Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa
File:                     d9f51838-30d7-4d1c-860c-6e6007978e48.roa (raw, json)
Hash identifier:          Ox3GuuUkjYI2Dy8+ORO81Zjgn8SRERNYSLA6zIGrEIw=
Subject key identifier:   78:E6:F8:A3:2B:EB:37:7B:FA:17:91:86:34:EC:96:05:15:42:FE:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7430EEF0BA5492664AA8E3A416A1E0795859478D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f19:4000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:30:ee:f0:ba:54:92:66:4a:a8:e3:a4:16:a1:e0:79:58:59:47:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=931ebed76de746e5381e3fde67b631b54a218c56d1d2ead22cd1c294d956d3f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:71:41:07:80:80:a6:0c:88:29:49:78:b9:
                    3d:15:51:d2:40:e6:91:ca:0d:53:24:13:44:5b:51:
                    71:d6:e3:29:fe:fb:71:b6:4f:48:97:74:66:aa:54:
                    a6:4f:8e:b1:3b:a1:cd:12:dc:99:c2:82:d8:28:4b:
                    b9:47:3e:1e:36:4a:12:21:6f:43:2e:bb:d1:33:9d:
                    c3:d6:a6:db:ee:3f:db:1c:e7:98:65:85:fd:dd:90:
                    d9:d6:9b:de:09:5d:b5:3d:86:aa:f5:d4:29:76:19:
                    01:99:2c:b1:7c:9f:ec:fa:75:db:ac:91:0b:22:66:
                    14:87:78:3c:8e:a1:77:bd:4e:f2:bb:ae:6c:73:56:
                    69:9a:d9:8f:a5:aa:1e:a4:d8:78:f6:d7:3e:d8:82:
                    80:9e:64:67:78:3e:fe:ad:27:31:34:74:7d:c0:fc:
                    ed:f9:1a:65:15:09:bf:94:dd:ab:2e:5f:16:de:5b:
                    de:3b:15:c9:18:24:0d:2d:3d:92:62:64:ae:32:0f:
                    a8:47:0f:2a:dc:6f:da:64:eb:a3:47:87:14:4e:de:
                    06:40:39:85:97:b8:cf:2e:a6:df:33:b1:3d:eb:e3:
                    54:41:5b:16:a1:81:2a:eb:93:7a:64:59:61:9e:1f:
                    e6:0e:2b:f2:a0:15:3d:8b:55:43:ca:a5:24:b8:78:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:F8:A3:2B:EB:37:7B:FA:17:91:86:34:EC:96:05:15:42:FE:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         d5:21:ac:4b:d8:2f:30:b9:fb:66:78:62:2b:b3:a3:d7:0d:3b:
         c8:5e:d8:c9:0f:dc:87:7f:df:5f:d9:0c:33:9c:f9:45:21:ee:
         91:8b:a8:2e:66:2a:8a:4b:23:5a:9d:c6:79:ec:80:e9:81:c1:
         f7:23:0e:dd:2d:f4:54:c6:05:1b:38:8f:50:91:05:89:f4:b1:
         2c:9c:0c:4f:ce:84:8e:ad:23:a3:53:67:ea:4f:68:e7:b7:d9:
         f7:27:a4:03:33:55:ba:76:ad:d7:f9:e3:bb:16:59:5d:2b:e0:
         1f:bd:ae:2c:a3:dd:c5:8e:e0:90:44:dd:3b:9f:43:32:8b:95:
         27:f6:30:b9:9c:8c:c8:3f:df:1a:20:ba:c1:a4:9d:2b:aa:54:
         ae:b9:bd:ef:84:53:8f:74:64:33:0c:4b:73:09:a7:d0:ce:f4:
         74:7f:cb:7c:d9:f7:2b:0a:fd:ae:66:f5:f0:5d:c5:33:bd:55:
         d6:3a:06:a7:ea:64:5c:97:b6:71:80:ea:45:bc:6e:f3:26:4d:
         7e:2c:87:76:23:1f:88:31:09:ca:65:76:d2:ef:54:af:f5:30:
         dc:e2:18:07:0a:15:26:1e:ff:d9:89:59:10:b5:d1:f4:cd:e5:
         7e:39:77:39:03:64:1c:4a:5d:58:ce:e9:2d:79:37:7e:0b:48:
         15:84:77:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----