Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa
File:                     a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa (raw, json)
Hash identifier:          D3xI+qSuEzpTjGv9Btmzei0izsRQrNSivhAoL42EaHg=
Subject key identifier:   EB:CA:53:74:DF:95:00:E9:98:85:AE:60:05:B0:2C:7D:94:44:7C:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60C84EC6E04F27F3852EAD5DD2CB3FD6CA9CDCA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ff7:8060::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c8:4e:c6:e0:4f:27:f3:85:2e:ad:5d:d2:cb:3f:d6:ca:9c:dc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4e1bd7246ab5b3fda2520c95dcd9d44d43c44a4aaeaa884e2d979ace45a21958, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:df:f5:4c:0e:a6:1f:85:4c:1d:d9:e7:05:
                    e3:d3:f6:4e:b4:c4:0d:04:2d:f6:58:18:89:6d:67:
                    6b:2a:b8:42:29:43:1d:eb:27:56:64:29:eb:4c:16:
                    32:72:18:42:f0:51:10:b4:61:46:9d:a3:c5:d0:44:
                    38:87:3c:17:ca:eb:b5:83:63:5c:eb:f4:e8:c0:91:
                    30:9e:ac:68:f7:4b:fe:80:36:5e:dd:0d:ed:6e:a0:
                    f7:6d:00:92:a4:e9:22:1a:0a:bf:4b:36:23:7a:1a:
                    3a:3f:f2:8c:c3:5a:72:08:da:b2:c8:1c:23:82:7b:
                    29:64:a7:ee:c3:47:a8:6f:af:97:4b:59:b2:21:d2:
                    22:c4:61:f2:7f:a0:65:30:ea:57:61:db:c5:c5:29:
                    a8:d5:39:19:f1:d7:5f:7e:3a:7e:c7:1a:13:e7:dc:
                    9d:4f:60:06:52:17:8c:11:d9:bd:8a:0c:76:49:9e:
                    f3:3c:2d:c3:43:61:58:d2:4d:c6:7e:a4:df:1d:31:
                    c4:a6:81:1e:a7:0a:95:64:94:cd:5f:a1:9f:3e:92:
                    7a:ef:83:12:0d:a6:08:7f:ea:a9:7c:41:ae:01:5d:
                    1e:fd:ee:2d:a6:a2:3a:97:58:b4:f1:9e:6c:17:8b:
                    d6:d8:e5:cf:91:81:e0:d9:2e:50:d3:1e:0a:6b:45:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CA:53:74:DF:95:00:E9:98:85:AE:60:05:B0:2C:7D:94:44:7C:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2ecae66-7a27-4fbd-a8c6-2a52d26071fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         82:71:a2:db:ca:a6:08:c3:de:f4:75:0f:d4:36:09:37:49:dc:
         0a:6c:88:d9:12:cf:6a:7f:2c:75:ef:8a:88:56:49:aa:68:0f:
         cb:13:a3:40:f2:f2:e7:64:0b:34:e9:2f:30:a5:43:d6:4d:e6:
         1b:da:b8:da:2c:ac:d0:66:6d:2c:cf:6c:ab:88:7a:54:a5:9b:
         84:cc:df:9f:33:53:5b:4a:6e:f4:af:c5:2b:b1:28:b7:24:7e:
         f3:d6:35:3e:1d:17:2b:b4:8f:0f:a5:ed:16:b6:bd:dd:bd:ed:
         5f:f7:5e:20:ba:71:16:2a:a5:5e:aa:73:dd:eb:f1:ee:02:35:
         54:b2:8b:74:e8:20:b7:5c:10:c3:7e:4a:dc:55:ee:6c:7a:62:
         68:da:d5:a2:e0:58:9a:6a:54:ef:96:74:fe:5a:35:5d:0c:3b:
         95:08:0f:ca:1a:11:78:91:76:f2:5c:5e:2e:28:e9:75:39:88:
         12:c1:f6:83:d2:59:7e:8e:5a:42:c0:96:83:78:31:ee:4c:49:
         fb:83:a4:ff:41:9e:6f:c4:7c:48:67:b9:bb:a8:f7:c1:ab:8f:
         30:53:8d:98:3d:0c:d3:2a:5e:75:2c:c3:91:e4:d3:cf:ba:c6:
         63:9b:3b:66:b2:33:aa:4d:59:f3:2a:27:83:31:0b:24:0d:08:
         55:5a:77:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----