Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa
File:                     b534c61b-4786-4f9e-a256-b91de7a7f811.roa (raw, json)
Hash identifier:          thn8Tm+79NiQA9Jj+0Nt3X6G5WvWqebySgi6YYRS77M=
Subject key identifier:   A1:88:DD:27:38:9A:9F:DE:A9:4D:AB:1C:E4:0D:69:6F:84:BA:D8:41
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       631614BC7294AC231B2B1ED919EC214DC925E6C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:80a1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:16:14:bc:72:94:ac:23:1b:2b:1e:d9:19:ec:21:4d:c9:25:e6:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8135eb357153c80ebe2a132ba84e5f12eeb68bdab9eda8fb4bccf7689f350010, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:af:af:20:cc:41:59:73:35:8e:46:ab:d3:16:
                    18:ef:71:f7:a9:6c:00:cf:1a:8a:02:71:fa:ca:42:
                    77:8d:67:80:1c:26:8b:38:d1:db:1d:84:45:26:cb:
                    65:4c:a8:63:4e:40:bc:26:ad:f9:a1:e1:45:7e:fb:
                    8d:e2:6f:a2:b4:d8:19:a5:45:07:a3:51:05:0d:2e:
                    0b:32:7f:5b:81:10:d6:1d:f2:b4:a2:9c:a4:fb:44:
                    a6:f1:9f:19:b5:19:a1:db:e3:81:23:dc:b8:d4:1a:
                    ee:a0:5b:74:6a:ef:88:77:59:41:ae:3f:37:2d:8f:
                    ab:fb:fe:31:a5:7c:50:c6:58:c8:84:86:a5:71:15:
                    6b:4e:64:14:da:9a:ac:16:13:5e:c3:f3:2d:6c:45:
                    10:72:4e:95:c4:89:43:96:75:9f:a0:d7:5a:c8:4b:
                    c0:da:d9:5b:18:3e:38:7a:a3:80:47:e6:0f:d8:54:
                    9d:db:06:d1:4c:4f:89:37:01:e9:5d:a6:5c:81:22:
                    94:12:42:82:ba:a4:ff:68:66:da:0b:23:28:3b:c2:
                    01:4b:7f:5c:60:fb:31:6c:55:8e:96:dc:50:92:ff:
                    1f:b2:a4:cb:cb:cf:b1:7e:bb:2c:b3:2f:a6:47:4e:
                    4e:fb:0c:ca:30:05:01:3f:6d:6f:76:14:59:42:8d:
                    0e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:DD:27:38:9A:9F:DE:A9:4D:AB:1C:E4:0D:69:6F:84:BA:D8:41
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b534c61b-4786-4f9e-a256-b91de7a7f811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:80a1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:70:c2:6f:31:76:48:03:8d:7e:0a:d4:c8:c6:1d:b3:01:
         40:9a:b2:86:62:5a:c1:2e:09:61:27:bb:b8:8f:c6:1e:0e:19:
         83:be:86:c4:2f:62:54:c6:6b:c9:8b:ff:80:0f:82:6d:8e:d5:
         29:05:46:75:5f:28:e6:94:4a:43:16:8e:26:db:7f:71:2b:49:
         f9:eb:df:bf:eb:a5:55:f3:45:62:ad:70:08:07:12:8e:fb:25:
         db:a7:35:04:59:09:7a:59:55:55:73:3f:b0:ee:d4:7d:18:da:
         e8:63:3f:4e:33:7f:e0:01:c8:67:47:46:5d:0b:2b:1a:6a:cf:
         16:4c:fb:cf:93:f7:29:1e:7c:86:b9:1e:26:45:1f:4a:c9:40:
         03:e9:c3:6f:16:8f:ac:74:2e:09:4b:db:96:4c:d0:a3:c6:ca:
         c3:32:c6:a9:ec:8e:bb:f5:fc:a5:e5:8d:06:a2:31:9a:a1:5e:
         e6:04:6f:ca:c0:b4:82:4e:6f:81:72:f4:48:7f:8b:ca:c1:16:
         f3:42:1d:ac:02:1c:ed:13:82:9b:7f:e6:50:11:24:81:ca:1b:
         36:c3:ec:2f:9e:e8:34:90:b0:c4:4e:2e:ea:96:91:fd:dc:b0:
         c6:b1:ec:b7:93:12:f4:73:6b:e0:0f:df:e3:64:2e:8b:d6:1f:
         40:95:ec:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----