Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa
File:                     94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa (raw, json)
Hash identifier:          nkoL0oSpMQ6KrYBS6ShdB8nksS5ctHIXT32jwiG9P0g=
Subject key identifier:   6F:48:CF:B6:ED:5C:1A:FC:2E:39:AA:52:1B:39:7A:8F:BC:8E:41:AE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4A8A575F1DB829CDEC9929C46832C4ADECDD4286
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4001::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8a:57:5f:1d:b8:29:cd:ec:99:29:c4:68:32:c4:ad:ec:dd:42:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=802252fdbd91223b816d54434de6226570403d7a72e68a29a012b4f316696823, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:75:03:c9:a3:64:61:f6:60:af:48:66:93:
                    74:d2:7a:6b:6f:dd:05:f5:5a:fe:ad:7a:60:56:59:
                    00:0b:f6:03:f3:b7:c3:a9:43:7a:1f:74:54:99:11:
                    85:ec:86:b9:05:19:49:32:d9:d3:1b:b3:47:97:a5:
                    b0:3a:6a:a2:5e:12:82:8d:42:1f:b6:b3:88:84:74:
                    bf:e2:8e:04:ee:f6:7b:f4:22:f5:af:26:96:55:39:
                    d7:26:f9:a2:07:7b:5e:12:25:57:ad:c2:c3:16:af:
                    fa:f5:bf:12:7f:a1:eb:eb:e8:eb:84:41:96:a5:85:
                    56:15:7e:53:75:d4:d0:bb:e8:3e:2a:49:68:22:c5:
                    c5:e3:c2:59:8d:ea:e5:a2:a0:0d:5c:e2:14:f0:6e:
                    26:35:e5:81:37:72:b4:f7:b5:2e:ab:d1:28:96:53:
                    fd:f7:55:3c:3b:3a:87:24:7e:35:af:ed:6f:2d:91:
                    62:55:a4:4b:8c:7e:c2:28:83:95:10:06:a5:57:2b:
                    4a:e8:96:61:22:73:d7:67:6d:a3:61:06:75:75:af:
                    e1:2b:40:1b:e7:75:30:14:11:3e:35:0f:b1:74:fc:
                    29:95:6c:13:76:8f:1a:45:bd:2f:a2:1c:ce:0d:76:
                    a8:c9:a2:e8:00:b3:59:07:26:82:60:af:2c:bd:16:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:CF:B6:ED:5C:1A:FC:2E:39:AA:52:1B:39:7A:8F:BC:8E:41:AE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d9d3bb-afd5-4e7d-aa00-fb3be561bed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:78:8f:bd:a7:67:05:75:c1:36:d0:9b:87:2e:1f:99:35:eb:
         94:1c:45:e7:02:34:35:c1:5a:39:a0:5f:ab:c7:73:22:c6:88:
         59:ea:6a:25:18:7c:e0:98:e0:13:17:5a:c3:8b:da:df:dd:e6:
         2b:9c:39:69:b3:33:1d:2e:cf:e2:bd:e5:63:89:4c:66:41:e6:
         c6:0c:40:e8:ed:71:29:14:7a:08:df:34:dd:d2:b9:78:82:79:
         c8:f4:07:ec:4b:c3:d6:98:69:8d:70:28:a1:05:33:9b:0a:7d:
         3c:65:8c:3b:b0:ca:19:85:10:e9:f5:d3:cc:06:3c:27:fa:6f:
         bc:00:e8:a0:17:ac:a3:34:43:2c:56:38:ca:2e:05:9b:54:4f:
         2e:ae:9e:cc:9b:95:87:13:cd:7f:ad:9a:a1:fe:9b:b3:4c:7d:
         a0:31:e2:4e:a8:aa:84:0c:fd:95:43:76:f8:14:4f:42:c0:ac:
         2e:56:3a:11:a5:05:c3:13:66:6a:26:88:8f:91:10:a1:67:60:
         29:e6:92:cc:fc:5f:84:ad:20:5b:d4:ae:a0:62:63:6e:ec:6a:
         92:21:5c:a0:8c:0a:fb:ff:dd:10:c8:d7:6b:7b:2f:cc:2c:00:
         79:a0:60:63:0e:e3:e3:7e:38:ca:27:fa:c1:f5:46:da:3b:66:
         b5:29:8f:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----