Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7a322b-9790-4bc8-bd49-493feaff35d5.roa
File:                     7d7a322b-9790-4bc8-bd49-493feaff35d5.roa (raw, json)
Hash identifier:          gEdZei9MYVj2B9BeaJNccnvYBM0XyU9ono9DpdU0yBI=
Subject key identifier:   F1:55:C6:18:AD:A4:34:EE:33:48:82:80:24:55:E0:14:87:79:D2:D4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       456A4C136DBAE8093882B604735CC714C6499FD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7a322b-9790-4bc8-bd49-493feaff35d5.roa
Signing time:             Tue 21 Jan 2025 00:00:00 +0000
ROA not before:           Tue 21 Jan 2025 00:00:00 +0000
ROA not after:            Tue 25 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff8:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6a:4c:13:6d:ba:e8:09:38:82:b6:04:73:5c:c7:14:c6:49:9f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 21 00:00:00 2025 GMT
            Not After : Feb 25 23:59:59 2025 GMT
        Subject: serialNumber=63b409bb3eb3d95714e35f24f6c1ae832db3354e342e15e1709efc238b0ae789, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:ba:75:39:55:61:2a:bd:25:a6:d2:9e:01:
                    b1:4c:68:f2:e3:a0:cf:fa:2a:ea:ad:b8:14:e2:2b:
                    f6:c8:fc:55:a3:50:7d:df:16:bb:1a:2f:85:3c:d4:
                    95:23:dc:7a:98:9a:8c:33:24:9c:c8:51:8c:41:b4:
                    e2:40:d5:eb:16:f4:88:dc:32:78:39:0e:b7:43:5a:
                    92:f6:0f:7a:e1:87:b1:a2:7d:28:5a:9d:24:d1:dc:
                    9e:4f:e9:b5:f7:da:5b:f7:17:82:0f:38:de:84:07:
                    83:91:f8:63:0b:0a:c2:a1:5b:ed:19:fa:1c:78:93:
                    5b:f0:06:0f:7a:71:3f:33:52:ae:f1:a3:4b:a5:48:
                    64:50:ef:17:f9:58:34:6f:5a:d0:96:28:ca:1b:c3:
                    0b:3e:58:e8:91:3c:fa:cb:12:17:44:2a:d6:89:e0:
                    8c:14:af:38:39:ea:2e:f8:08:cc:f9:97:47:5a:9b:
                    0c:7c:d2:03:dc:14:46:8a:e6:29:7c:af:ba:85:4a:
                    b1:bb:54:1f:cf:fb:17:be:e2:9e:8d:21:fd:45:0e:
                    d6:15:e2:1c:23:ef:ea:74:42:a7:71:36:53:82:a8:
                    00:2b:5c:44:e3:59:e4:7a:52:10:a1:41:a4:8a:ea:
                    d4:fd:19:3b:1c:19:2f:e0:43:1e:1a:91:09:5d:a7:
                    80:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:C6:18:AD:A4:34:EE:33:48:82:80:24:55:E0:14:87:79:D2:D4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7a322b-9790-4bc8-bd49-493feaff35d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff8:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:a2:d8:c8:20:7b:2a:54:e9:00:b2:c3:43:10:58:01:9e:
         fb:64:46:64:df:88:7b:f1:47:c2:9f:c5:84:4d:b8:30:f9:62:
         82:1a:b4:17:59:c6:db:67:cc:91:d7:12:6e:3d:c1:7d:3d:2d:
         19:9a:4f:14:cf:8c:7a:f5:dd:36:08:87:f0:81:fc:b2:93:09:
         51:a0:eb:8e:6a:60:46:0e:30:1c:cc:f2:1b:cb:c1:e2:16:2a:
         d0:c4:ad:e5:7c:a6:eb:c0:12:1d:87:d9:e4:ce:39:dd:f5:17:
         7f:f8:2d:f2:4d:87:64:1a:44:07:95:bf:a1:f4:1d:ad:45:17:
         67:1e:ff:93:a0:3c:9e:28:e4:69:73:3f:8b:f3:f2:6e:e6:1c:
         ef:38:9f:0f:00:29:b9:ad:61:10:07:ba:c0:4b:6a:ac:ca:77:
         74:53:2e:5a:4d:f0:43:e2:d9:2b:6e:9d:f9:95:cc:45:60:97:
         a6:23:b7:b1:a7:b5:17:32:ae:cd:0b:2d:51:e4:12:b6:c8:4b:
         f1:ff:62:31:fc:92:76:d7:20:5b:fa:ac:e8:3c:af:23:88:f1:
         0f:98:ac:97:4e:4b:76:89:96:83:03:cf:dd:7a:b3:8d:d9:6b:
         74:03:40:08:d9:1e:97:be:71:5d:ac:d9:e2:a1:03:82:bb:c0:
         6d:ac:b2:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----