Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e753764-65ca-407c-8a93-f3b2a3e140c9.roa
File:                     0e753764-65ca-407c-8a93-f3b2a3e140c9.roa (raw, json)
Hash identifier:          BQgFcVOW7fboEl/uLEOy8KknA2F2Tl77x4oZN4c1oQo=
Subject key identifier:   3B:67:DA:E6:9F:02:3A:C8:FA:AA:F9:44:DC:CF:18:1C:2A:E9:80:E6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C750388B3FA5CC8CBDCD398F95A41D9FE7FF409
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e753764-65ca-407c-8a93-f3b2a3e140c9.roa
Signing time:             Fri 28 Mar 2025 15:31:17 +0000
ROA not before:           Fri 28 Mar 2025 15:31:17 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:3440::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:75:03:88:b3:fa:5c:c8:cb:dc:d3:98:f9:5a:41:d9:fe:7f:f4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:31:17 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:29:86:ed:51:45:18:43:6b:0f:0e:66:99:
                    bc:fe:0f:e1:95:72:4e:2d:fa:9e:56:36:3e:0a:e1:
                    62:ab:63:4b:f9:9c:bb:27:05:d8:75:79:2f:41:2d:
                    49:07:13:00:55:7f:1f:cc:9d:2e:90:fd:f1:99:6f:
                    eb:03:39:c0:08:57:f7:31:dc:25:31:9c:68:4d:38:
                    78:67:aa:38:11:65:55:72:9e:e6:ac:96:69:06:0e:
                    2f:d9:12:b8:00:a8:bb:59:c9:80:b9:be:b2:12:85:
                    e8:c6:f1:9f:a8:f7:77:55:61:06:f3:fb:3f:07:cb:
                    cf:e9:fd:9b:3b:4a:48:a1:e7:09:43:c3:a3:55:b3:
                    81:41:50:79:e0:7f:89:9a:bb:19:8f:35:bb:4f:06:
                    33:2d:0d:de:92:8d:13:ab:07:6b:74:9d:74:8d:99:
                    26:69:18:f2:7c:5f:5c:5e:1b:ef:ec:b4:71:69:52:
                    cc:67:cc:00:d0:f9:e8:51:c8:91:7c:99:3f:43:b8:
                    41:97:cb:e7:92:cc:29:98:a9:a3:ef:4b:39:d5:6f:
                    0d:79:c7:eb:92:45:d1:63:b4:ae:9a:a5:1a:22:fa:
                    cd:9e:a9:23:b4:4e:64:6f:63:7a:16:a7:e2:b4:5c:
                    0c:7f:e5:64:2f:1a:9d:a4:73:1d:7c:42:f9:23:b4:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:67:DA:E6:9F:02:3A:C8:FA:AA:F9:44:DC:CF:18:1C:2A:E9:80:E6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e753764-65ca-407c-8a93-f3b2a3e140c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:3440::/46

    Signature Algorithm: sha256WithRSAEncryption
         89:8f:69:23:33:ed:76:0f:e1:f0:56:e9:da:3f:91:86:a0:ec:
         05:e4:41:b0:95:63:0e:af:6d:4d:ab:61:6e:91:8b:80:93:63:
         03:12:e4:ec:a6:28:cc:c8:9e:73:ba:cd:cf:d7:e9:39:a8:60:
         3b:47:5a:7f:d9:76:ab:48:59:8d:1d:7d:45:94:97:3c:ef:94:
         16:f8:64:2e:9f:6f:ac:f7:84:7a:61:63:ee:59:25:e6:ea:59:
         0d:a6:58:82:43:9f:9f:e6:97:1e:c9:76:ea:9a:c0:f5:ff:43:
         e7:5e:cc:fc:e1:8e:6a:8e:0d:c0:fc:06:c3:c8:14:a0:79:99:
         29:b1:b0:cb:d7:06:73:73:93:43:f3:fb:95:fa:0b:37:82:b4:
         96:f3:6d:74:75:45:4d:91:f3:9e:d0:42:59:10:ec:3b:d3:94:
         65:b6:a9:e7:a2:7e:8c:ab:21:32:45:c5:2b:4a:8e:b9:25:bb:
         e1:48:11:b1:b0:35:92:08:05:0d:16:1c:53:41:52:c7:b9:80:
         db:2c:fb:56:72:74:e7:9f:46:fa:01:4e:29:eb:40:1a:13:52:
         4e:19:c4:f4:f8:bc:ba:b0:92:9f:85:e7:0b:a6:f4:8b:04:0b:
         13:da:8f:75:07:37:4e:38:e8:2c:ba:e0:47:ea:c1:db:4d:99:
         c9:fe:3e:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----