Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
File:                     559ec5d8-71af-4698-80c0-cf55c18e4e61.roa (raw, json)
Hash identifier:          ejGwFsw2XyNTpSnIVs1ZL4y7i5SyKW9sKafz5rEIpPA=
Subject key identifier:   D5:E4:FF:F7:10:55:99:61:66:28:B9:6D:F8:5C:6A:75:E8:9F:80:F4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74812EA8646B68D96A15C3F8220A18DDEDEAF829
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1a:4c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:81:2e:a8:64:6b:68:d9:6a:15:c3:f8:22:0a:18:dd:ed:ea:f8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=2ca81a43a9e640758b79b1d3fcf2700d0cc39fba51c96b1e9498ce3bf837430e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:b7:58:ec:8d:63:fe:64:a2:ef:7e:aa:2e:
                    ff:89:61:c0:bc:b3:5d:b1:8d:66:82:f5:60:42:7f:
                    8f:76:ab:02:71:17:86:d4:20:b7:c9:df:fd:bc:f3:
                    9e:bb:68:a4:4c:45:09:d1:94:ef:e5:44:5c:e4:5a:
                    3f:73:eb:c7:61:f2:5e:95:c8:82:43:6a:d8:9e:41:
                    d1:ad:60:a9:f4:d6:34:9b:73:81:02:bd:0f:ac:5f:
                    ea:8b:17:0e:fd:d5:df:32:d2:75:6a:33:8e:f6:92:
                    a2:67:1e:49:9e:a0:da:1f:67:fc:dd:e0:ed:68:d3:
                    a1:c9:71:fe:cc:ed:ae:7b:2e:9e:d4:e1:6a:a9:6e:
                    05:13:e4:bd:fc:8b:28:39:2e:ae:ec:0d:8b:85:a6:
                    f9:74:3f:1d:62:8e:f7:fb:27:06:5e:2e:a2:e0:a5:
                    ab:f5:76:f7:a7:00:25:9d:69:02:26:52:21:ec:19:
                    5e:19:17:b0:fe:3c:d6:47:ce:cd:ec:e5:45:42:f8:
                    85:25:41:fd:2b:09:b2:19:ec:a3:09:2f:8e:91:79:
                    57:4b:12:04:a4:9a:3e:aa:e3:51:e8:1a:da:bc:af:
                    9c:1a:a7:c3:30:69:83:b1:0c:95:8e:22:2a:8e:54:
                    22:4a:38:41:2f:09:51:3f:5f:33:d9:55:c1:09:6a:
                    2e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:FF:F7:10:55:99:61:66:28:B9:6D:F8:5C:6A:75:E8:9F:80:F4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/559ec5d8-71af-4698-80c0-cf55c18e4e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:4c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:6a:c2:0e:fe:e6:93:f4:66:e7:5f:6e:23:b3:96:4d:9b:
         21:d1:68:a2:2c:c4:ae:ac:bc:e7:0f:06:48:a5:f5:08:35:19:
         1d:d6:f4:42:b7:e1:f2:4d:2c:7e:4f:58:31:cb:c6:5a:42:ed:
         14:7f:ed:e5:45:8f:28:b1:b8:ed:b7:99:8b:72:6b:3a:9d:d9:
         72:40:88:6b:95:6b:e9:65:83:ab:30:b3:88:c6:88:7b:7b:10:
         a1:55:56:0a:4e:22:62:62:62:c5:2b:3b:16:16:4c:c1:55:92:
         ef:8f:ef:d2:35:a5:d5:00:5d:d6:5d:cb:cf:69:8e:22:db:7f:
         f5:0f:7e:a7:58:02:86:db:31:3d:61:6e:f3:c7:38:55:5c:5f:
         d4:96:a8:56:bf:9a:13:43:c6:cf:ce:44:78:8a:63:5c:ed:b9:
         33:9e:68:f2:99:4a:83:2f:17:f2:17:7c:cb:84:a3:e2:40:77:
         15:c5:7d:ec:fb:12:34:cf:28:80:36:81:12:74:e4:77:c8:cb:
         71:30:16:88:78:be:cd:7a:dc:60:37:e8:71:2a:cb:1a:51:f4:
         ef:58:9a:03:fb:00:08:1b:19:b8:7d:c1:57:3f:f5:a1:fa:d0:
         76:bf:d9:07:d5:57:05:c4:71:6d:b3:70:33:f6:44:d9:cf:f2:
         b0:38:9a:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----