Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4ec11e1-5411-426a-b008-ab95cba3be1b.roa
File:                     f4ec11e1-5411-426a-b008-ab95cba3be1b.roa (raw, json)
Hash identifier:          DL+khSr8MKu0noXWMHeIzWvL959gPo9j5n+FlZMwGtg=
Subject key identifier:   76:66:A5:D3:9D:98:81:36:14:D1:08:60:56:7B:4F:64:7F:79:7A:40
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5DA35EC91586E3472B259F2FF27AAF898CF1F586
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4ec11e1-5411-426a-b008-ab95cba3be1b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7:3480::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a3:5e:c9:15:86:e3:47:2b:25:9f:2f:f2:7a:af:89:8c:f1:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a66d55d4b04ae6b62541ff506b899f7b397605b2de96414f004f901beffefa61, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:c9:a4:fd:1b:ff:2b:29:84:85:b0:0f:00:
                    0b:13:5b:36:b9:41:7b:d2:89:5f:12:c0:1c:08:42:
                    33:cb:c8:6d:d0:dd:2b:e2:ff:82:ae:fc:76:6b:ea:
                    62:5e:d0:c1:1e:4f:bf:bd:34:43:0b:45:ff:27:47:
                    92:dd:41:30:56:a5:a8:4c:6b:97:28:58:76:73:54:
                    32:05:2f:f0:3d:c5:a3:d3:9a:a0:e6:da:5d:a3:21:
                    a3:9f:40:e2:f5:ee:b7:b8:1e:05:58:19:f6:d6:19:
                    fb:01:cc:11:50:97:34:18:c7:28:0b:93:b8:3b:9d:
                    54:84:87:c3:cf:d6:b0:c0:84:13:fa:cc:74:e7:76:
                    d5:bd:66:1a:42:1d:6c:8e:87:e2:ba:b7:74:1b:78:
                    65:cc:a9:fd:e5:d7:c8:ac:77:a3:a1:02:58:ca:c4:
                    3a:de:e3:1e:e4:50:98:50:bf:3e:fe:ae:5d:06:3e:
                    42:cc:b8:78:a7:b3:00:af:c9:e7:3c:65:25:e5:67:
                    b6:b7:b9:7a:db:b7:f2:df:55:8c:55:01:fb:db:90:
                    37:cc:40:fb:e3:f5:2a:1d:65:f6:ce:f4:b6:b0:d2:
                    3b:95:57:cd:8e:b8:57:3b:31:e7:8e:31:19:ee:a9:
                    77:7c:6a:03:56:0e:54:22:3e:a1:a3:d3:8e:04:33:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:A5:D3:9D:98:81:36:14:D1:08:60:56:7B:4F:64:7F:79:7A:40
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4ec11e1-5411-426a-b008-ab95cba3be1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7:3480::/46

    Signature Algorithm: sha256WithRSAEncryption
         bf:aa:ad:27:65:aa:f8:21:30:45:cf:67:ff:b2:69:ef:7d:69:
         91:a4:5c:d7:c0:90:02:c6:d2:2f:f7:5a:cb:90:d0:c1:bc:12:
         75:46:09:d1:b2:5b:fd:8d:43:6f:6e:bc:11:02:40:90:61:72:
         80:55:23:78:e3:6c:ca:d0:e7:14:fc:29:00:9f:5f:9d:60:f5:
         49:2d:b3:22:2b:38:f2:a3:b4:ab:99:46:ed:12:a7:60:80:c5:
         6b:88:7f:49:7c:c9:d1:35:d6:85:73:5e:99:ad:f3:ce:27:2f:
         57:0b:8d:da:fc:33:03:db:9f:79:d8:58:84:ce:d0:3b:43:d7:
         11:97:16:4d:af:71:c1:44:20:e8:65:3a:36:f8:3e:cf:e1:83:
         6e:9c:7d:af:1b:e0:70:ee:cd:90:d9:10:3c:ec:e0:53:bd:ac:
         8e:7c:bb:80:9d:ea:34:83:f3:c2:4c:c2:9a:84:7b:6b:db:35:
         99:ab:9c:ca:62:e8:4d:31:af:e6:5a:73:17:53:4b:de:a5:6f:
         f8:6d:ac:21:bd:dc:ee:89:df:01:c8:39:6a:0e:f6:64:e6:ce:
         10:5e:0d:cd:7c:ea:2e:4a:4a:ac:99:cc:0f:58:ee:6e:23:7e:
         fc:0b:6e:44:42:e0:ec:ee:7c:49:7e:dd:a7:15:f5:a4:f6:44:
         3e:df:11:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----