Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c7eb8ab-994c-4a6a-9a4c-ff4469b31e6c.roa
File:                     9c7eb8ab-994c-4a6a-9a4c-ff4469b31e6c.roa (raw, json)
Hash identifier:          oDtWKdDTIvMrwtFFp7Y9nZT3mWYuCcqwXgISQr12dzg=
Subject key identifier:   C0:40:07:79:49:4A:67:C9:06:F1:A6:B4:1C:87:1A:71:E7:90:61:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       028D83BE6DA0E75E24B141182C2A8E0916DFF308
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c7eb8ab-994c-4a6a-9a4c-ff4469b31e6c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:3440::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8d:83:be:6d:a0:e7:5e:24:b1:41:18:2c:2a:8e:09:16:df:f3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4178b62afb84338f75fa8a7c866bc8c01c2f11f00026f5af7bf85995d1f139eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a0:48:c6:ac:13:e8:8f:53:8c:31:88:db:e4:
                    d4:84:85:6b:bf:a2:c7:a6:89:a1:30:09:a9:d5:7a:
                    f5:40:cb:39:6b:f7:14:16:33:be:01:46:21:ed:ae:
                    87:fb:98:09:7e:89:ed:9e:00:ed:11:64:c0:8c:05:
                    dd:1c:a6:30:11:0e:98:42:53:00:ca:bb:2e:19:8a:
                    e8:ff:ce:8b:19:6b:11:5b:26:25:97:ad:c0:62:3e:
                    53:c9:20:7f:07:28:1d:d6:84:7e:48:2a:e4:50:c4:
                    ed:66:4c:33:7c:83:49:44:7b:90:b1:f6:ae:5d:2d:
                    6c:49:b0:68:c6:ef:3f:c4:ae:e9:6e:a2:e3:5f:7f:
                    c4:32:f9:41:87:d5:e0:da:73:c6:17:86:52:81:a7:
                    b2:36:b1:6f:94:32:85:e4:7b:e8:6f:67:d6:a0:f8:
                    52:e2:e2:c9:ba:97:5b:0c:fe:19:ab:50:6c:a2:02:
                    fb:39:b0:fc:6e:e5:53:40:4c:e6:6e:0c:85:22:8b:
                    23:43:8f:ad:33:c8:35:14:e9:ac:80:22:26:f8:ab:
                    37:96:d9:ac:0f:82:93:a3:cb:90:7c:02:8c:e2:ff:
                    ca:da:94:cf:8c:28:ca:b7:5d:2c:14:8a:49:e9:79:
                    d5:55:bd:6f:e3:2d:46:de:c3:d6:c6:1a:9c:43:7f:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:40:07:79:49:4A:67:C9:06:F1:A6:B4:1C:87:1A:71:E7:90:61:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c7eb8ab-994c-4a6a-9a4c-ff4469b31e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:aa:86:33:30:d1:74:76:d5:b7:fc:3f:0c:f1:a0:58:1a:
         47:be:32:cb:e3:00:d5:6e:8a:70:ba:fa:11:8e:c3:83:e7:b1:
         b4:bf:54:44:fb:a8:64:f4:57:19:91:68:30:98:24:9e:9c:f0:
         d6:08:cf:e5:e8:a5:b9:d1:ea:a9:4d:4c:ac:45:39:2a:1a:e2:
         f8:c9:a0:52:e1:0a:b5:69:b0:74:c7:80:e1:c0:cd:45:22:59:
         ed:f6:38:3c:24:00:32:b1:6b:24:1a:20:13:d5:ff:b8:7f:12:
         34:7e:c2:e8:62:8b:72:00:83:2b:f2:f2:ca:60:f0:e1:c3:4d:
         54:7f:93:da:a9:bd:4d:4b:cb:21:08:8f:9e:4e:51:12:4c:4f:
         9e:56:de:61:79:90:03:0d:dd:64:b4:e4:aa:5e:f3:2b:7d:21:
         0e:10:3b:47:63:be:98:69:da:7f:c2:e3:9a:18:40:26:8c:f5:
         90:0f:0c:43:f4:f6:68:7f:88:bd:a8:e7:58:e9:a7:d8:45:1b:
         1e:c5:1c:5a:41:dc:b8:fd:7b:08:e4:89:b7:2d:9f:cc:b5:58:
         9e:ab:ad:79:0c:17:ba:6f:88:8b:5c:16:91:9b:01:aa:8e:57:
         b4:ba:e0:43:9c:f9:a1:24:18:52:5d:c8:89:77:01:93:2e:1e:
         64:7e:52:a2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUAo2Dvm2g514ksUEYLCqOCRbf8wgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0MTc4YjYyYWZiODQzMzhmNzVmYThhN2M4NjZiYzhjMDFj
MmYxMWYwMDAyNmY1YWY3YmY4NTk5NWQxZjEzOWViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDboEjGrBPoj1OMMYjb5NSEhWu/osemiaEwCanVevVAyzlr
9xQWM74BRiHtrof7mAl+ie2eAO0RZMCMBd0cpjARDphCUwDKuy4Ziuj/zosZaxFb
JiWXrcBiPlPJIH8HKB3WhH5IKuRQxO1mTDN8g0lEe5Cx9q5dLWxJsGjG7z/Erulu
ouNff8Qy+UGH1eDac8YXhlKBp7I2sW+UMoXke+hvZ9ag+FLi4sm6l1sM/hmrUGyi
Avs5sPxu5VNATOZuDIUiiyNDj60zyDUU6ayAIib4qzeW2awPgpOjy5B8Aozi/8ra
lM+MKMq3XSwUiknpedVVvW/jLUbew9bGGpxDf5VdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUwEAHeUlKZ8kG8aa0HIcaceeQYe0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzljN2ViOGFiLTk5NGMtNGE2YS05YTRjLWZmNDQ2OWIzMWU2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/0NEAwDQYJKoZIhvcNAQELBQADggEBAJ9TqoYzMNF0dtW3/D8M8aBY
Gke+MsvjANVuinC6+hGOw4PnsbS/VET7qGT0VxmRaDCYJJ6c8NYIz+XopbnR6qlN
TKxFOSoa4vjJoFLhCrVpsHTHgOHAzUUiWe32ODwkADKxayQaIBPV/7h/EjR+wuhi
i3IAgyvy8spg8OHDTVR/k9qpvU1LyyEIj55OURJMT55W3mF5kAMN3WS05Kpe8yt9
IQ4QO0djvphp2n/C45oYQCaM9ZAPDEP09mh/iL2o51jpp9hFGx7FHFpB3Lj9ewjk
ibctn8y1WJ6rrXkMF7pviItcFpGbAaqOV7S64EOc+aEkGFJdyIl3AZMuHmR+UqI=
-----END CERTIFICATE-----