Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa
File:                     ed316d2f-cc47-41c6-a128-4baa596fed4a.roa (raw, json)
Hash identifier:          e2y5/mGwBrjjntqHbah/Be+ptaRNKgGUtk5XOQwhK3k=
Subject key identifier:   68:6E:36:0B:31:62:B3:A8:00:A1:64:EF:E9:34:96:CC:CF:48:9F:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02714209AB32FD09894E829FA4FCC3E291EEF4F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:71:42:09:ab:32:fd:09:89:4e:82:9f:a4:fc:c3:e2:91:ee:f4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=50968d0974515c7daf4b04f8dd1a79688b0b2a0989a5b37704ba7d20fa72c324, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:f0:29:a7:79:04:29:2c:d3:ff:d3:2a:83:
                    5b:9a:63:81:fd:01:7d:78:e9:cc:45:59:1f:5b:34:
                    0a:12:be:60:26:9d:9e:dc:4c:ec:92:57:5f:f5:e2:
                    fc:48:56:22:1d:09:94:e2:39:c3:43:ab:bb:3e:d8:
                    7a:56:37:d2:2a:63:f5:57:7d:94:12:16:a7:6d:24:
                    aa:f3:f2:6f:76:bb:85:96:44:5d:4e:6b:37:72:93:
                    4a:a3:49:83:d6:b2:b4:d8:01:d6:e4:73:23:f2:e9:
                    fe:fd:bd:07:23:11:f4:75:a2:50:02:f2:a0:1f:63:
                    d4:4e:99:a9:44:61:5d:78:9a:9d:72:6b:85:35:c9:
                    3c:ab:47:c2:c3:22:9d:df:96:0d:d6:bc:2c:c7:de:
                    f3:b5:d2:b4:10:fb:d5:aa:a9:c5:1a:6f:fa:30:ca:
                    40:5a:08:aa:4e:ed:25:53:8b:02:ff:72:b1:e9:37:
                    3a:0e:5d:c9:b5:f7:b3:bc:d8:9b:68:77:e5:07:8a:
                    83:0c:26:8c:93:90:82:9b:5c:73:d2:aa:5b:d0:b5:
                    04:24:03:15:34:56:6f:ca:4d:52:64:99:d3:7a:3b:
                    8a:99:db:a2:11:d8:0a:ea:db:e2:84:d2:57:5b:51:
                    34:54:bb:d3:58:f1:e7:05:65:6b:24:cf:21:02:4e:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6E:36:0B:31:62:B3:A8:00:A1:64:EF:E9:34:96:CC:CF:48:9F:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed316d2f-cc47-41c6-a128-4baa596fed4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4050::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:5a:7b:f2:9c:86:ff:3a:10:7b:7b:14:4f:36:14:d0:35:4b:
         1d:71:be:b1:f8:80:df:33:ab:dc:bb:15:fd:2b:0b:ae:7c:95:
         44:9e:cc:60:24:e5:9c:bb:ae:62:3b:a2:be:b6:96:9e:94:73:
         bc:cf:24:e3:8d:b8:d5:0f:ad:e4:11:c5:53:d1:c1:ab:49:3e:
         cc:7d:fb:8e:1e:74:0a:4a:4a:77:f0:0c:1a:e7:7b:c6:f9:ba:
         4d:33:5f:5d:34:ea:a7:8b:a6:c5:b8:17:e7:fe:e4:89:0c:de:
         04:e2:7d:3c:ef:5a:6a:e3:b9:9d:01:ff:a1:5d:87:32:09:e2:
         c9:6c:dc:1d:73:a2:d2:d4:82:0c:ad:a8:99:e5:39:a6:9a:f8:
         a9:a6:7b:84:0d:86:81:b9:06:8c:b6:12:85:0e:68:4c:30:c9:
         c7:49:2e:83:4c:c9:be:97:e4:f1:fd:12:11:30:ca:1f:53:8d:
         2c:76:c6:20:f0:3b:9e:61:d4:6a:02:2a:80:08:3a:7f:be:63:
         12:d6:8f:78:49:70:a9:e7:9f:2d:83:dc:53:e3:2a:9b:a3:e1:
         cf:75:8f:dc:79:2e:04:35:6a:16:2b:dd:3a:03:63:ad:f6:6b:
         1b:f1:eb:37:a6:24:5a:2b:1d:4f:af:60:5c:43:e3:a7:74:dd:
         9a:08:41:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----