Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8059cc-024c-4c44-b11d-7b207e0d0a8d.roa
File:                     ea8059cc-024c-4c44-b11d-7b207e0d0a8d.roa (raw, json)
Hash identifier:          Nv3Kaaqabu3nU77CVGkxLCGgNshz2V0k18LC0mwqSH0=
Subject key identifier:   D8:FF:89:72:91:CA:98:6A:24:21:72:19:34:BB:87:37:89:F7:BA:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1AFD61FD4F374B2FC776BC1DA8B3C6D84DC01E6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8059cc-024c-4c44-b11d-7b207e0d0a8d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f61:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fd:61:fd:4f:37:4b:2f:c7:76:bc:1d:a8:b3:c6:d8:4d:c0:1e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e5d29827ec3da334931396143f6de24e7a6edb2a6d3e8d241932c69f94a2c1d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c1:9b:7f:d3:38:68:43:f5:10:0e:4c:f5:b7:
                    c0:ab:45:7b:c2:7f:19:6d:06:8f:fe:fe:56:91:49:
                    ad:05:6c:a4:2b:df:ef:d8:77:e0:82:f1:17:79:94:
                    38:9c:00:15:58:9d:d2:92:b4:a5:48:7d:2c:b0:cc:
                    f3:ae:d5:30:d4:54:18:7e:0f:74:68:c3:cf:29:68:
                    82:a3:e9:0d:e6:5f:cc:02:38:cd:3d:1d:7d:4f:42:
                    73:c0:be:8c:b2:ef:8f:eb:f1:75:72:44:b4:a0:16:
                    b0:9b:3b:db:ae:b6:b5:fc:ee:f4:aa:5b:79:2e:7b:
                    c3:e6:41:a8:12:07:13:d5:16:29:c4:29:f4:f0:b2:
                    0e:3f:73:13:ff:fd:c1:c7:6d:5b:ce:80:af:d6:77:
                    75:22:1d:f2:92:4a:d8:56:d4:eb:fc:35:61:4e:da:
                    ae:d8:97:f3:eb:07:56:f6:13:58:f6:44:b6:cc:6b:
                    67:2a:0f:84:38:6a:f4:22:6d:80:85:ef:e9:e3:4f:
                    1d:46:70:1c:0e:25:3f:5f:f4:51:9c:0e:87:8a:58:
                    fd:ca:6f:de:41:1a:00:d6:ba:cf:e8:ec:1b:30:a2:
                    6a:2f:29:35:9f:d2:dc:a3:96:bb:ac:4f:3f:2f:53:
                    9e:cf:2f:ff:f1:76:74:89:58:d5:5f:31:f3:63:6c:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FF:89:72:91:CA:98:6A:24:21:72:19:34:BB:87:37:89:F7:BA:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea8059cc-024c-4c44-b11d-7b207e0d0a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:b8:79:0b:31:21:70:ce:65:f4:b7:bb:54:45:14:38:1f:b1:
         0d:93:9d:92:99:0e:b2:77:d2:21:f4:db:7c:23:4d:3e:48:4e:
         bd:d6:58:1a:16:9b:8a:8b:39:03:2f:20:18:b8:4a:05:23:2e:
         51:b0:9c:c0:b5:1a:ce:34:d9:01:1c:87:08:96:61:00:a3:fb:
         c2:1c:05:e4:2e:61:5b:70:64:e8:0d:62:72:9f:b7:e5:98:16:
         36:1b:0d:48:c0:6a:d8:de:55:4d:20:57:63:03:6b:61:e2:40:
         69:4f:d0:1b:06:31:73:fa:23:2a:a2:b9:1c:cf:9b:51:94:2a:
         84:88:3a:52:3a:e3:28:0b:60:51:38:b5:73:cf:c1:a4:16:77:
         95:00:3d:6d:34:28:d9:cb:60:85:88:8f:91:e6:c9:09:a5:1a:
         38:1f:50:45:dd:c2:46:ba:73:aa:bd:95:cf:4d:99:d8:1a:b7:
         66:7f:bf:99:1a:ee:a6:65:8e:66:66:20:b0:e6:1e:dc:96:56:
         2f:22:33:bf:80:d4:a4:29:7a:bb:3b:48:45:f2:a0:41:98:e3:
         12:27:2e:86:0a:3e:98:c0:f9:c2:3d:c0:41:77:82:ec:38:ae:
         c7:68:09:cd:2e:17:ff:d2:fc:05:3c:15:f1:d4:26:58:f6:bc:
         50:05:16:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----