Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa
File:                     fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa (raw, json)
Hash identifier:          V3chX+o1PfxHYTA6TQhyzfgGtfNXFV0KvW4oIJqSwmg=
Subject key identifier:   35:C0:7B:08:92:A9:3E:FC:49:E4:D4:8F:96:F6:E3:0A:04:30:6D:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F79ED23DD12D5CB12BFA6265F1C2CE377B09C37
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:79:ed:23:dd:12:d5:cb:12:bf:a6:26:5f:1c:2c:e3:77:b0:9c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8998e9de5d49876a3a856f36cd32402e7f2dfd3ed01d344d49f5392d9abab664, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:58:35:9a:ca:0b:9d:eb:d5:cc:8d:e5:63:
                    60:35:84:b8:f5:13:61:ed:05:e6:98:bf:6c:61:4a:
                    a0:6a:86:f1:8a:f3:cc:a7:32:b1:b2:e1:7e:33:4b:
                    58:60:eb:76:af:ca:f2:86:6e:92:3d:79:34:0d:3b:
                    37:54:8b:a0:b4:5c:63:30:a2:7d:62:66:26:85:17:
                    ea:06:ba:95:c5:33:75:2c:09:3b:3e:0e:d6:a5:8f:
                    ce:61:cb:78:72:98:79:6b:57:89:b8:77:3e:6c:5c:
                    e3:95:e4:51:e5:81:df:12:a0:2a:b6:3d:88:2a:cf:
                    97:f6:27:b6:48:56:e7:38:24:6b:65:f3:71:ea:f7:
                    75:cd:89:1e:3f:12:32:6f:d8:b7:f0:bf:35:09:49:
                    10:8b:9c:79:da:23:f3:23:cc:c7:6f:fc:4c:66:73:
                    bd:7d:8c:2e:03:43:5f:0a:5c:97:f6:5d:d4:20:bf:
                    98:b0:e6:c8:b9:55:05:ec:03:24:61:61:62:63:50:
                    ca:cd:b8:19:f3:11:0a:18:48:1e:1a:b0:75:5a:8e:
                    ea:19:fa:38:32:9a:79:c4:a9:4c:24:d4:cf:8d:2c:
                    ec:3d:3a:0a:3d:30:83:5c:ce:e0:3c:5c:c1:3e:8c:
                    7a:f5:14:6a:44:0e:30:17:94:4a:56:b4:b1:cf:dc:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C0:7B:08:92:A9:3E:FC:49:E4:D4:8F:96:F6:E3:0A:04:30:6D:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc739be7-5c57-4f3f-bc0f-4b965b7bd6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:cb:dd:d3:47:da:2d:0f:bb:1f:38:df:61:a3:57:1e:95:1e:
         da:fa:c6:f8:9e:95:fa:db:44:b9:43:4f:66:8a:8d:41:42:13:
         9b:df:4d:06:db:74:5d:c9:04:09:a5:5f:2b:2a:85:89:25:2c:
         c0:1d:59:ec:76:c9:98:25:a8:58:93:e4:05:10:53:09:68:80:
         cf:4f:fa:47:f0:1e:08:c1:ea:dc:50:33:e2:f0:73:3a:0e:0c:
         3c:57:31:31:0d:e9:da:6e:0a:99:dd:26:21:07:3c:fa:20:80:
         fc:97:48:cc:a8:ee:62:4e:e5:1d:6b:88:e6:86:82:e7:b3:b3:
         fc:87:2b:3e:c2:78:69:32:84:90:6d:48:cd:c4:f8:19:c8:b0:
         43:cd:42:84:92:ed:c5:8f:01:a0:1b:1f:d0:48:8a:70:6e:2b:
         bd:f4:27:31:39:43:58:78:9b:b5:78:70:54:6d:ef:ef:f2:9e:
         b9:47:86:82:a8:bf:81:19:67:a5:c0:f8:1c:5c:13:74:a6:43:
         4a:e2:1d:b0:a6:d8:1f:61:cd:3b:33:8c:be:73:3d:ff:d2:3a:
         69:bc:77:dc:5a:dd:48:e8:ca:ba:e0:21:c6:97:44:ac:75:0a:
         e6:2e:b2:b9:74:27:d9:9d:61:ad:e7:35:89:7c:e7:10:7d:e9:
         92:14:a5:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----