Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583193bf-59e4-450f-b717-73d6b6b59d9e.roa
File:                     583193bf-59e4-450f-b717-73d6b6b59d9e.roa (raw, json)
Hash identifier:          3elRXKJQThGdE4LD0/az5fOP/UpRglUTJQuyl+ARltY=
Subject key identifier:   65:A3:AE:F9:5C:DF:61:04:73:35:1A:D0:5E:9C:E6:E2:E1:18:0E:A0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03D90D78784B97DCBBD1A2DC3BFB12E7F895B3F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583193bf-59e4-450f-b717-73d6b6b59d9e.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:4000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d9:0d:78:78:4b:97:dc:bb:d1:a2:dc:3b:fb:12:e7:f8:95:b3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=a2f6830abd983c9218f05554155c9b8f47f4aeb0747413e471f07aceee0ac4a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:07:28:13:6b:c7:c0:70:71:84:c1:c8:d4:
                    ad:f0:18:aa:3c:3e:52:3b:e7:a6:8b:b9:6e:ae:b2:
                    2a:f5:3c:d7:0e:81:34:2a:0a:78:48:8e:d4:d3:39:
                    d7:db:02:66:09:b7:79:30:96:2f:12:39:35:af:12:
                    40:a4:e5:0e:db:f5:4f:46:a7:4a:71:3b:69:b5:33:
                    39:7b:af:48:8e:ec:66:e1:d6:7b:a6:e8:dc:70:5b:
                    b1:f6:53:6b:d2:10:14:bb:05:0d:78:3a:30:47:2d:
                    61:f1:c8:5a:56:8a:95:f2:e2:11:59:e4:32:fd:bf:
                    65:4b:ac:af:13:25:aa:a9:82:c7:27:d2:83:14:0a:
                    03:df:74:0c:7a:10:bf:20:71:f8:1f:3a:34:c5:5f:
                    56:18:8e:e6:1b:53:24:20:4e:d6:a1:f7:28:6b:cd:
                    ed:de:44:9e:c3:6e:01:be:ca:73:44:5c:b0:2d:a2:
                    81:eb:f1:d3:2e:dc:ec:36:f2:0f:9c:1b:38:ce:d5:
                    d9:d6:6b:5b:b4:a6:c9:98:f7:32:55:bf:ac:69:e5:
                    27:28:e4:3e:72:a0:9f:95:82:b7:b8:52:4d:29:34:
                    dd:73:13:ad:41:de:f0:e2:9a:94:16:ac:77:cb:46:
                    01:92:aa:c2:15:c4:2d:f5:3e:ae:d4:e3:3f:e7:b6:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A3:AE:F9:5C:DF:61:04:73:35:1A:D0:5E:9C:E6:E2:E1:18:0E:A0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583193bf-59e4-450f-b717-73d6b6b59d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         18:0b:dc:c7:8d:96:4b:65:57:9e:18:21:28:7e:a8:4d:4d:83:
         c3:a2:d1:a7:1b:f3:cb:84:18:0f:f0:a6:b0:58:dd:2b:66:a8:
         49:b5:94:37:77:7c:bb:97:6c:bd:cf:e9:51:c0:cf:f7:80:8c:
         df:29:af:d1:5c:69:af:9d:b3:61:5b:a2:dd:ba:44:31:a1:8d:
         a3:a8:64:b6:2e:d3:95:f3:f9:e5:00:ac:8d:0d:8f:63:71:4e:
         bc:40:0d:60:24:2f:87:e2:1b:92:c6:96:a7:fc:a1:4e:1a:7d:
         36:f7:ba:c3:92:49:08:b0:54:0e:2d:5c:a0:69:0e:3d:c5:f0:
         07:0e:c5:76:70:a7:00:87:39:7e:e9:a2:6a:17:a2:91:be:d4:
         d5:79:d4:13:07:28:35:98:3e:4f:f8:73:88:5b:9d:52:ac:06:
         b6:a5:5d:0d:73:d8:88:93:28:6a:db:24:bc:48:99:ff:86:aa:
         92:b8:8b:77:3d:cd:96:c6:8f:0c:9e:97:80:ac:c1:12:2d:3e:
         93:38:3b:6d:2e:a5:f5:75:63:6e:1e:1f:8d:96:1d:78:a8:8a:
         ab:bb:db:ea:ae:f4:3c:34:c8:75:f2:b1:a6:97:6a:26:0c:bf:
         a0:15:e6:6a:f7:ba:14:bb:66:e9:16:f4:04:57:ae:ee:cf:86:
         35:1c:41:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----