Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa
File:                     50067b5b-f740-4a9b-bfd2-118c40c9df68.roa (raw, json)
Hash identifier:          dtieH2xh+sTMiKXIxNrWi+CW0Ks18VNVR3aZor+6oGc=
Subject key identifier:   E4:C6:C7:CF:55:76:F9:89:52:47:6A:8C:A8:B0:C1:F5:89:10:F6:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5C9647C8DC55ECA5F6E7EF2D407D5D270C1ECF8A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:96:47:c8:dc:55:ec:a5:f6:e7:ef:2d:40:7d:5d:27:0c:1e:cf:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=89892acc6c226e03a4ecee803f08f72c62fe0dd71201bd27902fa6d844912594, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e5:3d:a5:1f:ef:7f:ca:cf:bc:23:8b:97:3c:
                    59:a1:b1:15:1e:58:e2:27:62:ab:24:ac:61:64:71:
                    9c:cf:dd:3a:f7:26:39:51:93:ac:bf:0c:97:b2:de:
                    2d:0d:5b:cb:f3:66:93:81:65:55:bb:d7:78:81:e3:
                    93:36:c1:85:4c:87:ff:a7:78:a1:50:6d:74:b4:bf:
                    01:5b:db:3e:4f:85:14:63:a1:2e:75:20:a5:7e:26:
                    9c:07:e9:56:e1:0e:bf:9d:2f:e0:d9:72:25:07:02:
                    2c:de:e7:ed:57:3a:f5:f6:ba:fa:61:33:8c:bb:25:
                    a2:57:13:12:d0:06:20:ab:f7:50:ea:7a:4c:c0:33:
                    f1:0d:df:92:ac:bb:ca:2f:f4:3c:8d:75:10:48:9c:
                    7a:ad:dc:56:85:04:e8:9a:77:55:b4:d0:20:58:d9:
                    6c:14:25:6f:d9:cb:0b:9f:64:92:78:9b:27:d3:f8:
                    44:46:c3:e3:56:f7:da:3f:f2:06:3f:29:2a:f9:b1:
                    73:97:de:4b:60:e4:9b:3e:08:62:7b:5c:6a:56:6c:
                    52:36:52:fb:e1:b8:68:00:74:01:59:aa:d6:cc:b7:
                    ac:46:69:ba:6e:13:fc:dc:3a:3d:fe:da:5e:fd:e0:
                    7b:9d:50:be:58:ce:37:b1:d8:74:ec:cc:b6:66:34:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C6:C7:CF:55:76:F9:89:52:47:6A:8C:A8:B0:C1:F5:89:10:F6:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50067b5b-f740-4a9b-bfd2-118c40c9df68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:b1:ab:e4:0f:a5:53:d5:5c:70:24:7e:f7:7e:f1:9f:cb:
         4a:8d:ae:58:0e:fb:b1:3d:48:75:89:ce:52:de:ba:b2:21:aa:
         23:fc:62:20:5d:47:58:ac:4a:0f:b6:c5:40:9d:42:22:fd:99:
         4d:e9:0f:51:39:50:02:21:a2:b1:89:82:12:dc:ac:c7:61:e5:
         55:c8:22:61:84:62:9b:0b:71:50:c5:59:04:f3:b1:4c:9c:d4:
         80:35:93:a4:6b:17:d1:7c:73:7d:ba:ab:4e:76:e9:57:18:86:
         b0:ff:ae:31:cc:f2:20:54:98:fe:7d:70:7a:13:08:89:24:3f:
         9b:42:38:d8:c1:c0:5a:25:02:f1:97:23:f2:ac:1b:40:70:96:
         14:b4:39:1a:e0:63:b5:47:1c:20:3c:08:e2:b9:9a:7a:11:81:
         8e:00:23:d4:ff:1e:07:e1:d2:ba:f9:d4:be:f2:66:8d:88:32:
         8b:49:99:01:6e:03:5e:3e:2b:49:e0:1d:f0:2e:13:be:06:33:
         4c:ec:cf:33:24:b1:1b:7a:38:79:1a:c6:75:ec:ec:10:a6:5a:
         81:b1:6b:ca:d6:a9:39:99:23:39:09:06:57:39:ad:8f:95:cb:
         69:6b:b8:71:b9:21:39:7a:ae:06:d7:fe:4b:17:d7:d7:b8:62:
         74:47:0e:00
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----