Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa
File:                     09200eb5-786c-452c-91b5-6e7b43daf2f1.roa (raw, json)
Hash identifier:          GFjBLHcR98DihBUz86YB1/vSHcgmPNXGnvoTXUo1YAA=
Subject key identifier:   2B:90:B8:18:0B:5E:22:2C:77:17:44:B8:F4:8C:F2:80:C9:A1:73:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       020B70FCEB720352358E9C0E1DF5CA53D4913AB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa
Signing time:             Fri 14 Mar 2025 00:21:41 +0000
ROA not before:           Fri 14 Mar 2025 00:21:41 +0000
ROA not after:            Fri 18 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f2e::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0b:70:fc:eb:72:03:52:35:8e:9c:0e:1d:f5:ca:53:d4:91:3a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 14 00:21:41 2025 GMT
            Not After : Apr 18 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:02:ba:86:55:c8:9c:c2:62:7e:8a:1f:dd:
                    2d:ac:1a:9c:12:2e:55:8c:3f:c1:26:bf:83:42:ce:
                    eb:c4:4d:ea:e9:a6:95:bd:79:a6:e0:8d:70:3f:3c:
                    db:bd:79:dd:91:f4:f4:00:9e:cc:c5:03:b9:a1:8b:
                    2f:c4:bd:61:e5:72:35:85:ff:39:92:16:fd:7b:89:
                    f4:85:25:ec:04:2a:a2:ca:f2:f9:bf:9e:b7:69:e7:
                    0c:46:cf:78:82:b5:10:8e:d7:81:6a:0c:ea:ac:fb:
                    ef:04:40:51:8e:8b:3a:ac:3a:dc:3c:5a:48:04:4f:
                    c6:21:36:d9:d6:34:33:3d:e0:51:f3:4b:8e:b7:7d:
                    53:69:be:29:3c:0c:69:6c:3e:b8:79:d8:d9:92:e8:
                    fb:2a:95:e1:e2:00:14:a9:e1:4f:50:23:04:7c:60:
                    ca:47:1f:6b:aa:da:91:f5:5a:cd:e5:cd:73:df:67:
                    79:1a:92:f9:01:8c:dd:2e:c1:92:f0:00:06:95:de:
                    5d:f8:1c:5e:eb:38:b3:ea:c3:13:80:23:ff:6c:5e:
                    32:ea:bf:7c:02:4f:25:56:8b:3d:9b:e7:55:be:ff:
                    77:87:96:51:c9:7a:49:c6:ce:d7:70:ab:59:73:ab:
                    60:60:b1:83:7e:ac:c8:d2:6b:a9:61:67:80:87:9e:
                    4b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:B8:18:0B:5E:22:2C:77:17:44:B8:F4:8C:F2:80:C9:A1:73:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09200eb5-786c-452c-91b5-6e7b43daf2f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2e::/36

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:bc:b6:4d:f3:2c:89:f9:38:d7:fe:18:c3:ed:a4:23:da:
         24:ae:dd:2e:b4:02:01:98:ac:dc:97:de:6d:45:04:e7:bf:4d:
         cc:b7:f9:c4:60:92:63:d1:09:ac:49:de:c0:a7:24:a6:b5:f8:
         ac:c5:6c:8b:b5:35:eb:c2:4e:78:d3:39:fb:23:28:54:a9:50:
         dd:f7:eb:dc:44:50:37:bc:8a:36:96:94:82:e2:2d:12:87:e2:
         9c:22:33:80:73:c6:13:5a:f1:59:64:bb:11:47:bf:16:50:6b:
         79:0b:c5:19:4e:ba:7e:d9:eb:6e:24:78:b2:9f:bf:0c:9c:08:
         c5:a3:28:3e:8f:16:8a:03:3c:e3:71:8d:75:76:a6:03:69:20:
         0a:7f:94:76:f8:44:69:d9:c9:5c:8a:9d:83:b6:01:90:62:b6:
         9a:0c:0c:eb:8d:38:3c:1d:6d:8b:13:e9:40:66:48:92:b6:e4:
         cc:c9:9a:ab:44:d8:ca:cb:dd:aa:28:7a:11:b0:e7:6e:2a:0c:
         51:5a:f1:1c:62:c0:bc:7d:a9:ba:9b:f3:24:58:5c:f0:0c:93:
         44:d6:90:4e:0b:86:d4:23:d0:5c:f2:c4:66:1c:56:3f:03:4b:
         c7:15:c4:77:cb:6a:a7:80:e6:73:1e:c1:3c:80:16:4d:2a:cf:
         f1:02:19:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----