Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa
File:                     497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa (raw, json)
Hash identifier:          qBmsqD1eNn8pP/q+ceE8n/RZNm/zN3TDprgLeLjFjqg=
Subject key identifier:   4C:56:CD:85:6A:0A:B6:9A:A8:CE:95:B1:37:85:AA:D1:94:5E:13:4C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3BA916BE57BB62416B88CA06D17E0A13F8882418
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:c080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a9:16:be:57:bb:62:41:6b:88:ca:06:d1:7e:0a:13:f8:88:24:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=7422e069037c7bde3e0f9e3b0a4b47aae9c5445959ad107a0e91d1f19e030075, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:59:fb:af:c3:27:64:a2:4c:eb:1f:0d:10:
                    49:61:70:a0:77:59:34:f5:8c:0d:a8:db:7d:7d:3b:
                    30:01:74:f0:c4:7e:32:a6:94:03:21:ea:87:f1:7d:
                    8b:9e:69:54:71:5d:6e:62:5d:e8:2e:03:7f:f4:07:
                    02:62:73:63:a4:5c:2d:42:e5:7e:64:7a:4a:04:5b:
                    61:97:27:c4:f3:2d:ef:3c:f3:98:0e:96:9d:88:0c:
                    b9:1d:1c:59:c0:23:94:f2:01:0f:80:88:79:23:9d:
                    a5:5c:38:b3:6d:fc:9c:42:ed:76:09:26:e9:bf:35:
                    30:34:6b:ad:d0:bd:bb:c2:e4:c9:35:65:fd:60:99:
                    6c:5f:05:4c:84:36:c7:fb:8b:46:b2:6a:64:2c:33:
                    25:d0:d2:b6:ed:10:67:ad:9b:69:80:d4:c0:b1:6e:
                    db:29:41:7b:e9:f0:cf:59:10:ca:7c:cb:6f:5f:02:
                    ab:44:fe:db:aa:d2:d6:98:76:e7:20:78:69:1b:3a:
                    55:40:bc:5b:1f:5e:8a:d7:5e:9f:e9:8e:a4:46:53:
                    53:b4:14:b3:e9:7b:ee:b7:4a:c0:4a:3b:e2:51:71:
                    80:fa:42:05:2c:0f:0f:c4:99:f2:14:b4:39:d6:b0:
                    61:c6:a0:8e:c8:6b:88:aa:6b:7c:71:9b:37:b4:31:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:56:CD:85:6A:0A:B6:9A:A8:CE:95:B1:37:85:AA:D1:94:5E:13:4C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/497c9f23-488b-464c-a6a0-2f9cf9d7daeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:f7:9b:79:a5:ee:fa:f2:df:65:4d:f9:72:04:37:e6:52:
         d3:8f:58:9f:86:cc:c9:b4:a4:c6:81:15:4e:95:53:f1:72:9e:
         9a:62:b2:47:50:35:07:74:36:e0:55:da:16:bc:af:8b:1f:4a:
         7a:13:15:7d:57:02:d5:27:a2:4f:2a:80:01:21:7f:89:77:97:
         0f:ae:0a:ce:53:a0:98:e2:97:67:08:fb:78:1c:ab:1e:2d:24:
         5d:2d:e9:28:99:99:4b:52:4d:bb:59:3a:53:97:5d:dd:13:6a:
         88:fb:be:98:2e:99:ce:26:d4:da:df:a9:40:38:c9:61:cd:63:
         e6:66:c0:77:c4:02:83:6d:51:02:55:a9:a5:7b:bb:39:da:ac:
         43:53:16:48:a9:70:96:90:54:c3:a4:ff:87:77:b7:4c:47:0d:
         66:76:02:d9:2c:f0:4b:de:31:65:dd:40:cf:7c:10:1a:97:25:
         80:0e:d3:48:70:35:a7:f7:2c:5e:9d:e5:b6:6f:c2:b3:7d:43:
         99:24:0a:90:09:d1:b4:a1:6b:d9:3c:5d:10:57:c9:e8:2f:43:
         60:93:20:9f:24:15:bd:7d:a1:38:48:9b:92:3f:1d:f2:3a:50:
         09:24:9c:24:d6:69:89:87:88:0b:6c:91:67:01:b2:58:59:18:
         1d:8d:bf:6e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUO6kWvle7YkFriMoG0X4KE/iIJBgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDIyZTA2OTAzN2M3YmRlM2UwZjllM2IwYTRiNDdhYWU5
YzU0NDU5NTlhZDEwN2EwZTkxZDFmMTllMDMwMDc1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCp4Vn7r8MnZKJM6x8NEElhcKB3WTT1jA2o2319OzABdPDE
fjKmlAMh6ofxfYueaVRxXW5iXeguA3/0BwJic2OkXC1C5X5kekoEW2GXJ8TzLe88
85gOlp2IDLkdHFnAI5TyAQ+AiHkjnaVcOLNt/JxC7XYJJum/NTA0a63QvbvC5Mk1
Zf1gmWxfBUyENsf7i0ayamQsMyXQ0rbtEGetm2mA1MCxbtspQXvp8M9ZEMp8y29f
AqtE/tuq0taYducgeGkbOlVAvFsfXorXXp/pjqRGU1O0FLPpe+63SsBKO+JRcYD6
QgUsDw/EmfIUtDnWsGHGoI7Ia4iqa3xxmze0MVN5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUTFbNhWoKtpqozpWxN4Wq0ZReE0wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ5N2M5ZjIzLTQ4OGItNDY0Yy1hNmEwLTJmOWNmOWQ3ZGFlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/ywIAwDQYJKoZIhvcNAQELBQADggEBAAqY95t5pe768t9lTflyBDfm
UtOPWJ+GzMm0pMaBFU6VU/FynppiskdQNQd0NuBV2ha8r4sfSnoTFX1XAtUnok8q
gAEhf4l3lw+uCs5ToJjil2cI+3gcqx4tJF0t6SiZmUtSTbtZOlOXXd0Taoj7vpgu
mc4m1NrfqUA4yWHNY+ZmwHfEAoNtUQJVqaV7uznarENTFkipcJaQVMOk/4d3t0xH
DWZ2Atks8EveMWXdQM98EBqXJYAO00hwNaf3LF6d5bZvwrN9Q5kkCpAJ0bSha9k8
XRBXyegvQ2CTIJ8kFb19oThIm5I/HfI6UAkknCTWaYmHiAtskWcBslhZGB2Nv24=
-----END CERTIFICATE-----