Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f37ce230-1cb5-42b5-8389-47c8f1fe22e5.roa
File:                     f37ce230-1cb5-42b5-8389-47c8f1fe22e5.roa (raw, json)
Hash identifier:          4uN/gli2Nel2Tw6KU9N2QIXT1+KEGKBJdQ7z3SApruA=
Subject key identifier:   29:DE:60:52:67:68:64:C9:9A:D4:83:33:63:84:9C:56:93:89:F7:26
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       759D5A90FF1AC90DB50429BD0FC7980AA638B188
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f37ce230-1cb5-42b5-8389-47c8f1fe22e5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:8060::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9d:5a:90:ff:1a:c9:0d:b5:04:29:bd:0f:c7:98:0a:a6:38:b1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=7e594a41061cb1782986dee7e34620fee5c38007723f81adde1fa6c70cae7547, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:a6:ed:d6:a7:f6:76:52:bb:bc:7c:20:9f:
                    8d:39:80:33:02:e2:23:5e:71:48:a9:87:76:1b:a1:
                    c9:c2:e5:86:9b:41:68:63:b3:4f:47:fa:d9:61:bd:
                    43:ed:99:65:5a:d2:7e:d3:a4:38:fa:fc:5f:ed:f8:
                    e1:3f:2d:33:28:1c:e1:23:13:e3:d9:16:52:bd:36:
                    7a:a9:58:83:1e:49:08:8b:80:38:1e:60:cf:8f:79:
                    0c:0d:97:ad:ce:c6:f3:19:d0:fd:c6:11:d9:06:c3:
                    a9:ff:b9:a4:51:84:f5:46:4a:fb:5f:6a:db:51:88:
                    d9:65:ca:9b:00:78:83:88:5f:f9:17:04:81:83:45:
                    b7:7a:52:b1:5b:81:08:05:44:3d:79:c8:07:e5:2d:
                    db:e0:a7:bf:79:26:cd:14:e6:10:b1:01:8d:11:a2:
                    bf:2b:a0:12:b7:9d:d6:c0:1d:6a:7e:63:7b:0b:72:
                    f7:0f:f5:e8:20:0c:90:3f:7a:5d:78:70:25:6b:ba:
                    a6:83:36:e7:51:e9:b2:8c:91:3b:25:da:3d:48:2b:
                    ae:a2:cf:c5:d7:81:d0:eb:73:a3:db:f1:80:f3:e7:
                    9e:de:63:18:8e:36:b9:64:09:c5:6a:6c:1f:c6:a4:
                    2d:5f:e9:d0:ce:c9:82:10:62:89:43:e3:28:49:c9:
                    80:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DE:60:52:67:68:64:C9:9A:D4:83:33:63:84:9C:56:93:89:F7:26
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f37ce230-1cb5-42b5-8389-47c8f1fe22e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:8060::/46

    Signature Algorithm: sha256WithRSAEncryption
         b8:ec:b1:04:92:7a:d2:4c:cb:ac:cd:9f:bd:fb:a5:1a:e3:3c:
         7b:c6:1c:52:0c:7f:6f:09:c5:21:fa:76:fa:54:60:1e:1f:3b:
         8d:e2:24:8f:56:43:87:a0:ae:3f:68:ef:9c:98:f8:38:aa:d9:
         d0:0f:d3:a7:70:76:09:c5:96:88:37:e6:a0:1d:7d:98:dd:5f:
         91:22:0c:76:ce:8c:ca:33:62:8a:8e:7b:ea:a1:cf:45:5d:16:
         2e:3d:0f:3a:71:a7:15:ac:88:c6:25:36:53:4c:5b:d4:1f:6e:
         d4:eb:b8:b7:a7:67:77:f8:15:f2:f4:15:0c:6e:3c:c5:fc:f0:
         1a:ce:32:33:d9:0d:2d:03:cb:56:dd:42:8b:f4:dd:59:a1:a9:
         cc:0e:04:c3:87:45:52:af:d8:6d:d8:92:16:84:6b:d7:2a:4d:
         d6:d3:c4:ba:53:7a:f1:b4:ef:41:f5:2e:d5:bf:90:e4:7a:3c:
         7f:52:db:38:fd:5f:c0:c1:8d:c9:fe:19:e9:4b:49:2a:d0:34:
         c7:ee:57:3a:05:d8:ca:59:e3:73:13:7a:c6:de:76:c7:4a:2a:
         16:24:1c:55:72:60:ea:3a:39:10:54:8c:8b:0d:44:c1:af:c1:
         66:cc:5e:7c:c9:15:ea:47:88:0d:d1:d6:78:57:f3:51:99:99:
         6a:d9:2e:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----