Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa
File:                     e5f07183-eacc-4e18-aac2-f0abdd72b563.roa (raw, json)
Hash identifier:          /qWYUMMd9JyEn2uGDX1LjxcSR2dhvNNsSk+mAZsZoMs=
Subject key identifier:   C3:E9:86:43:50:F4:97:7F:2B:79:25:AA:F9:77:A8:40:06:98:D5:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       77BB46622A38C1CEF2A2437878D5CCFE6FF06298
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff2:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:46:62:2a:38:c1:ce:f2:a2:43:78:78:d5:cc:fe:6f:f0:62:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=518094d0f0471835371ad2ac86e8232392d0a87785e30204f72d11dba0f1c1bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:78:96:30:20:e5:98:21:14:c8:c2:49:2c:
                    56:14:d7:93:41:06:00:29:90:77:24:a4:19:d0:be:
                    32:80:a9:d6:4a:5b:75:dc:39:22:3d:10:5f:2a:48:
                    ab:0e:3f:0c:a5:85:7f:c0:a0:ee:91:24:f2:2f:a5:
                    21:66:1d:9d:86:70:28:53:11:48:56:a3:f3:c7:c9:
                    cc:72:aa:c5:04:e8:11:a3:02:33:91:a8:e1:0d:23:
                    c6:30:68:13:76:ce:b8:3f:58:39:5a:56:67:24:1a:
                    c5:d5:10:22:be:4e:91:33:14:64:d1:2a:10:c1:c5:
                    5e:70:2c:66:11:c8:b9:f2:b4:e6:10:9f:2b:49:13:
                    f0:30:04:f2:cf:93:19:78:f8:a7:11:56:ab:5b:57:
                    1d:64:87:db:e8:fe:e7:97:01:67:e9:6e:f1:5a:97:
                    1f:ef:9e:dc:45:fc:da:e2:1d:e8:bd:55:88:1d:bd:
                    02:3d:6c:e0:56:a1:b7:c5:1c:b9:0c:95:4e:86:eb:
                    d0:0c:7f:7e:1e:af:ea:29:04:05:57:a0:e1:70:33:
                    4e:1e:00:a8:02:3f:a0:a6:cf:c2:a3:fa:4a:51:c8:
                    ce:21:70:98:46:90:f2:79:15:69:62:f1:96:0d:96:
                    28:40:2b:36:19:17:b6:43:70:2b:ca:76:04:0c:2c:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:86:43:50:F4:97:7F:2B:79:25:AA:F9:77:A8:40:06:98:D5:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5f07183-eacc-4e18-aac2-f0abdd72b563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff2:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:0f:c9:68:c9:45:1d:f3:ed:82:d9:cc:d0:bb:d4:82:9c:
         51:5b:8d:8f:a3:90:87:a7:73:b6:53:20:25:fd:cb:d6:70:c6:
         f7:2a:45:fd:a8:54:87:82:1a:f2:33:e8:29:55:e7:9f:c1:00:
         13:99:26:37:ff:37:b7:e3:48:39:c5:e4:c0:55:7d:68:cd:ce:
         07:fc:61:38:c1:b2:d4:84:84:38:9d:32:42:16:d6:3c:f0:90:
         20:5c:44:b0:11:e6:7b:ff:f0:b1:e2:1c:de:88:20:d2:bb:1a:
         b0:a8:3d:6a:59:62:52:ca:e5:63:af:6c:95:15:3e:73:e5:2e:
         0d:5d:ae:1e:1a:ed:b9:93:95:86:90:3a:c8:43:ff:0a:c0:de:
         56:ee:93:04:09:a6:d5:ea:41:d9:c1:db:b7:bf:7f:5d:a9:4d:
         91:2a:63:10:8c:f1:08:4f:89:7d:ee:86:a1:36:76:a9:f4:2d:
         d5:ff:43:3b:62:6b:dc:76:06:3a:29:d0:a3:7a:2f:07:74:a6:
         ef:49:95:19:ed:31:24:ae:91:38:3e:bb:e0:22:2d:eb:bc:ec:
         c0:1c:6a:f1:27:ae:32:c1:19:a4:9f:dc:75:ae:10:47:65:68:
         15:76:44:27:1b:c6:1a:ec:02:3c:a0:37:b2:81:9b:6e:0c:bc:
         bc:7f:b7:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----