Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
File:                     8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa (raw, json)
Hash identifier:          JYYGfJh4NuFGW3dQTmHPfgg3gEFtWByhHsWqwb+wFUA=
Subject key identifier:   22:E1:56:D4:60:91:2E:F9:75:C5:99:55:1A:75:BF:78:0A:C2:E2:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       31DECD99E5B40907A01FB161BC3F4F1557552E63
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:cd:99:e5:b4:09:07:a0:1f:b1:61:bc:3f:4f:15:57:55:2e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=a81f1c0836e9c08106a69428c0d68fc0e631e8e7ebdec104ebfd8013b3d71023, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:12:27:fd:54:b6:92:c9:8e:4b:46:17:f7:
                    83:7d:41:8f:b2:60:a6:89:b2:45:52:fb:bb:2b:67:
                    b6:f2:ee:1e:e1:d6:5a:c9:cd:e1:53:77:db:28:7e:
                    78:dc:f1:3d:80:8a:99:13:7d:87:0e:a7:42:a8:4a:
                    a0:75:dc:78:38:db:25:02:6c:42:36:3e:c6:9c:ee:
                    3d:0b:b8:2f:06:c6:36:e6:48:d7:28:80:be:6a:28:
                    d6:9b:98:ff:3e:43:f8:a2:bc:a9:70:a9:e4:75:8a:
                    1c:ba:9f:35:e6:b5:5c:7d:ce:dd:d9:47:cc:c8:e1:
                    c4:9e:ef:f5:30:2b:c6:57:49:5b:94:d0:2a:5b:08:
                    13:24:04:20:06:80:e4:0d:61:e3:79:1d:fc:bd:26:
                    cf:a9:cc:a6:fe:9d:f5:a5:57:bd:d1:e9:5d:7b:30:
                    40:e7:e3:0d:09:0c:1b:88:3f:d5:b9:f7:87:32:fd:
                    8a:27:d4:7c:6a:79:bc:74:01:e0:49:e7:58:ea:7c:
                    09:a4:24:a6:28:30:26:93:53:f3:d5:5d:f4:ad:f2:
                    0d:2b:d2:b5:c0:41:cd:58:57:62:be:82:b0:68:40:
                    8c:30:39:90:54:be:a3:87:43:77:b8:8b:1d:0e:ee:
                    e8:df:4a:0e:3e:b7:15:13:c5:7a:1b:a3:37:7d:c9:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E1:56:D4:60:91:2E:F9:75:C5:99:55:1A:75:BF:78:0A:C2:E2:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c837ec2-a674-4dd2-926c-0d3cdf6bb9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:43:17:7a:d8:e5:06:0a:14:1a:48:b1:f2:1e:0b:38:6e:
         f1:25:48:69:79:a3:fc:ba:42:68:8f:4c:3a:e0:c1:d1:30:42:
         78:f3:af:cc:4e:2c:5c:e2:75:79:b5:86:f0:a9:7e:cb:e6:c2:
         2a:d5:90:1e:7c:44:53:e8:02:c2:75:05:53:36:a6:71:2e:da:
         5b:62:54:72:80:50:d9:13:4d:ac:c0:2d:1a:c5:04:07:e5:12:
         c9:8f:64:63:d3:94:e2:e9:56:10:a1:5b:35:ae:fd:2f:78:f3:
         ad:12:43:f0:0f:85:df:16:cd:bb:78:a5:a1:4b:05:68:c1:98:
         2d:ea:6d:79:5e:4d:8b:ef:7c:07:19:a3:89:46:d2:3a:2a:72:
         ba:b9:aa:cc:f2:0c:5f:ef:a9:a7:2d:67:e0:82:da:ee:fa:2d:
         7d:eb:45:0b:c5:f7:05:f7:49:d5:05:aa:b6:10:b4:88:cf:75:
         ed:0c:10:b9:72:0f:bc:1b:a2:70:f5:79:db:51:46:cc:50:66:
         05:00:3a:c5:49:ea:25:7f:29:7c:fd:09:2a:8e:55:37:93:bb:
         eb:da:7f:7f:4b:13:a6:d9:ea:aa:68:fd:45:dc:f5:27:94:f8:
         86:27:3a:1f:cd:db:56:e5:f2:2c:2a:4c:ec:98:d6:63:52:c6:
         6f:c7:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----