Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7cb2fe-12c9-4aef-bad8-c38e622ab639.roa
File:                     5a7cb2fe-12c9-4aef-bad8-c38e622ab639.roa (raw, json)
Hash identifier:          Lt1F5sri9fJ8WW1zSNwf8/NUBarO3a6Cm/vSPgSNok4=
Subject key identifier:   D1:88:D6:AF:F8:D0:2F:44:3B:D2:06:5B:25:0A:50:82:E6:95:3E:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45BF9230E0C8E9D3B299A0F5541598A3A298496A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7cb2fe-12c9-4aef-bad8-c38e622ab639.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f19:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:bf:92:30:e0:c8:e9:d3:b2:99:a0:f5:54:15:98:a3:a2:98:49:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bead3e489dff049d56245083baebc42caf759ad3cded0c0af3776d5625d0da4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:f5:a7:dd:7c:ef:62:ef:51:8d:3e:3c:e6:
                    05:f3:15:99:eb:3c:6e:70:97:5f:99:9e:cd:b7:74:
                    f4:12:6e:cd:e8:7f:ee:9d:7a:f9:66:37:c4:d9:53:
                    a1:cd:c6:57:58:c1:ee:e9:31:8d:3e:6f:6c:90:c3:
                    10:d1:ba:8f:17:72:d6:c7:67:60:a2:42:45:75:21:
                    b5:b4:f4:2a:c0:2b:2c:31:d1:a9:0b:d5:e1:08:a6:
                    9c:ed:7b:27:87:f1:1f:9a:6e:c3:3b:a1:7a:51:9f:
                    d9:08:88:d1:e9:02:00:a8:0d:06:1f:f4:28:03:b8:
                    68:a4:1f:9c:ac:ab:f1:cf:98:89:ae:56:94:86:bc:
                    e4:1b:91:e7:1e:df:96:75:ca:0d:4c:1e:49:06:30:
                    e5:5e:83:62:2f:f8:81:6e:9d:a2:a2:32:d5:9a:f5:
                    3f:d4:6a:f4:e6:47:47:a5:26:66:4b:c3:26:c7:09:
                    28:b4:02:b8:97:ae:35:a3:5c:1d:25:3d:f1:03:82:
                    d6:2f:16:ae:1f:eb:2b:86:42:fd:05:b1:c2:22:c6:
                    76:0c:b7:64:92:50:e4:c7:d1:ea:d5:2f:74:a3:d4:
                    11:7f:2d:8e:3f:94:82:c2:52:ee:08:66:92:f4:a4:
                    08:5a:74:0c:2a:f1:34:3e:e4:dc:f1:46:91:d6:48:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:88:D6:AF:F8:D0:2F:44:3B:D2:06:5B:25:0A:50:82:E6:95:3E:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a7cb2fe-12c9-4aef-bad8-c38e622ab639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:85:ad:c4:44:3e:db:42:d0:df:06:02:4d:2b:88:4a:b3:
         43:0b:8b:d6:2a:d2:2a:ba:2e:98:bd:1e:36:68:39:20:b7:c4:
         ea:9a:20:38:36:05:ec:23:34:6c:6a:53:40:22:20:0f:28:fa:
         3b:04:cc:c8:e4:c3:e0:47:e4:9d:fd:c5:30:8e:24:43:9f:a9:
         a8:b5:9f:d3:7f:93:95:59:43:0e:e1:bb:53:02:25:82:a8:de:
         13:63:ee:fe:54:b3:cc:92:34:e1:70:f6:43:18:ed:46:b5:db:
         66:c4:44:db:6a:cc:9b:9f:39:b8:09:8d:6d:aa:3f:92:c9:40:
         78:7a:12:a9:ae:fe:57:02:9c:a7:0a:8c:42:05:70:f5:c3:1f:
         2c:f2:76:ee:2d:4d:7a:53:42:c2:64:1a:b1:73:98:d5:0f:61:
         7f:4f:32:ba:6a:e2:33:24:3d:18:e0:b0:a7:e3:2c:da:85:4f:
         94:0a:a2:f2:fe:77:8e:1e:d6:c3:63:46:dc:cd:c8:03:76:ff:
         a2:19:16:ca:76:f9:32:21:76:89:7a:36:54:d4:98:a0:4b:cf:
         16:49:0e:da:83:d9:83:c7:96:2c:d7:af:fc:e9:0e:05:60:5c:
         00:bd:d6:7c:cb:04:3f:ef:9b:fd:ae:3c:73:df:66:ea:c4:5c:
         fd:de:76:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----