Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa
File:                     854afe71-a47b-4f9f-8274-9f19c4431d15.roa (raw, json)
Hash identifier:          t/27L72fnP3Z3z1EkpUPmcznop4nsYChL4NQ/L4FgYs=
Subject key identifier:   59:F7:BE:CA:DB:36:E8:C5:C2:EF:63:5C:57:2B:C5:19:26:57:09:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FB8DBACCA5BF35FF118CA8EC3067E25945FB033
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f36::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:b8:db:ac:ca:5b:f3:5f:f1:18:ca:8e:c3:06:7e:25:94:5f:b0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=38a2ad174e3329fee097d2b829816e07b4814b057783b5a06c802f600a759575, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:5a:de:63:8f:26:bf:93:94:ad:3b:d7:82:
                    40:fa:ec:ed:a5:87:b0:e4:77:eb:f4:8c:71:07:14:
                    b4:71:c2:2b:12:15:bb:01:d5:52:4b:8f:00:12:81:
                    74:f9:60:18:04:07:92:7e:06:4c:d4:1e:20:52:f1:
                    36:8e:c7:32:e1:ad:33:ac:e1:c2:aa:94:1e:8a:74:
                    eb:de:f8:8d:5a:b2:d3:30:0b:2c:8e:9e:2e:3e:d7:
                    ca:e5:37:41:e5:24:fd:66:f8:fa:04:4a:6b:37:00:
                    34:50:ab:0e:54:35:6b:81:df:f0:1e:15:b6:42:6e:
                    dc:0f:85:8f:98:40:ee:f6:17:bd:2b:ad:84:1e:16:
                    e9:c7:0a:ee:ff:05:8a:87:96:e9:54:dd:bb:d2:94:
                    03:f4:4c:26:0a:d3:c3:77:69:ff:13:dd:23:99:2b:
                    31:8a:76:3e:4c:6c:dc:48:4c:76:a6:b3:08:88:6c:
                    27:bc:70:a6:1c:5a:29:24:5f:41:a1:ee:ef:f4:b2:
                    77:32:59:7a:0d:14:a9:fb:35:98:8f:fa:eb:5f:57:
                    aa:59:69:81:2e:90:5e:5c:6f:7f:72:6a:f1:ff:46:
                    61:4e:da:bd:dc:16:18:87:ad:78:e9:94:d0:d9:8b:
                    81:55:e8:ff:23:65:4a:ff:23:09:6f:ac:28:4c:b9:
                    d3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F7:BE:CA:DB:36:E8:C5:C2:EF:63:5C:57:2B:C5:19:26:57:09:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/854afe71-a47b-4f9f-8274-9f19c4431d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f36::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:7f:d7:c7:02:91:ee:ba:40:d7:b6:1b:40:b5:72:67:98:12:
         ea:de:dd:1f:19:18:39:cd:5e:6d:43:55:a1:49:80:dc:b8:c9:
         6d:47:ad:4c:51:14:b4:e6:47:72:ec:77:f8:63:18:ee:ec:25:
         39:e1:c2:de:57:19:7c:01:f0:1a:0d:c9:be:64:34:45:97:01:
         71:de:df:89:19:7c:64:3f:72:66:70:49:a8:e1:16:86:ac:c0:
         41:8d:45:e6:96:c3:2f:93:80:ca:35:f2:84:e9:57:56:3f:ac:
         83:98:fa:cf:b1:64:15:e7:e6:03:71:79:a1:59:02:b5:48:bb:
         71:61:7b:67:51:e8:8f:21:79:05:54:88:a5:1b:ff:6b:87:f4:
         9f:82:64:12:73:f8:c2:f6:b5:c9:3d:44:88:bd:24:cb:91:35:
         33:c6:61:7c:9d:3c:2e:49:69:d9:70:89:4d:b0:c6:7e:3b:26:
         91:ec:8d:b1:e1:56:12:03:60:3b:d1:5e:40:e7:6a:e3:54:0c:
         97:99:bc:dc:7c:c6:50:a3:92:fa:59:dd:5c:9f:f8:e4:41:6e:
         65:ae:36:ff:92:8e:4f:bc:a6:f3:22:17:d6:a0:92:bb:34:54:
         85:59:fd:c1:b6:e1:00:24:d4:b2:11:a0:25:78:92:3c:7a:19:
         23:e6:e5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----