Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca1d486-4012-4b98-8c35-1fa6c84de0c5.roa
File:                     5ca1d486-4012-4b98-8c35-1fa6c84de0c5.roa (raw, json)
Hash identifier:          g7Q5zYmAJ9C5mgnIESBUAxxuzsKZEZGINJkcsaTYfC0=
Subject key identifier:   74:62:0D:03:03:B1:C7:F5:3A:21:CA:AF:DD:C5:16:91:70:64:40:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       45560906E00F4B5DEAEAABF49C19AA33A6FCF05C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca1d486-4012-4b98-8c35-1fa6c84de0c5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:09:06:e0:0f:4b:5d:ea:ea:ab:f4:9c:19:aa:33:a6:fc:f0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c5a6c0f208e81217a75f11b2d7c949bde012d604799365130b42268a1b2577c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:ba:a7:fb:e6:0e:e0:ae:09:7a:4e:7e:07:
                    29:c3:0c:ce:81:a4:27:a1:c0:80:b8:94:2e:52:cf:
                    da:72:c0:77:bc:94:38:57:e4:2a:59:8d:e5:0d:c1:
                    34:0c:4d:d0:99:ec:40:92:e8:d9:af:74:6d:f9:6a:
                    b1:79:74:c4:ca:03:8d:f6:b4:79:08:41:0d:50:c3:
                    fc:76:5a:86:40:62:43:59:c8:ad:28:8b:3c:2f:0c:
                    c4:03:eb:b3:e2:b5:0f:79:f6:fd:96:7a:a5:8b:83:
                    5f:92:7d:36:99:6d:3c:9a:2c:53:86:e1:b9:e4:af:
                    91:47:32:70:e4:9e:61:61:36:06:2d:1f:69:2b:1d:
                    4a:bc:2c:7e:75:fb:c7:46:15:04:01:6e:9e:71:b9:
                    eb:97:94:da:7e:73:1d:9f:f2:e9:b8:95:17:d5:65:
                    6f:3f:bc:ce:71:e7:eb:57:dd:ec:ef:4d:2b:80:63:
                    44:aa:29:59:e8:f8:f0:fa:52:88:61:59:3d:6d:0d:
                    6e:d4:48:b9:b2:03:32:79:ca:68:8d:55:ec:53:72:
                    0d:32:5b:1c:80:48:b9:77:9a:60:e6:0f:66:dc:49:
                    17:73:65:4c:94:38:f8:cf:58:bc:57:9e:9f:d9:85:
                    0c:4d:3a:a0:3b:5c:9c:fd:0f:3f:9a:f2:40:e3:6a:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:0D:03:03:B1:C7:F5:3A:21:CA:AF:DD:C5:16:91:70:64:40:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ca1d486-4012-4b98-8c35-1fa6c84de0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:a2:0b:30:91:20:ed:7c:a0:ee:65:42:b5:ce:09:3c:86:
         30:16:56:fe:2f:b9:09:31:94:30:3e:f6:36:23:42:40:3d:64:
         1e:cf:06:a7:5a:7c:2d:90:9b:15:11:d0:f6:4e:73:50:be:0e:
         5a:75:a0:3b:54:a5:d2:a1:98:55:e1:0c:8b:d8:06:90:49:65:
         ea:fb:ed:9a:5f:94:8c:f8:16:f8:c4:8e:6a:e7:90:a0:2a:47:
         69:06:a2:1e:38:59:f2:3d:aa:71:d6:dd:3c:6e:c1:87:c5:a3:
         c8:32:36:1c:13:c6:0c:13:5e:4a:33:16:54:30:93:f3:c7:5f:
         01:d6:f4:78:7c:2d:14:48:cb:fd:4a:26:60:32:8b:03:41:a0:
         a7:58:ba:dc:6e:e9:c1:dc:9a:5d:cb:e1:af:0f:d3:46:22:c1:
         a7:37:d8:92:89:06:42:c5:8b:29:0b:6f:c8:59:2c:64:71:2c:
         0c:85:76:bb:e7:73:b7:b5:c3:7f:be:e0:23:99:ce:62:4d:a8:
         df:11:8b:11:af:f1:4a:41:26:09:c2:f9:fe:a7:8c:0f:c2:cd:
         7f:9f:34:a9:54:47:98:f1:36:89:49:2a:bb:13:9b:dc:03:77:
         68:3c:20:36:d9:7f:b3:27:d9:a8:29:57:8c:02:7c:f8:8b:7b:
         36:c4:2d:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----