Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa
File:                     1a3256e1-07c1-45cc-9223-db5bf08f2539.roa (raw, json)
Hash identifier:          IhdWaZXKfYEggNLoCJAGb+WNSkThwpAqzu3rRU4NWws=
Subject key identifier:   89:22:D2:2C:21:8A:68:61:C7:8B:55:C5:08:36:C1:EF:A6:82:FA:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2541FF324D968B347BC3E32A4C27693C1415C18E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa
Signing time:             Fri 28 Mar 2025 17:20:57 +0000
ROA not before:           Fri 28 Mar 2025 17:20:57 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f28:c000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:41:ff:32:4d:96:8b:34:7b:c3:e3:2a:4c:27:69:3c:14:15:c1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 17:20:57 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:ac:28:15:42:83:9e:a6:9e:fb:22:32:76:
                    23:e5:37:f4:7f:ca:6e:bd:90:e5:5d:1e:e9:27:4d:
                    8e:95:fb:07:2c:3a:7e:f7:3c:04:1a:5f:a7:cc:be:
                    17:17:0a:96:f1:24:de:a0:93:fe:ac:b1:ea:68:31:
                    e4:99:e2:1b:1c:64:87:db:0e:9a:23:e2:24:95:9e:
                    0b:f2:56:d8:b1:4b:6e:29:d0:19:75:5f:9d:12:04:
                    ff:bb:ef:c2:76:d6:e0:fe:4e:4c:d1:28:ff:4e:14:
                    f6:73:a1:1b:90:a9:2d:86:86:28:38:97:11:ea:dc:
                    59:fa:dc:0f:fb:1a:f3:34:29:b7:43:d2:a0:08:83:
                    4d:ef:ca:d2:ae:a6:4f:c2:f1:21:85:5a:04:cc:30:
                    5c:19:48:03:e4:9d:b7:09:93:31:35:0f:5e:26:75:
                    d8:3a:37:be:52:c8:e8:b0:ff:3a:3f:51:7b:c6:3b:
                    68:98:36:a3:82:cd:72:50:a3:66:0e:e4:59:bd:40:
                    ec:29:00:8d:f9:d3:4b:ec:2a:b0:70:63:b8:16:18:
                    9d:c5:b8:1c:41:79:f5:12:1c:88:4d:4f:eb:b4:ae:
                    35:5f:7d:ad:91:10:c3:56:8a:b0:2d:09:32:3d:1b:
                    2e:bb:64:b5:11:cc:d1:57:0c:e6:6f:ac:c9:af:49:
                    cc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:22:D2:2C:21:8A:68:61:C7:8B:55:C5:08:36:C1:EF:A6:82:FA:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a3256e1-07c1-45cc-9223-db5bf08f2539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f28:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:8f:c0:ad:90:83:fe:1a:14:fd:0c:0d:d7:9e:63:56:ba:
         db:17:9f:06:5e:1a:3b:98:92:c3:34:31:12:2e:e4:09:6e:2b:
         b0:6e:4a:9c:10:30:68:5e:70:15:a6:e3:cb:2a:f9:5d:2a:06:
         ac:6e:50:53:a4:84:ea:5a:05:a5:86:10:35:41:26:32:99:fe:
         28:a8:ed:cc:b3:68:71:3c:bf:d8:62:62:78:bd:4d:b4:36:d3:
         b0:07:8a:8a:98:57:b5:8d:73:6f:33:ca:c5:cf:4c:eb:fd:fa:
         7a:96:8c:ff:ec:78:12:05:0b:02:e6:c3:84:64:f3:82:4a:65:
         82:e1:79:1f:6e:aa:f4:22:65:17:1b:2e:9d:e5:ac:c0:5a:9e:
         c5:8c:f4:56:e1:a3:a4:fd:a9:4b:52:79:96:99:af:5d:d2:ec:
         51:f1:35:92:97:0b:5f:d8:4f:12:7c:a9:b8:d4:fe:f4:41:3d:
         31:19:aa:1c:cb:e4:e3:ae:c3:50:8a:dc:a5:3e:e0:51:f8:37:
         0b:1e:b1:e9:a4:42:21:cb:54:1d:f8:bb:7d:34:42:74:07:f3:
         76:66:9d:29:9a:c4:cd:09:46:14:80:f1:a8:dd:e4:05:0d:68:
         74:53:b2:77:11:c7:63:c8:99:d0:ba:c0:f6:e0:14:c2:eb:c0:
         99:1d:dd:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----