Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d47213cc-bcfa-451e-ba4c-80c8b375843c.roa
File:                     d47213cc-bcfa-451e-ba4c-80c8b375843c.roa (raw, json)
Hash identifier:          1kg794BIrAqNoZH7LDQ9knVEP0DLPKHs54FU2H8HIbQ=
Subject key identifier:   E2:E1:24:47:A2:85:C1:B8:45:DA:ED:5F:ED:3E:CE:2D:ED:34:35:BE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3132B1729539731B4E9FD62391B902669DEBC98C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d47213cc-bcfa-451e-ba4c-80c8b375843c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:2080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:32:b1:72:95:39:73:1b:4e:9f:d6:23:91:b9:02:66:9d:eb:c9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b9d91e768ba1f1e49157630af8ae22c378815e53248e7463bebb05cbeda7246f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:24:65:59:ca:9e:9d:fc:de:ce:a7:c6:41:
                    46:bb:c7:82:a4:39:3a:d9:78:4d:96:52:e2:70:5d:
                    89:13:27:fa:e3:1f:33:f7:41:9d:d2:20:53:33:21:
                    b6:84:07:94:f5:1e:64:41:03:91:2e:cd:49:8b:e4:
                    3b:b4:61:ea:0e:20:48:92:97:ef:8a:c6:1b:77:1c:
                    e1:7a:02:37:45:b9:ca:7b:fe:ec:83:96:3c:37:39:
                    13:12:18:20:98:61:89:d0:95:e7:0d:d1:24:63:a0:
                    20:4d:4a:1d:21:89:ed:3c:7f:8f:36:ca:fd:49:d5:
                    d8:f0:b3:29:0c:1d:fc:0e:e0:98:b1:c6:90:67:14:
                    64:80:f9:9d:9f:a1:a6:f3:01:64:9e:63:eb:04:32:
                    c5:c8:ee:41:78:a2:da:6f:1c:56:2f:e7:f8:f1:fe:
                    02:bc:42:8e:bd:0a:6e:13:d4:71:d8:37:52:83:69:
                    44:b1:d1:4b:db:fa:72:41:1f:2c:33:c0:e3:af:bf:
                    88:82:10:2d:e6:1d:5b:f4:df:f0:a9:f4:70:0d:4e:
                    43:ec:31:a0:e5:11:29:de:49:57:f9:8d:99:a0:46:
                    91:ff:c1:7e:f1:86:d5:27:14:10:7c:cb:85:35:cd:
                    70:b2:76:57:bb:2e:05:b9:47:e2:4a:68:e5:0f:27:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E1:24:47:A2:85:C1:B8:45:DA:ED:5F:ED:3E:CE:2D:ED:34:35:BE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d47213cc-bcfa-451e-ba4c-80c8b375843c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:0d:f8:5e:c5:54:bd:d1:0e:9b:01:71:77:bc:80:83:55:11:
         c0:f0:1d:df:cd:d7:2e:9d:83:fc:1a:6f:cd:53:85:f8:ee:c4:
         2b:be:ef:03:b6:0c:49:e7:81:67:34:63:e8:7a:74:12:db:f0:
         c6:c6:d2:e6:03:2e:ee:2a:de:71:4e:8f:b1:98:76:07:2c:b0:
         81:9c:ef:ad:a8:99:e4:ec:20:27:1d:97:6a:a5:d3:89:a3:8b:
         f1:4f:c5:06:d4:1b:74:1b:17:59:a1:a1:e8:c5:82:e7:2e:66:
         16:05:cd:24:cc:b5:a1:75:8c:63:50:86:7d:46:63:b8:fd:5b:
         e7:5a:8a:91:84:26:94:c7:51:31:9c:f2:88:46:58:9f:a1:c0:
         58:54:29:1e:39:62:9f:94:f8:24:69:1e:5a:8e:fc:1d:e4:16:
         4a:ed:49:b9:d4:fd:64:fa:61:d2:f4:12:37:23:4f:52:da:4b:
         70:f2:04:42:7b:ca:91:dd:13:a7:29:48:e5:ee:bd:ad:29:fa:
         3c:2c:de:03:d4:d0:f4:30:9d:ac:9c:42:8f:96:e9:bd:63:cb:
         e8:ed:93:f4:6d:65:73:a7:c6:d4:51:0f:68:7d:8c:03:1d:9a:
         47:42:65:ca:c0:7d:73:fb:f0:52:2f:98:b0:59:84:c9:a2:bb:
         7e:8f:b0:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----