Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/524a55a9-3e01-4052-b470-4b0ca00fa09b.roa
File:                     524a55a9-3e01-4052-b470-4b0ca00fa09b.roa (raw, json)
Hash identifier:          Rl4GKIltQKxzYTwAixlmpVjau1yyPIDlVEqvUhtCsLc=
Subject key identifier:   09:C7:6C:76:6B:35:6A:67:91:75:D9:95:CA:47:9C:99:89:47:89:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4CD4B4F30B3786889744C163DBADB8B39E973942
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/524a55a9-3e01-4052-b470-4b0ca00fa09b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:a480::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d4:b4:f3:0b:37:86:88:97:44:c1:63:db:ad:b8:b3:9e:97:39:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ce893f39a259b2de2064e1aa7b7ee0e89021b892f83b45a3cc6fc0bd39b16d6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:30:12:f9:18:14:65:a3:22:f1:88:91:38:
                    55:ca:2b:56:67:80:d2:be:43:b9:d0:d5:af:e8:a2:
                    14:5f:c3:ca:b5:7a:ee:61:65:98:b0:a4:5b:ad:3a:
                    12:e9:5e:e7:eb:04:87:38:11:4b:d2:fd:a5:72:e1:
                    24:85:65:e1:79:e1:6e:74:78:b7:67:cc:1a:95:15:
                    97:cc:d5:af:53:88:8c:81:9a:07:8f:a6:55:9a:79:
                    9e:11:6b:12:b6:87:33:3d:b0:e3:ef:e3:97:2b:ff:
                    32:f3:62:12:c1:c4:29:cd:68:4f:bb:32:3f:b1:04:
                    1f:3e:d7:38:27:94:6f:59:e4:a3:07:e9:ba:bd:2b:
                    79:49:2c:fb:84:30:d2:bb:cf:54:2a:e6:d0:4d:e0:
                    dd:ef:d6:2f:03:0c:ff:62:de:14:db:98:5d:2d:28:
                    41:5a:ee:40:75:17:0d:dc:46:91:76:60:d3:92:73:
                    cf:7b:63:ff:76:72:9b:6a:fe:f7:95:20:0b:98:ec:
                    41:7e:de:6d:9f:db:03:91:f9:44:96:61:54:4d:e1:
                    c2:35:f6:d8:5d:46:b5:75:5a:b0:11:56:c6:da:80:
                    b8:21:2a:ab:cb:3a:98:d7:8a:c0:1a:bd:bf:e6:2e:
                    fb:0f:75:d4:94:83:de:d6:a5:b9:8a:30:77:99:7e:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:6C:76:6B:35:6A:67:91:75:D9:95:CA:47:9C:99:89:47:89:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/524a55a9-3e01-4052-b470-4b0ca00fa09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:a480::/46

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:6b:01:f8:04:79:a2:33:85:da:40:20:b3:50:60:7b:d3:
         c9:f0:9d:c7:72:c4:c8:17:5c:c8:18:1c:a0:d9:67:8b:66:8c:
         27:86:51:aa:2c:0a:08:be:6b:3e:ab:a1:c3:43:c3:30:59:34:
         86:0c:27:db:f9:91:3a:c8:7d:fe:fb:d0:76:86:b1:99:c4:dc:
         e9:63:1f:1b:7d:6d:6e:ae:db:b1:d8:bd:fd:77:a9:66:97:ad:
         3a:30:df:fd:4a:5b:67:a4:38:cb:88:60:71:c0:14:63:94:fc:
         aa:05:3d:79:c2:a4:9a:db:a5:9a:c6:f7:90:be:a1:c6:97:80:
         ad:3a:86:59:0a:23:0e:3d:b4:d0:df:62:b9:2a:33:10:b0:db:
         93:27:0e:93:64:dc:4b:f6:1b:42:af:35:23:75:ec:08:70:28:
         0a:c9:45:9a:7d:88:74:b5:11:de:eb:f6:ae:0b:6f:be:84:8b:
         ff:84:e0:69:62:ad:89:45:e4:cc:d2:2d:48:01:f8:ce:97:89:
         b5:5b:e0:94:db:ea:14:a0:53:f5:59:f5:a2:0a:bd:e9:92:ee:
         e7:c8:4b:0d:09:94:f0:33:6b:1d:e5:87:2e:e0:8d:09:74:2b:
         4c:3e:b7:f3:9e:88:2a:ff:07:ef:a2:ba:dd:b6:2e:8e:dc:ae:
         c7:a3:5d:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----