Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
File:                     9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa (raw, json)
Hash identifier:          eTVgoAiUgsXFXf6uT4Yl1VE637TFmJsoy6S8xhkGDHI=
Subject key identifier:   13:35:49:D5:11:B6:1B:C9:63:16:57:C4:3A:7C:77:49:7D:79:FD:8E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2880CAF1F87C8C8122F271A83C66413A563D0C20
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa
Signing time:             Sat 11 Jan 2025 00:00:00 +0000
ROA not before:           Sat 11 Jan 2025 00:00:00 +0000
ROA not after:            Sat 15 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb9:4000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:80:ca:f1:f8:7c:8c:81:22:f2:71:a8:3c:66:41:3a:56:3d:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan 11 00:00:00 2025 GMT
            Not After : Feb 15 23:59:59 2025 GMT
        Subject: serialNumber=49b176d57084716e919d807888cc48f18f51d94e65741a7dae62678b65c1d832, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:c1:49:0e:93:da:ca:47:cf:a5:80:5c:a2:
                    e5:27:46:2c:8c:62:6f:e5:61:e8:6c:5e:de:31:73:
                    26:50:54:5a:6d:5a:58:ec:0a:8d:37:90:57:da:6b:
                    91:cd:eb:45:3c:f5:49:b3:19:16:df:b0:cf:7f:6b:
                    ae:7b:51:49:82:7a:22:1c:cf:16:1f:a6:ac:66:cd:
                    b9:f3:43:2d:f6:35:bf:6f:7c:44:8b:d3:4f:4e:dd:
                    43:01:ac:f7:45:eb:8d:e1:c8:8f:c4:b5:12:91:f9:
                    26:83:b5:4c:de:de:fb:47:3c:d6:1f:45:9e:96:9e:
                    d1:ef:43:8f:46:32:96:2f:ca:5e:f7:b7:6f:44:5d:
                    39:7f:7b:e0:e5:94:06:bf:9c:9a:4b:15:d4:4e:36:
                    85:7d:8d:48:ec:95:b3:44:a1:52:69:e5:f7:ae:14:
                    f0:c0:0e:d6:06:31:27:8a:e7:f7:74:7e:8c:70:29:
                    41:4f:c4:d4:05:48:e2:c2:94:fe:63:4d:3a:89:22:
                    8e:17:d8:ec:7e:73:fa:07:84:63:5d:bd:f5:cc:df:
                    c2:03:5c:46:56:05:9a:01:dd:54:b2:22:87:24:97:
                    86:e5:7a:bc:72:bf:46:e4:cf:53:7a:12:4b:35:17:
                    10:89:cd:9a:52:f3:73:fc:0a:11:48:a5:08:87:b7:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:35:49:D5:11:B6:1B:C9:63:16:57:C4:3A:7C:77:49:7D:79:FD:8E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bca30d4-8ea5-4d58-8cca-f2ed9a0754b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         89:8b:15:d5:c0:41:9c:3f:49:37:7d:91:31:65:6b:1e:a8:c4:
         d8:f3:c0:0d:5f:95:93:cf:e1:6a:bd:d9:fb:48:a4:f4:d2:d2:
         de:a0:ad:1c:d1:df:ed:c8:d6:0a:0d:46:f0:83:d1:58:a6:2c:
         91:03:aa:72:54:6c:3e:34:89:16:3d:47:4e:e9:e2:fc:e4:61:
         49:9f:3b:7f:e7:41:4e:42:1e:d5:a8:6b:e4:1d:0a:d3:67:c3:
         bb:9f:9d:58:cc:01:87:0a:3a:11:9a:ed:38:55:68:03:62:c9:
         dc:1d:60:4d:44:48:c0:73:7c:f1:d1:78:dd:88:a6:e0:f7:4d:
         05:b6:76:a9:4f:a6:79:41:6e:ac:51:8e:a1:70:c6:a4:46:76:
         ab:20:a7:95:a7:be:2f:f7:7f:e1:e9:bc:dc:be:ac:7b:0a:98:
         da:f2:50:78:ba:db:83:8a:36:b6:48:d1:b9:80:8a:37:14:7f:
         ac:af:30:d8:de:97:c0:f8:8c:a0:33:37:b0:30:54:71:cb:72:
         2e:64:ca:7e:56:55:ea:44:41:b5:35:dd:9d:cb:a7:ba:ae:33:
         f6:74:d6:79:39:bf:d7:44:4a:af:fa:fd:7d:23:18:d5:da:dc:
         08:bb:0c:ad:81:12:d9:55:50:f6:ce:30:d9:b9:69:ce:23:0a:
         e2:a7:9a:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----