Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa
File:                     87972863-6bed-4fd0-8654-ba8d4fa79897.roa (raw, json)
Hash identifier:          EDJaulrxqdjD9+iKx+DBLH7Y1Cc9xVObYmZLAO4MEUg=
Subject key identifier:   2B:20:32:2F:3E:7E:14:02:73:D1:60:4F:7B:6E:DE:F5:5A:7A:9E:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       46FD0DD1281EB10161E4CF65A91273292352FFF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:8000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fd:0d:d1:28:1e:b1:01:61:e4:cf:65:a9:12:73:29:23:52:ff:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=59b27303c691b343197ed120ac54376292591dab23f8defe58d44d24e4502a36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:8d:25:63:67:11:25:d4:93:d3:18:be:45:
                    a5:c3:54:13:7b:17:e3:80:c0:50:a0:5d:ce:60:69:
                    13:a1:aa:93:fa:9c:cc:40:b4:01:df:19:4c:ed:06:
                    df:48:95:50:43:18:22:a6:41:e5:03:97:76:fe:c4:
                    43:a6:37:dc:19:1c:b3:e6:7b:3c:36:f6:54:5a:0a:
                    a4:93:56:6e:40:1e:9d:8d:26:09:50:53:07:de:1e:
                    8b:c5:ef:30:cc:62:85:11:82:99:c8:be:c2:ce:a5:
                    b5:b4:2f:a5:db:80:6b:68:af:0b:9d:7d:b9:03:c5:
                    f4:92:63:4a:0b:0f:51:14:9a:24:b8:ac:66:76:6a:
                    26:bf:41:7c:22:97:76:4d:76:ec:60:82:03:04:2d:
                    1a:fc:27:50:e0:74:50:2e:12:fe:11:97:c8:c5:17:
                    67:31:23:a2:5f:57:34:d4:3e:45:0c:0f:77:ae:cd:
                    c9:16:0e:90:40:81:1c:62:88:3e:53:d9:8f:05:04:
                    b0:9b:9d:05:b4:e6:43:ad:10:8b:f3:56:10:f1:f6:
                    66:63:63:6e:86:07:c3:be:86:c9:96:3b:19:d6:17:
                    91:60:d4:65:9f:18:e0:48:80:c4:eb:53:2c:5e:9f:
                    bc:de:89:aa:9d:4d:c6:a9:b4:7e:58:30:61:ef:92:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:20:32:2F:3E:7E:14:02:73:D1:60:4F:7B:6E:DE:F5:5A:7A:9E:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87972863-6bed-4fd0-8654-ba8d4fa79897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         70:04:3d:19:4c:1f:9a:fa:24:9d:e2:dc:b1:be:75:95:17:c0:
         e7:7a:38:54:73:0a:60:de:74:75:97:01:a9:5b:ce:69:53:b0:
         24:f0:b6:c0:5e:cf:80:fc:0d:f8:20:a2:99:df:18:17:5d:3c:
         27:34:2f:16:28:99:f9:a7:e9:f0:12:74:87:b9:0c:0e:3e:20:
         08:94:c4:7e:c6:4e:b9:3e:91:a2:21:65:dc:38:c7:3d:9b:ef:
         c6:f6:77:ba:01:34:53:3a:0b:a6:1d:fe:d6:84:90:94:1b:44:
         84:36:bb:d4:fc:93:f5:9d:b2:e3:59:66:93:6a:98:66:93:a1:
         ca:27:6e:b1:63:a5:ad:49:3c:ab:58:12:14:29:19:71:b2:ad:
         41:2c:9b:9f:ca:6d:4b:e6:75:94:5e:ff:c0:e8:36:a2:93:df:
         b7:25:09:a1:03:f3:7f:0b:e6:2a:18:ad:8c:4b:8c:15:30:e1:
         89:af:7d:8c:0b:2b:c6:32:f6:0c:7b:23:b4:1b:16:c9:0c:3d:
         6f:34:16:ae:90:20:9b:23:8f:5f:85:33:eb:e3:ab:da:b4:f2:
         e6:f0:2c:52:45:57:ed:63:0d:7d:d4:48:32:9a:84:19:9c:30:
         11:cf:1f:82:de:5f:f7:57:60:3e:e1:67:65:b6:5e:f3:cb:a3:
         a1:25:01:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----