Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5072283a-cc66-4ee9-811c-3b6cdb35f242.roa
File:                     5072283a-cc66-4ee9-811c-3b6cdb35f242.roa (raw, json)
Hash identifier:          XOLsxDgDyZdUfKXOq5m6XaquoyQmIOADGfiQJfcMKxU=
Subject key identifier:   36:35:FC:31:89:D1:B8:6A:58:0C:3D:69:79:0F:26:A2:03:BC:E6:34
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31BB29494C19980C239B667B2734AC737CFDA73B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5072283a-cc66-4ee9-811c-3b6cdb35f242.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:c080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bb:29:49:4c:19:98:0c:23:9b:66:7b:27:34:ac:73:7c:fd:a7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9dc7896b94868d307158cf3f99130dc9d064e4a167db7e789fe5b73da6399611, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b6:85:22:5d:20:0a:6d:79:ad:e5:7d:4f:a2:
                    10:9e:70:1f:b4:a9:6e:ca:88:b1:e0:2f:08:42:36:
                    ea:ed:f9:68:13:c8:ad:92:5e:0c:62:83:fa:5a:a6:
                    d3:1e:48:b3:f2:ec:4e:0f:5f:e6:fd:24:75:d1:eb:
                    cd:54:99:e0:77:13:8f:30:99:88:8a:7c:d5:f1:e0:
                    76:64:da:4d:3f:e6:78:46:e6:80:59:45:96:f9:d9:
                    8b:e2:74:37:a9:fd:85:4f:fb:d7:fd:1e:28:de:06:
                    2e:53:88:aa:8b:50:b3:bd:38:da:1e:02:b2:28:52:
                    ec:9c:5b:bb:44:aa:e1:57:70:ce:3a:56:60:a1:87:
                    5e:7b:0e:a8:d4:61:28:f2:2d:4e:99:84:7d:2c:a4:
                    6f:d9:0f:58:ab:7f:f2:d3:47:52:3e:b3:0e:53:46:
                    23:06:1a:13:b4:87:c3:76:84:2e:de:cb:54:74:b4:
                    33:bf:76:df:73:d9:87:6d:e4:43:60:8c:55:d1:66:
                    3f:b8:6b:1f:14:f6:e3:2f:56:f7:70:cd:22:7b:1e:
                    74:0a:a7:95:dd:fb:02:1f:2c:29:4c:e9:f0:cc:58:
                    25:ab:9e:c4:bc:1b:72:7b:6e:1d:1a:14:cc:5f:04:
                    ee:f4:e6:a9:c9:c0:1b:e3:74:f5:f8:3e:93:c0:44:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:FC:31:89:D1:B8:6A:58:0C:3D:69:79:0F:26:A2:03:BC:E6:34
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5072283a-cc66-4ee9-811c-3b6cdb35f242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:61:9c:c4:64:1b:05:73:2a:1c:d2:b4:e0:9d:fe:2c:e3:3c:
         ed:41:61:be:0f:48:8c:76:36:22:d7:b1:42:60:af:a3:f7:df:
         89:76:27:1f:86:4b:54:86:80:bf:c9:03:db:6d:59:c2:7c:e1:
         12:f2:3a:fc:44:12:8b:91:1a:cc:e8:8d:9b:ab:23:c9:47:15:
         55:27:6d:d2:49:cc:05:c1:95:7e:a1:e4:ed:e3:de:09:e2:24:
         ba:84:f4:cc:53:a0:8f:0f:07:35:f7:96:6d:73:7d:45:a5:60:
         e8:22:41:9b:a8:09:7c:37:4a:95:24:30:4a:39:ca:ac:31:81:
         16:63:9d:9f:1b:79:16:03:c1:44:0b:73:79:46:5a:2d:b1:a8:
         22:ac:27:57:e7:99:09:1c:9a:a3:e1:d0:5a:8a:69:f8:d9:10:
         a0:39:85:2a:62:88:46:20:5e:a8:fd:5a:4b:8f:21:7e:f3:8c:
         52:db:05:15:2b:ad:0e:27:87:0c:b3:7e:a0:e5:a4:f9:83:45:
         e4:e6:80:5f:c4:37:f4:ed:2a:af:9b:c8:8f:0b:63:5d:9b:fc:
         e8:15:16:ac:ec:40:4f:5c:8a:a3:15:1a:54:28:13:58:b2:2a:
         e9:b5:82:8b:a7:05:5e:5a:50:fa:42:4f:5f:95:3c:52:70:52:
         e4:f5:1a:02
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMbspSUwZmAwjm2Z7JzSsc3z9pzswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZGM3ODk2Yjk0ODY4ZDMwNzE1OGNmM2Y5OTEzMGRjOWQw
NjRlNGExNjdkYjdlNzg5ZmU1YjczZGE2Mzk5NjExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYtoUiXSAKbXmt5X1PohCecB+0qW7KiLHgLwhCNurt+WgT
yK2SXgxig/paptMeSLPy7E4PX+b9JHXR681UmeB3E48wmYiKfNXx4HZk2k0/5nhG
5oBZRZb52YvidDep/YVP+9f9HijeBi5TiKqLULO9ONoeArIoUuycW7tEquFXcM46
VmChh157DqjUYSjyLU6ZhH0spG/ZD1irf/LTR1I+sw5TRiMGGhO0h8N2hC7ey1R0
tDO/dt9z2Ydt5ENgjFXRZj+4ax8U9uMvVvdwzSJ7HnQKp5Xd+wIfLClM6fDMWCWr
nsS8G3J7bh0aFMxfBO705qnJwBvjdPX4PpPARH2hAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNjX8MYnRuGpYDD1peQ8mogO85jQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUwNzIyODNhLWNjNjYtNGVlOS04MTFjLTNiNmNkYjM1ZjI0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//wIAwDQYJKoZIhvcNAQELBQADggEBAHhhnMRkGwVzKhzStOCd/izj
PO1BYb4PSIx2NiLXsUJgr6P334l2Jx+GS1SGgL/JA9ttWcJ84RLyOvxEEouRGszo
jZurI8lHFVUnbdJJzAXBlX6h5O3j3gniJLqE9MxToI8PBzX3lm1zfUWlYOgiQZuo
CXw3SpUkMEo5yqwxgRZjnZ8beRYDwUQLc3lGWi2xqCKsJ1fnmQkcmqPh0FqKafjZ
EKA5hSpiiEYgXqj9WkuPIX7zjFLbBRUrrQ4nhwyzfqDlpPmDReTmgF/EN/TtKq+b
yI8LY12b/OgVFqzsQE9ciqMVGlQoE1iyKum1gounBV5aUPpCT1+VPFJwUuT1GgI=
-----END CERTIFICATE-----