Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa
File:                     9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa (raw, json)
Hash identifier:          Pjd755uqyIWu8Jug8AHR3Ik41l4ZergCJtBfv4W9tgo=
Subject key identifier:   0B:C1:3D:E4:89:11:58:99:FD:2E:A1:A7:05:85:85:AA:C1:82:9F:6C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       585BCCDF7CB61F8E2D376B8ECE7354AE80454119
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:5040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5b:cc:df:7c:b6:1f:8e:2d:37:6b:8e:ce:73:54:ae:80:45:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=feea0ab4169ebda8c61768411af0574f662b341e0b0e1aebfd8dc2c98a952a05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:5a:f8:de:f5:e5:fb:1f:c8:b1:6e:29:89:
                    66:b5:a9:8e:13:31:df:02:68:bd:f6:b7:83:d8:87:
                    a2:92:92:2f:2b:45:34:29:4d:09:11:7b:a5:fd:ec:
                    fc:dd:a2:05:08:5f:f9:b3:0d:88:75:6b:b9:e1:b0:
                    9c:63:56:78:13:a7:50:55:d3:90:49:84:4b:eb:41:
                    3c:56:eb:2d:7d:b8:4b:3f:b4:1c:df:7d:86:ca:61:
                    6f:13:e9:3b:10:0f:95:fc:be:93:5a:97:41:43:4a:
                    d6:2a:5f:ce:69:1d:96:7a:13:ed:ba:dc:f5:01:c4:
                    28:98:65:f6:43:e3:84:35:42:56:1d:80:32:94:39:
                    14:47:98:56:b8:f5:39:d5:6b:e1:95:21:a4:d9:c9:
                    a4:3e:33:02:30:7b:95:25:6b:6e:23:24:ec:60:fe:
                    9d:ee:10:12:12:ee:2c:b0:96:ec:23:aa:b7:1b:79:
                    de:15:fa:a7:a5:ae:25:6f:96:22:38:bc:8e:ae:27:
                    9e:b8:a9:e5:61:ec:93:3f:73:e4:ee:3d:58:22:0e:
                    ad:5a:d8:e6:4c:bc:55:8e:b2:a4:62:0f:d9:fa:18:
                    d3:d8:eb:7b:93:62:c6:e2:85:60:cf:08:0f:77:af:
                    4b:39:9e:f8:7d:01:73:90:53:dd:4b:23:b1:7f:35:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C1:3D:E4:89:11:58:99:FD:2E:A1:A7:05:85:85:AA:C1:82:9F:6C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a6ff27f-3952-408d-9589-6f9c0a6d7883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:5040::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:a3:91:51:ea:76:58:2f:4c:e3:97:d3:e4:0c:f1:45:2c:
         69:b5:0b:8a:ec:43:e2:9e:e5:be:a2:be:46:8c:ae:fa:16:37:
         21:a3:75:4a:ba:fe:8b:b1:35:29:b7:f5:ad:91:7b:07:78:ef:
         53:09:f7:49:a8:67:4c:e3:d3:66:aa:23:9e:4f:8d:f2:81:4c:
         27:9b:8f:24:5b:a5:b6:ae:54:b3:f2:00:c8:f7:d9:1d:56:02:
         4f:32:71:d1:99:f1:9a:a9:b7:ff:39:bb:8d:00:87:2e:01:8a:
         c9:7a:34:f7:9c:e2:e7:a5:60:bf:2b:5f:aa:01:f9:de:89:4e:
         01:dd:e9:79:c5:93:55:02:0b:4e:d1:3c:68:86:bf:fd:9b:70:
         6e:f7:85:48:c9:d3:64:a3:57:04:20:05:be:e4:9f:3d:d7:b6:
         b3:3d:57:97:1e:07:60:b4:1c:69:bf:93:56:37:be:6b:4e:f6:
         ec:38:bd:5e:25:dc:d5:7a:2c:76:c6:81:ae:a4:1a:a3:c4:03:
         d6:52:dd:0b:8c:01:d2:fc:c2:1e:4e:71:0f:94:9c:36:9c:ef:
         0d:3b:c9:fd:22:d7:22:4c:06:ba:bb:2e:64:51:f0:61:6d:05:
         48:3c:3f:60:a9:af:0d:14:91:18:70:6a:d2:bc:23:f4:4b:95:
         0a:fe:13:a9
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUWFvM33y2H44tN2uOznNUroBFQRkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0BmZWVhMGFiNDE2OWViZGE4YzYxNzY4NDExYWYwNTc0ZjY2
MmIzNDFlMGIwZTFhZWJmZDhkYzJjOThhOTUyYTA1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN81r43vXl+x/IsW4piWa1qY4TMd8CaL32t4PYh6KSki8r
RTQpTQkRe6X97PzdogUIX/mzDYh1a7nhsJxjVngTp1BV05BJhEvrQTxW6y19uEs/
tBzffYbKYW8T6TsQD5X8vpNal0FDStYqX85pHZZ6E+263PUBxCiYZfZD44Q1QlYd
gDKUORRHmFa49TnVa+GVIaTZyaQ+MwIwe5Ula24jJOxg/p3uEBIS7iywluwjqrcb
ed4V+qelriVvliI4vI6uJ564qeVh7JM/c+TuPVgiDq1a2OZMvFWOsqRiD9n6GNPY
63uTYsbihWDPCA93r0s5nvh9AXOQU91LI7F/Nfs5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUC8E95IkRWJn9LqGnBYWFqsGCn2wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlhNmZmMjdmLTM5NTItNDA4ZC05NTg5LTZmOWMwYTZkNzg4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/3UEAwDQYJKoZIhvcNAQELBQADggEBAJHQo5FR6nZYL0zjl9PkDPFF
LGm1C4rsQ+Ke5b6ivkaMrvoWNyGjdUq6/ouxNSm39a2Rewd471MJ90moZ0zj02aq
I55PjfKBTCebjyRbpbauVLPyAMj32R1WAk8ycdGZ8Zqpt/85u40Ahy4Bisl6NPec
4uelYL8rX6oB+d6JTgHd6XnFk1UCC07RPGiGv/2bcG73hUjJ02SjVwQgBb7knz3X
trM9V5ceB2C0HGm/k1Y3vmtO9uw4vV4l3NV6LHbGga6kGqPEA9ZS3QuMAdL8wh5O
cQ+UnDac7w07yf0i1yJMBrq7LmRR8GFtBUg8P2Cprw0UkRhwatK8I/RLlQr+E6k=
-----END CERTIFICATE-----