Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0910f73-cd4b-4f74-b65c-17fddeae8ad0.roa
File:                     d0910f73-cd4b-4f74-b65c-17fddeae8ad0.roa (raw, json)
Hash identifier:          z4GAGhboVuEdDBnaKOCvomTAVTAowXnwEjnkQ3qi5FU=
Subject key identifier:   88:CC:FE:3C:D1:6A:09:E2:FC:AF:FF:EC:99:F3:2C:AD:D0:BE:5B:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E6F8D9138F2D912B4026E6BEE05DB98F10D9571
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0910f73-cd4b-4f74-b65c-17fddeae8ad0.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:81c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6f:8d:91:38:f2:d9:12:b4:02:6e:6b:ee:05:db:98:f1:0d:95:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b14d7e1f82302d68624d6f1e3d98e8c724fc103524f8fce242b5488949159044, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:77:dc:30:72:4f:6a:63:06:92:ae:a2:15:
                    58:36:0a:e5:c8:51:09:e4:cf:e4:ae:b4:20:04:8b:
                    40:77:36:3c:7a:d3:c5:63:4e:97:ed:0f:c0:f1:30:
                    52:39:2c:8d:83:b7:ee:14:eb:d4:da:d4:91:c8:04:
                    56:f7:06:55:91:c6:e0:a1:74:7a:0d:63:28:5a:f0:
                    11:b7:2e:ae:8a:c7:07:d1:3e:f7:eb:d3:36:e8:72:
                    92:19:ec:e9:c6:80:41:e4:d3:eb:e5:b3:82:3f:e0:
                    09:4c:5f:b3:b5:6e:8e:91:cc:ed:99:a9:58:9e:2e:
                    6f:c7:de:a6:90:70:bb:66:70:fe:40:51:d5:57:39:
                    52:ce:7c:07:4c:12:ad:a8:d2:f2:c5:07:6d:e6:87:
                    01:e8:98:6b:b1:4e:5e:7c:07:e2:77:57:ea:be:2f:
                    29:14:06:a8:c3:76:01:6c:20:85:e6:88:ec:ed:3b:
                    92:be:12:75:50:f5:a7:a5:e3:e3:bd:b8:d1:04:61:
                    36:d6:ee:52:d7:dd:84:bf:cc:1b:c0:24:a5:db:ea:
                    fb:d7:21:7d:4b:2c:e2:4d:6d:be:23:a5:05:a9:7b:
                    b7:17:9a:91:b3:e9:a3:a3:7f:19:5b:ca:df:66:31:
                    a8:f6:8a:4f:b2:4d:4c:a1:7a:5a:4c:ef:fc:53:3e:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CC:FE:3C:D1:6A:09:E2:FC:AF:FF:EC:99:F3:2C:AD:D0:BE:5B:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0910f73-cd4b-4f74-b65c-17fddeae8ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:2a:21:00:a9:76:86:aa:a0:a5:cc:26:ac:1e:d1:71:3e:e5:
         41:6c:f4:5a:74:c5:43:c1:98:a4:e0:b8:db:6f:63:f4:e1:9f:
         35:fa:46:5b:74:21:ed:a0:d8:2a:77:5d:1a:72:73:8e:0d:63:
         cf:b0:b7:50:61:67:37:f7:52:79:60:c8:79:84:c6:49:47:ab:
         29:b3:84:96:15:0e:23:74:6c:43:53:08:d9:01:56:c5:77:9b:
         cf:01:44:5b:45:a6:26:98:d4:81:b4:15:87:95:0d:1c:26:07:
         20:21:fc:ce:b4:f0:39:36:f7:b6:3f:1a:ac:d4:55:3c:bc:1a:
         b8:5f:1c:23:33:12:74:69:9c:6c:f8:0e:18:62:03:d5:7b:dd:
         1f:b9:12:1a:86:59:e4:3f:e8:09:31:18:52:a2:72:c6:c0:5d:
         bb:52:d6:5c:70:a0:53:4b:7c:6e:30:34:04:68:9f:97:80:bf:
         b9:b9:4d:cb:32:eb:80:73:8f:a6:7f:1d:b0:eb:38:cd:f8:9b:
         3f:d6:5f:00:64:dd:06:d7:d6:04:54:a5:fd:6e:1d:16:dc:5d:
         db:31:f1:cf:46:e6:f1:ce:23:e3:c3:9d:fa:ba:c6:06:1f:ee:
         2f:f7:1f:fa:68:2e:e4:70:4e:a0:ad:60:ae:fe:d5:f6:30:90:
         fa:51:e0:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----