Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3332b94-85c8-4c9d-ae96-a646589b0a00.roa
File:                     a3332b94-85c8-4c9d-ae96-a646589b0a00.roa (raw, json)
Hash identifier:          s0L3pe8m6ko6HsmhETwxwYDiRTbqWH4lyrQ4QFlz6J4=
Subject key identifier:   9A:74:8F:B6:2B:FB:08:00:10:C4:B5:EB:3C:FC:8E:BF:31:43:C7:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E3E0FB2D10B8C53ED7C30CAB43A21CBE1E0159E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3332b94-85c8-4c9d-ae96-a646589b0a00.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:4000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:0f:b2:d1:0b:8c:53:ed:7c:30:ca:b4:3a:21:cb:e1:e0:15:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=ce876551fcb72066703ff87dbf9e38441354083d9e850e58113efaf731088317, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:12:59:cb:68:9d:8b:44:57:d5:56:11:c7:
                    d6:e6:1c:f5:1f:b8:6a:a4:66:89:0e:17:16:c3:da:
                    b5:d0:b4:02:92:03:46:23:47:91:ff:88:09:e4:42:
                    92:a9:88:f0:6e:4a:15:31:9b:a9:c1:d8:e9:fe:9e:
                    f2:5a:db:06:d7:16:15:2f:0a:69:dd:6f:06:e8:1d:
                    74:34:1d:fe:b0:74:a8:6d:9d:ea:41:5e:d6:7d:83:
                    1f:4d:e0:c1:d6:0e:22:c9:44:4b:46:6d:04:1d:f3:
                    d1:b2:a0:36:9f:b6:8d:1b:b8:8b:3b:86:f3:a1:80:
                    0d:7c:56:c7:70:80:06:d1:9e:72:bb:5b:fd:68:b3:
                    e0:9a:56:a0:25:d2:7b:0a:b2:1b:d8:a7:bf:8f:3b:
                    be:f4:0f:9a:a8:fc:45:bb:f6:61:cf:15:23:1c:66:
                    0b:99:c6:69:ff:00:55:f9:43:c1:7f:95:1a:60:1f:
                    c6:41:bc:fd:55:b1:29:a8:ed:fe:ea:07:72:6a:ca:
                    53:ad:43:77:84:ce:61:87:48:ea:07:8b:ea:91:f2:
                    50:ea:90:63:cf:a5:1d:b1:9d:bd:39:99:63:21:e1:
                    d8:06:43:29:bd:6c:78:fe:f0:5c:f8:09:58:91:07:
                    8b:bf:7d:6c:c7:e2:6f:b0:b7:9d:d0:ac:c7:13:09:
                    4c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:74:8F:B6:2B:FB:08:00:10:C4:B5:EB:3C:FC:8E:BF:31:43:C7:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3332b94-85c8-4c9d-ae96-a646589b0a00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         6d:7d:4f:8d:4d:f8:c9:46:7a:21:88:ea:40:a0:2b:d3:e6:cf:
         58:15:97:cd:e7:67:e7:35:9f:5e:51:21:df:94:3f:68:a7:1a:
         c7:4b:a6:b1:77:24:a9:63:16:ae:fe:fe:57:1d:43:84:16:ca:
         70:de:e8:9d:ee:39:50:3d:0e:8c:30:fe:63:50:4b:c1:ec:19:
         65:9a:bf:32:32:f4:67:90:eb:9a:82:96:ee:af:ea:a0:58:c9:
         29:97:34:9e:82:65:6f:94:2a:98:0f:a1:dd:3c:6e:fc:58:72:
         46:7b:0f:54:e1:fe:fd:e6:47:b5:58:56:22:61:63:a9:c2:85:
         8c:46:0c:f3:66:b0:89:be:7b:d0:89:4d:b3:dd:c6:08:b9:b2:
         f4:25:35:1f:2a:d0:20:05:ef:35:18:5b:66:66:56:85:24:f6:
         8b:90:a4:9e:4c:83:5e:c8:1c:96:35:d5:e5:3c:7b:48:8d:20:
         ef:f5:44:77:d5:0e:b0:ad:a1:7d:70:88:b2:4f:52:df:e4:bc:
         75:ae:d3:5e:cb:42:45:1e:a3:79:5b:99:23:3d:b5:09:97:34:
         19:c8:7b:a7:9a:d7:eb:ea:3a:de:7c:52:32:41:24:fe:66:11:
         85:87:a6:4f:df:83:bf:ef:ae:c9:0c:f6:f1:49:77:55:44:74:
         e2:75:b5:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----