Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa
File:                     6aa2526d-ee97-4c2d-916d-28e097673aca.roa (raw, json)
Hash identifier:          WnaSdylrEKOOcA6r4EasmHMjvTnOVrNdKLvBJfa/yCs=
Subject key identifier:   CA:45:C9:C9:6E:9A:8F:C5:1E:1C:54:36:F7:C3:D1:29:2C:FF:9F:4D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0EC5EB15ECB4F29CC07CD72BC53409A333714D10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:a480::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c5:eb:15:ec:b4:f2:9c:c0:7c:d7:2b:c5:34:09:a3:33:71:4d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4e3b9d695aad9562563daeed20386c140c4d2b8912c379ccab1572600f37d758, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:a7:0f:aa:08:ec:de:07:27:34:5e:81:fd:
                    db:61:c2:68:28:76:56:b4:e8:1d:91:62:67:11:22:
                    89:62:24:14:00:cc:22:5b:91:87:6d:22:ec:3c:cd:
                    5c:99:f3:da:6a:f5:f1:6a:7a:f0:66:2f:ce:a2:41:
                    ac:96:ae:1b:a7:9d:6c:0a:ed:46:1e:47:1f:9c:95:
                    58:cf:ea:6f:50:59:2e:b3:e6:57:be:7a:7b:e1:5f:
                    ce:ad:a8:4c:2a:7f:61:2e:c8:19:d3:6d:cd:3d:09:
                    3f:41:9c:2c:08:e4:d1:2a:a9:dc:8a:26:51:1e:93:
                    2d:80:ce:a0:a7:66:92:07:cb:99:13:25:35:78:13:
                    b2:f4:8c:cc:fe:6f:b2:db:e9:33:7a:44:44:6c:b9:
                    8d:86:e4:1a:a7:1e:5c:b8:91:3d:1e:42:71:ce:53:
                    28:6c:eb:ce:0a:c6:44:72:04:87:99:ce:9f:2d:20:
                    f5:f3:3a:2a:76:7c:63:43:3e:d4:fe:5e:e1:88:59:
                    44:67:8b:18:70:ad:b2:d0:b6:ab:55:d9:f6:f7:5c:
                    97:bf:ab:3a:7c:65:11:d2:04:ff:37:f6:7f:10:31:
                    d6:dd:e4:10:eb:0f:83:f3:db:4a:d0:d0:c7:5e:5f:
                    d2:44:e9:75:2b:50:1d:58:e1:ca:ac:69:00:c2:51:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:45:C9:C9:6E:9A:8F:C5:1E:1C:54:36:F7:C3:D1:29:2C:FF:9F:4D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aa2526d-ee97-4c2d-916d-28e097673aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:a480::/46

    Signature Algorithm: sha256WithRSAEncryption
         a1:cc:0a:8c:be:8a:0d:c3:ed:e0:0e:4c:a8:55:6c:57:13:e2:
         19:41:92:20:b7:1a:ca:d0:d4:1c:37:c8:5b:27:c8:18:80:44:
         bb:68:1b:e5:1f:01:6e:18:06:28:d2:14:58:71:f2:6d:eb:e8:
         29:ea:0c:00:6b:55:9b:41:ed:40:09:5b:08:77:98:6c:78:fe:
         a5:aa:fc:79:50:8c:33:b8:56:e5:82:2f:b7:52:4c:47:a9:4f:
         cd:44:92:f5:31:87:7b:58:e4:ee:39:63:6b:37:b0:de:cb:4c:
         29:d3:26:78:ce:e7:ca:80:b2:b6:8a:57:0c:92:aa:6e:39:09:
         90:8f:b7:58:6c:e7:0d:10:6d:16:ea:02:68:5f:c9:07:d9:bf:
         fc:6c:18:b6:fb:e2:3d:73:2f:7b:fb:14:61:8d:96:9a:19:64:
         3a:3c:3e:7d:4c:c5:4e:3c:af:86:bd:f5:58:38:a1:8d:d5:92:
         6e:ba:46:78:62:e8:1b:3f:3c:2a:58:d5:e5:59:c2:31:3b:ba:
         56:32:71:b4:09:de:f7:09:dd:fd:99:70:89:0e:1a:31:b9:33:
         9c:fb:cc:3f:c9:a2:03:4e:0a:9a:e0:0b:aa:5f:34:cb:0d:5c:
         b6:9c:d0:95:30:b8:80:82:59:32:d5:c1:24:f4:dd:c9:7d:82:
         63:28:c2:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----