:3a:fc:e2:b8:22:86:51:41:64:
         2d:81:f6:5f:5a:06:b0:d6:44:f5:98:dc:0c:4c:fa:78:a4:d3:
         8d:a9:97:1e:b8:ed:5c:ba:d7:4d:50:5f:7a:5b:47:d1:52:f8:
         60:99:5a:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----