Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f133bf79-2e8d-4311-ae9f-65904b1bf6fb.roa
File:                     f133bf79-2e8d-4311-ae9f-65904b1bf6fb.roa (raw, json)
Hash identifier:          USGzXmq5gL5qd9oy/0RG1Jeqgd28Gi5w2bpGbCMUSPw=
Subject key identifier:   13:FC:19:94:86:E2:27:A8:6C:6B:15:08:36:14:76:B1:9F:2D:66:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       116FFE2EB35905ADF268A0FCB7AAB5DDE2E4BB60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f133bf79-2e8d-4311-ae9f-65904b1bf6fb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f1a:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6f:fe:2e:b3:59:05:ad:f2:68:a0:fc:b7:aa:b5:dd:e2:e4:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=33ec4f7bf6f57ba94db36be0585ad38584e276e0f59e7511ed104a4bfb478661, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:13:49:b7:f4:6c:ca:a0:4c:d8:16:ee:00:
                    30:9b:a0:9d:fe:8c:a2:8a:60:1b:73:2e:6e:0e:b5:
                    fa:ed:92:af:22:ea:9b:93:9b:2d:67:2d:87:20:ed:
                    5c:55:e5:6e:fc:e3:dc:49:97:99:52:e1:0e:12:33:
                    c2:fc:9c:dc:c1:9d:84:10:0b:3d:9b:3b:b2:20:33:
                    5c:3d:5c:74:78:e2:b7:74:d9:a5:c8:59:7a:2b:d6:
                    5c:b4:aa:22:44:a1:37:39:35:56:ab:85:c1:a3:77:
                    81:21:cb:0b:23:eb:f3:7d:5e:42:03:46:12:ca:de:
                    d5:b8:f8:c2:b1:de:59:e7:33:b3:5e:98:eb:1c:fe:
                    04:16:a7:f9:dc:1f:a6:b7:23:f0:cb:81:49:21:1e:
                    87:88:27:8d:d8:b3:8a:d0:99:53:3e:6b:06:c7:66:
                    b0:2e:81:1c:b5:83:96:bf:28:9a:c7:38:a0:1b:ae:
                    b3:ff:41:27:4b:e1:6e:7e:d7:5b:d3:ec:d9:b6:fa:
                    df:86:57:f7:ae:12:cd:5b:28:2b:0b:bd:19:d4:ee:
                    90:8b:d6:f2:18:a2:ac:a4:b8:71:59:bb:30:e7:8d:
                    4a:77:ae:2d:27:5e:e1:0a:b5:10:19:7c:30:85:85:
                    96:c0:6f:61:3c:7d:33:0d:6a:03:f1:ee:06:d4:40:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FC:19:94:86:E2:27:A8:6C:6B:15:08:36:14:76:B1:9F:2D:66:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f133bf79-2e8d-4311-ae9f-65904b1bf6fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1a:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:97:91:46:9e:15:68:9e:f0:01:05:02:72:43:b0:9d:7b:
         98:ff:95:9b:12:45:3c:ad:5e:ae:c2:18:df:2f:e3:28:d4:90:
         17:eb:da:a5:2d:53:d2:1e:aa:ba:c8:71:0f:b3:3a:57:55:ab:
         c2:00:ee:48:9d:1b:c6:f5:55:85:5b:38:8b:9d:64:19:7b:48:
         db:45:69:c6:3e:73:4f:00:f4:a3:b6:b8:60:11:25:a5:de:f3:
         63:1b:79:c5:aa:7a:4e:16:14:b1:5b:ad:f7:1f:35:34:3f:20:
         83:33:53:a0:ee:b2:b9:4f:c5:9c:aa:ca:9a:97:99:25:a4:8a:
         5f:6e:8c:25:33:36:4b:a8:4f:18:db:96:a7:0b:fb:38:fb:27:
         cc:b8:f8:4e:f9:f9:d3:5b:13:ea:a1:5b:30:01:44:69:8a:8c:
         c2:9d:3f:fb:50:da:2a:d4:18:34:8f:41:d3:e9:48:79:7c:fd:
         c9:a4:83:72:dc:13:fa:f5:a5:bd:f3:40:ce:65:8d:fe:09:94:
         43:1a:cf:64:3a:43:d1:c0:ca:fa:f1:85:6c:ba:06:4a:1d:e3:
         ea:3a:75:fc:a4:2f:83:2a:19:5a:be:11:c2:59:87:29:a8:06:
         2f:e8:48:60:3a:cd:e1:fa:37:ab:02:06:f2:dc:77:73:53:4c:
         67:17:38:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----