Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa
File:                     8abeef96-6bb3-461d-ba23-da389d854132.roa (raw, json)
Hash identifier:          XRnH9a8BwR4tvFFLiTAhupnPZ2lD+RDoei+UYcK2gMc=
Subject key identifier:   64:9E:E3:F1:9C:B8:1D:32:A2:31:17:88:3C:EB:A0:52:29:A7:E3:45
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AE584D3EC5ABB2114C4B0E1857F6A4D9DC7A19D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff2:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e5:84:d3:ec:5a:bb:21:14:c4:b0:e1:85:7f:6a:4d:9d:c7:a1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ee3268163c6eb84468e3337a62ed7b4627f7d65e8b4c5746647ccc5bc2b4bb50, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fc:e3:8f:5d:50:98:55:4e:8a:31:0c:30:be:
                    28:84:04:8f:88:4e:da:83:7c:2e:6e:f9:24:d9:6c:
                    53:f3:69:0f:c0:5b:77:c5:ef:47:7d:7f:e3:95:35:
                    78:d3:4f:ce:17:d3:e5:e7:c4:68:0c:bb:05:48:19:
                    5f:dc:21:88:4c:2e:73:b8:29:0c:77:38:f3:41:90:
                    ef:2a:42:82:1b:bc:17:d4:a1:86:08:a8:60:1a:08:
                    10:59:9c:3f:c6:2e:eb:04:7a:18:6a:df:89:b3:74:
                    9a:6f:f7:e1:c7:46:13:ee:bd:0d:6e:11:12:85:02:
                    43:4c:a6:c5:a5:0f:d0:6d:1c:13:a7:b4:6e:f6:0f:
                    d9:42:e4:aa:c6:1f:91:53:a8:55:1c:ad:61:8b:46:
                    cf:7b:c0:05:af:9d:98:ff:e8:31:43:ec:b9:84:c0:
                    43:cb:e5:69:c7:5b:c7:2e:2e:11:02:7b:4f:51:9e:
                    ee:66:35:d6:22:63:1b:bb:2e:b5:86:36:20:dc:86:
                    80:69:f4:f9:fb:b4:49:35:d1:3d:f2:ac:a3:e1:62:
                    fd:c8:f7:6d:78:35:1f:7b:a8:33:83:32:e6:94:5d:
                    a9:51:6d:ef:c8:3d:3b:0d:b4:ce:2f:94:48:27:5b:
                    84:82:b7:b3:2e:78:70:5d:40:49:29:08:ee:a7:81:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:E3:F1:9C:B8:1D:32:A2:31:17:88:3C:EB:A0:52:29:A7:E3:45
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:79:aa:73:cb:da:97:a3:67:c4:89:c3:e8:c1:15:02:95:61:
         06:9d:7c:e8:09:0d:a3:9f:4c:cc:93:f7:f0:5f:4d:a7:a7:70:
         73:d7:5d:42:4e:11:c4:a7:d8:4a:2c:88:b2:a1:35:3e:1d:91:
         f7:a1:5b:61:ec:ee:17:74:ad:f2:59:50:ac:8c:89:c8:3c:9d:
         33:2c:7c:7e:1d:d8:5c:04:ec:76:56:76:53:0c:22:26:62:56:
         72:2e:a2:3b:94:b1:00:94:a7:7d:ce:26:fd:2a:95:df:27:88:
         e1:d4:f0:a5:2a:41:d4:c1:f6:37:46:c8:97:4d:a7:51:6e:13:
         87:29:01:8d:ed:70:e6:a9:66:ae:71:7e:fe:df:55:51:1c:f4:
         5a:86:db:3a:26:9a:99:87:75:07:a6:ee:bf:1e:3b:00:6e:f5:
         51:ab:18:9c:eb:5c:78:22:ac:d7:c1:af:fb:6a:da:81:1e:db:
         35:33:10:ed:4e:47:4a:d8:87:3c:55:90:a0:45:ff:40:41:9a:
         ff:80:63:1d:88:66:a0:fa:6e:a7:03:0e:8c:4c:6c:02:8f:ab:
         64:f2:3c:5e:95:56:b2:5d:d6:a0:cc:4f:f7:c4:83:26:3a:d1:
         31:ed:3b:a6:5a:c0:8d:f5:8b:9c:62:54:c0:87:34:ae:4e:68:
         7b:7d:61:b6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWuWE0+xauyEUxLDhhX9qTZ3HoZ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTMyNjgxNjNjNmViODQ0NjhlMzMzN2E2MmVkN2I0NjI3
ZjdkNjVlOGI0YzU3NDY2NDdjY2M1YmMyYjRiYjUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCe/OOPXVCYVU6KMQwwviiEBI+ITtqDfC5u+STZbFPzaQ/A
W3fF70d9f+OVNXjTT84X0+XnxGgMuwVIGV/cIYhMLnO4KQx3OPNBkO8qQoIbvBfU
oYYIqGAaCBBZnD/GLusEehhq34mzdJpv9+HHRhPuvQ1uERKFAkNMpsWlD9BtHBOn
tG72D9lC5KrGH5FTqFUcrWGLRs97wAWvnZj/6DFD7LmEwEPL5WnHW8cuLhECe09R
nu5mNdYiYxu7LrWGNiDchoBp9Pn7tEk10T3yrKPhYv3I9214NR97qDODMuaUXalR
be/IPTsNtM4vlEgnW4SCt7MueHBdQEkpCO6ngRvhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZJ7j8Zy4HTKiMReIPOugUimn40UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhYmVlZjk2LTZiYjMtNDYxZC1iYTIzLWRhMzg5ZDg1NDEzMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yIEAwDQYJKoZIhvcNAQELBQADggEBAA55qnPL2pejZ8SJw+jBFQKV
YQadfOgJDaOfTMyT9/BfTaencHPXXUJOEcSn2EosiLKhNT4dkfehW2Hs7hd0rfJZ
UKyMicg8nTMsfH4d2FwE7HZWdlMMIiZiVnIuojuUsQCUp33OJv0qld8niOHU8KUq
QdTB9jdGyJdNp1FuE4cpAY3tcOapZq5xfv7fVVEc9FqG2zommpmHdQem7r8eOwBu
9VGrGJzrXHgirNfBr/tq2oEe2zUzEO1OR0rYhzxVkKBF/0BBmv+AYx2IZqD6bqcD
DoxMbAKPq2TyPF6VVrJd1qDMT/fEgyY60THtO6ZawI31i5xiVMCHNK5OaHt9YbY=
-----END CERTIFICATE-----