Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
File:                     c636934a-c7cc-4c0f-acb1-a74b2500994d.roa (raw, json)
Hash identifier:          y3JNEDz9W2VE7IOBXTc2q/5YSoM3jdLJpzaCLzt/t9E=
Subject key identifier:   B2:12:8D:8A:1C:E6:0A:2C:14:C7:3D:0B:95:74:64:07:A8:49:AD:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76D7857CD14F9DDDD78AE7FD0A7F8DA42213C8C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:3480::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d7:85:7c:d1:4f:9d:dd:d7:8a:e7:fd:0a:7f:8d:a4:22:13:c8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=aae9525c79d2bf15f4345b71902b23eac163ad3c5e253ecdda1063f9d24e3ade, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:c6:24:4a:09:8a:d6:44:11:59:77:6d:48:
                    b4:33:69:f1:14:8d:72:d7:26:82:73:31:e2:aa:a8:
                    4a:0b:a3:6c:ab:5f:31:9a:38:3f:99:ed:f5:6c:bc:
                    70:44:c4:e4:e6:d9:a4:74:fc:72:03:a4:a1:86:3a:
                    2a:11:4b:fa:4d:5c:bf:7f:df:06:6b:10:0e:fe:47:
                    ac:b6:e5:ab:13:cb:35:75:ec:c6:7b:23:49:d3:4e:
                    c3:cb:15:13:4c:a3:6d:5b:50:03:6d:93:0c:a4:2e:
                    af:11:75:9d:4f:3f:ed:ab:e0:ca:af:51:12:7a:0e:
                    a1:e7:43:27:14:ae:64:7b:d9:18:dd:54:7b:f3:3e:
                    e8:21:bd:51:6c:08:dd:63:83:d1:15:84:7f:a2:d3:
                    ab:e2:f0:29:92:52:0f:0f:c2:50:10:81:fa:23:e8:
                    52:6b:f5:c1:56:8e:a0:2a:9e:d9:f1:02:cc:7d:f0:
                    26:dc:56:f3:bf:e4:f0:bd:ba:61:4b:07:55:05:28:
                    8b:aa:f6:be:64:30:a3:85:fc:78:32:64:09:15:c0:
                    61:a9:ba:37:0f:25:6f:d2:e4:40:04:b0:dd:08:62:
                    34:e3:10:8a:af:c0:b9:58:dd:bc:dd:b0:80:c0:0f:
                    a3:f6:96:25:81:6b:8b:68:ef:fa:49:0c:5f:f5:ae:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:12:8D:8A:1C:E6:0A:2C:14:C7:3D:0B:95:74:64:07:A8:49:AD:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c636934a-c7cc-4c0f-acb1-a74b2500994d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:3480::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:50:0f:0a:b9:e0:98:2c:f5:3a:6f:75:8b:9c:64:9c:1b:06:
         54:5a:8c:9a:ae:c1:14:a4:2c:cd:6c:9a:06:25:2d:e2:51:11:
         53:9d:4b:98:09:be:30:1e:07:96:97:c2:18:3f:b8:5f:e4:46:
         5b:20:20:4a:9c:63:eb:0a:de:35:f8:95:8b:f7:16:b0:cc:4f:
         52:28:96:09:f0:d9:ba:c6:45:08:86:03:b0:46:8a:bb:74:4f:
         84:03:dc:6e:7a:9e:8b:70:6b:3d:e9:10:92:c9:38:3a:4d:0b:
         7c:68:c9:02:f1:0e:12:ca:ad:29:f8:ae:bd:4d:16:75:77:81:
         74:c5:5f:46:85:d6:fa:84:a6:a5:9b:99:c9:b7:46:5f:df:a6:
         c1:42:1e:0b:3f:eb:cd:dc:87:14:57:a1:81:62:68:fe:2e:23:
         8f:9d:09:48:20:89:8c:31:7c:7d:10:a9:b2:85:5a:6e:44:a9:
         42:7c:4a:a1:e3:44:65:5d:88:9f:79:ff:f2:43:de:4d:da:e6:
         84:5d:31:06:5d:fb:b5:74:bd:4f:4a:df:cc:cb:1e:d3:a7:9f:
         e0:b2:fa:20:6a:5c:cc:f7:3f:84:0b:21:e8:fe:ba:c6:85:f6:
         46:8f:64:20:b7:da:45:34:d9:0a:a2:08:5f:ba:98:db:56:5e:
         f2:4f:1e:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----