Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56f11abd-0052-434e-880c-8ade7ebcfa04.roa
File:                     56f11abd-0052-434e-880c-8ade7ebcfa04.roa (raw, json)
Hash identifier:          W4PMwbq+ZtnjIYAxrR8+jssNH0k2UHnQXbuan4viIi8=
Subject key identifier:   F3:EE:E4:3B:A8:B2:49:4A:D9:5E:B4:FB:EA:AC:08:AF:7B:D9:34:66
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       677B38FCCD1412BE72DADD2687E486CE3E88667E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56f11abd-0052-434e-880c-8ade7ebcfa04.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f16::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7b:38:fc:cd:14:12:be:72:da:dd:26:87:e4:86:ce:3e:88:66:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=05348e097c9640f91601842ff306513b51fc9a9cfb00f8718303654e5e50e687, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:a5:01:c6:b3:da:13:9b:0e:80:7d:67:e1:
                    3d:0d:72:83:7e:de:04:c3:92:06:b9:6d:6c:ca:db:
                    0a:42:44:84:fd:2e:9b:ea:48:1e:ed:fc:12:79:cc:
                    b0:30:83:81:2b:c3:c9:bd:fe:f9:38:f3:14:2a:25:
                    b0:0e:50:a4:15:61:7d:5c:3a:83:22:ab:2e:5c:76:
                    9d:82:ab:39:63:7d:c6:6a:bb:20:64:63:9e:bc:e8:
                    14:90:db:50:4f:c6:0e:35:36:f4:44:a8:e2:aa:d4:
                    5f:9e:e0:2e:e5:3d:08:fb:f4:8f:b7:55:23:25:e7:
                    3b:a6:b4:d7:04:d5:d0:8e:37:7e:2d:35:08:04:25:
                    6a:8d:cb:5c:a9:9d:82:ab:c1:47:0c:59:ee:3e:f5:
                    de:8d:57:48:17:cf:de:c7:5b:a5:87:86:89:12:04:
                    00:2d:70:5e:18:89:42:dd:90:94:ea:65:39:5f:a6:
                    e7:32:a0:5f:75:6d:6b:36:00:6f:50:32:b4:3d:fe:
                    3d:62:8c:7d:75:f4:83:61:eb:e4:3e:0c:52:be:52:
                    7e:e4:53:bd:ad:ae:20:58:9c:93:f0:b0:98:21:13:
                    94:21:43:46:ca:13:bc:05:51:6b:1b:9c:32:3c:f8:
                    da:39:a2:c9:7d:c4:31:bc:d6:05:ce:6d:76:43:d9:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:E4:3B:A8:B2:49:4A:D9:5E:B4:FB:EA:AC:08:AF:7B:D9:34:66
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56f11abd-0052-434e-880c-8ade7ebcfa04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f16::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:51:11:b1:0a:10:d8:59:3c:38:eb:e0:22:26:c8:87:85:
         c4:d0:72:d3:ed:43:d5:2f:e9:39:3f:b9:b0:ee:0b:19:97:a5:
         c3:a1:ff:e4:30:9a:01:40:04:76:fc:ee:21:fc:98:c0:ba:ed:
         c2:11:44:5e:18:2c:82:f0:ad:f2:2e:f3:4e:30:e0:69:31:d4:
         bd:53:59:9c:e6:f7:8b:93:55:4f:ca:2e:d0:8f:ee:95:eb:5b:
         d1:9a:24:2b:d3:a5:79:17:7a:0d:3d:4a:e6:d9:65:22:f2:f2:
         2a:b9:b2:fa:fc:83:6b:8c:eb:02:1e:93:8c:89:fb:bb:0c:84:
         ec:e3:4b:6e:10:30:c1:42:bb:bd:38:35:39:91:d6:a1:9a:7d:
         24:0f:44:6f:e2:a3:a6:c2:b6:65:d2:3a:d5:64:db:fa:f0:13:
         4d:19:85:37:6e:ba:60:55:d9:ec:1e:c9:13:23:09:fd:cc:c0:
         ed:99:ce:63:ab:9c:3a:02:81:61:15:c9:21:20:26:7c:08:76:
         4d:e7:38:06:f4:4e:0f:c3:93:64:26:f0:54:94:f3:cf:0a:7c:
         62:d2:39:cb:40:ef:c1:28:d2:16:c3:c2:8f:b1:3c:ce:62:c9:
         4a:1a:26:8d:b7:63:05:fd:4a:b8:4a:20:1d:00:0a:0e:96:55:
         c0:3f:2a:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----