Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4744bc5-cafc-4750-87c4-e193fbf12c9d.roa
File:                     d4744bc5-cafc-4750-87c4-e193fbf12c9d.roa (raw, json)
Hash identifier:          TlBZNIHbDlqV2KM1UuwmJGNGTgZgptAvm3nzzb0WIW8=
Subject key identifier:   9C:A8:F8:17:8B:8F:93:22:98:D0:D3:B1:38:00:20:64:02:E1:64:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       60868A3B68250FC0D47C092E0E69C7DFBA395B4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4744bc5-cafc-4750-87c4-e193fbf12c9d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:4020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:8a:3b:68:25:0f:c0:d4:7c:09:2e:0e:69:c7:df:ba:39:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2385d74099c91df0407b98de98294c59cdcbc06e97b728d0ee1cd2c368a80fdb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:ff:07:e4:d8:cd:a8:db:fa:ca:f6:f5:be:
                    45:14:51:9f:fd:d4:9b:26:6c:d8:69:f9:95:94:bd:
                    6e:0b:64:1c:c5:8e:d9:d3:6d:18:3d:ff:f6:af:7a:
                    32:1d:93:96:6d:38:b9:18:92:29:56:6d:48:8c:7d:
                    be:8d:05:bb:d8:a1:a5:fa:3d:f6:ab:92:f1:0b:69:
                    f2:4c:a4:d7:7a:a3:58:0b:e5:8c:a6:8e:91:6f:aa:
                    ab:ab:78:e8:60:c5:64:b7:14:e0:9e:f0:e0:eb:3e:
                    49:60:70:ae:c1:f1:5b:c5:a2:3e:ca:9e:a4:58:41:
                    3d:2d:14:e2:47:98:0e:f5:20:e0:33:8c:d5:d9:bb:
                    0d:04:7d:e9:1d:5e:b4:6a:17:e6:6f:ae:b6:4f:29:
                    1d:81:7f:25:53:73:cf:e4:28:b1:ed:70:25:cd:86:
                    6f:36:5d:6b:4b:44:d5:b7:c6:0d:a3:e1:f5:0f:6f:
                    36:7b:e8:65:3a:fd:11:cb:57:e3:c4:10:2a:df:a1:
                    ae:ff:96:8a:16:20:9c:5e:5f:29:8f:13:c6:51:0c:
                    ef:0b:cc:b1:1a:7d:0a:5d:8d:4a:84:f1:62:f2:1b:
                    80:7b:83:84:91:60:ec:f7:1a:39:1d:fb:c9:14:22:
                    aa:d8:54:74:5b:86:f1:5a:4b:f5:b2:a2:33:2c:57:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A8:F8:17:8B:8F:93:22:98:D0:D3:B1:38:00:20:64:02:E1:64:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4744bc5-cafc-4750-87c4-e193fbf12c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:4020::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:86:10:40:1d:10:1b:fb:41:6f:bd:a7:55:3d:48:bd:8f:
         45:6a:2d:76:e7:fb:95:0b:b5:c1:2a:a1:a7:5a:40:ee:31:a4:
         72:56:d8:8f:9e:1f:ef:cc:d5:a5:f7:ee:b8:76:11:71:f7:16:
         c4:db:48:37:de:a5:62:2a:28:4b:ae:e2:d2:42:2e:46:9f:4b:
         24:b6:e8:c4:69:8b:30:bd:51:ca:96:63:ca:6a:eb:fc:39:9f:
         a3:ab:1e:03:98:12:cb:9d:7a:b7:92:d3:95:dd:f7:cc:8b:d7:
         0f:fe:17:32:72:60:60:46:fe:b4:db:63:59:59:e9:82:44:5f:
         6e:83:2e:00:88:0a:e5:fc:98:ec:a1:03:b9:1a:e1:cd:6c:d3:
         34:06:e8:64:ea:fb:07:a8:62:38:a1:ac:ac:45:91:68:bb:1f:
         7f:65:3c:4a:55:19:7f:ec:3a:b3:86:56:2d:7c:b8:8d:52:85:
         b9:aa:61:6c:2e:34:22:1e:96:ae:80:16:5b:e8:5d:f5:83:7e:
         97:74:d7:96:11:69:63:be:91:5c:23:4d:63:0f:74:e1:b5:3f:
         35:17:36:ea:e4:0a:05:04:96:09:fd:b4:40:09:47:aa:b3:64:
         c3:8b:00:b4:5d:9d:82:32:96:b5:df:1e:22:dc:ff:f7:31:6a:
         36:b5:31:c1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUYIaKO2glD8DUfAkuDmnH37o5W08wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwMTA3MDAwMDAwWhcNMjUwMjExMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzg1ZDc0MDk5YzkxZGYwNDA3Yjk4ZGU5ODI5NGM1OWNk
Y2JjMDZlOTdiNzI4ZDBlZTFjZDJjMzY4YTgwZmRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3h/8H5NjNqNv6yvb1vkUUUZ/91JsmbNhp+ZWUvW4LZBzF
jtnTbRg9//avejIdk5ZtOLkYkilWbUiMfb6NBbvYoaX6PfarkvELafJMpNd6o1gL
5YymjpFvqqureOhgxWS3FOCe8ODrPklgcK7B8VvFoj7KnqRYQT0tFOJHmA71IOAz
jNXZuw0EfekdXrRqF+ZvrrZPKR2BfyVTc8/kKLHtcCXNhm82XWtLRNW3xg2j4fUP
bzZ76GU6/RHLV+PEECrfoa7/looWIJxeXymPE8ZRDO8LzLEafQpdjUqE8WLyG4B7
g4SRYOz3Gjkd+8kUIqrYVHRbhvFaS/WyojMsV/f3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUnKj4F4uPkyKY0NOxOAAgZALhZMYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0NzQ0YmM1LWNhZmMtNDc1MC04N2M0LWUxOTNmYmYxMmM5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/0QCAwDQYJKoZIhvcNAQELBQADggEBALiJhhBAHRAb+0FvvadVPUi9
j0VqLXbn+5ULtcEqoadaQO4xpHJW2I+eH+/M1aX37rh2EXH3FsTbSDfepWIqKEuu
4tJCLkafSyS26MRpizC9UcqWY8pq6/w5n6OrHgOYEsudereS05Xd98yL1w/+FzJy
YGBG/rTbY1lZ6YJEX26DLgCICuX8mOyhA7ka4c1s0zQG6GTq+weoYjihrKxFkWi7
H39lPEpVGX/sOrOGVi18uI1ShbmqYWwuNCIelq6AFlvoXfWDfpd015YRaWO+kVwj
TWMPdOG1PzUXNurkCgUElgn9tEAJR6qzZMOLALRdnYIylrXfHiLc//cxaja1McE=
-----END CERTIFICATE-----