Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
File:                     4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa (raw, json)
Hash identifier:          XzcA36dKepK75rS+0GA+DKeZIbscIRKM1Pfz+q2J/r8=
Subject key identifier:   06:E4:FC:09:52:F9:90:C9:BD:C9:F1:90:1F:CD:4C:8F:5D:39:24:1C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D75EF17C7D8135609B88B0A279FED06BCF0FFE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:ef:17:c7:d8:13:56:09:b8:8b:0a:27:9f:ed:06:bc:f0:ff:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=347b03e3f056bf2f459ffae2905f56a937994ec785b9fd20a4772066be4fddbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:7d:d2:b2:9b:66:4e:ed:aa:9c:1e:d5:05:
                    a6:89:9b:a4:52:26:10:18:ff:37:b3:22:86:b4:66:
                    01:77:d6:bb:2b:48:17:22:eb:c0:fa:5d:9c:8b:8f:
                    30:81:5b:ce:fb:11:eb:ff:c3:c0:58:e5:fa:a8:d0:
                    a5:25:d1:c0:64:92:80:05:e4:99:74:6e:2f:85:2e:
                    5c:40:61:7b:13:23:ef:c4:f3:ec:3f:6e:47:f9:01:
                    9b:7a:1e:e5:21:29:21:ef:c3:31:0f:93:e1:1a:82:
                    b6:21:51:a6:f6:bb:df:f5:10:ea:9e:67:13:53:3c:
                    0d:cd:59:e1:fe:d7:9b:51:bf:f6:70:01:ba:e4:f1:
                    c0:79:03:47:27:39:eb:ea:43:82:ee:3b:c9:a5:19:
                    fe:ad:4c:a4:2e:f0:61:7c:f6:24:a3:35:04:60:8e:
                    c3:0c:6b:56:7e:89:25:84:f9:72:19:ea:10:13:6b:
                    46:7d:94:64:25:42:67:35:ce:a7:bb:f1:ef:b7:47:
                    c3:b1:b9:9a:34:1a:6e:23:26:e3:6d:c0:95:a0:ea:
                    a2:1f:36:ae:2b:a6:34:1f:72:b8:3c:11:d6:8c:a3:
                    8d:4b:a7:9e:79:b9:66:4d:52:3a:72:e6:d8:d1:98:
                    f0:e8:9a:0e:f1:5a:86:a8:5c:39:13:be:f7:21:e6:
                    eb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E4:FC:09:52:F9:90:C9:BD:C9:F1:90:1F:CD:4C:8F:5D:39:24:1C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb1d45c-0bfc-46a3-97c6-d73b28cd8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:ee:0d:25:a8:98:35:90:3d:9c:f1:59:33:58:fe:d1:8c:84:
         4a:bf:b7:86:bf:34:5a:c8:bd:f1:c6:04:7e:34:8f:e5:33:75:
         70:e1:b5:61:f9:87:3e:b0:a5:a8:26:52:52:69:f1:09:4e:a1:
         dd:05:f9:b7:3d:59:d9:9a:55:39:67:57:78:0f:43:fa:17:5a:
         0e:2c:22:75:d3:15:83:75:b0:07:6d:83:50:50:56:e7:33:18:
         ef:4c:c6:00:87:d9:55:63:9c:6b:3c:09:12:ff:d3:d9:35:96:
         eb:5a:e3:5d:14:51:04:bf:75:85:59:b7:17:36:ce:cd:e2:62:
         c5:e0:26:23:86:42:ba:a4:78:ca:4c:21:89:87:10:6d:6b:b9:
         0c:f5:5c:cf:cd:7e:0c:70:bf:c0:99:fd:e5:5c:da:af:d4:ae:
         c4:88:f0:df:76:2a:56:a5:ee:11:4a:39:f1:2a:4c:17:e2:8d:
         c5:f4:ee:07:dc:47:90:10:d0:53:74:51:2b:28:e3:ee:c4:37:
         96:1c:ee:a4:97:05:18:d1:64:ab:f7:13:c9:5c:17:0b:6c:95:
         45:e5:74:ac:a9:5f:ea:56:92:33:44:c2:a4:c5:84:8b:d2:1e:
         6a:b7:f9:3d:07:bd:1e:ff:67:27:46:71:48:c1:da:d6:2f:f9:
         a2:cb:cc:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----