Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e2f7-257b-4cdf-86e6-2bc987551ed8.roa
File:                     2997e2f7-257b-4cdf-86e6-2bc987551ed8.roa (raw, json)
Hash identifier:          mKhONTtReLSl/X+7ZtqgN76N5pa6qho3pyQHi4IkVQA=
Subject key identifier:   EB:6A:32:BB:61:A3:86:C7:F4:DC:4F:38:F1:A1:74:07:A0:F9:F3:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CFC163731CB7F711E186EC52DF5C38C5BDB53A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e2f7-257b-4cdf-86e6-2bc987551ed8.roa
Signing time:             Fri 28 Mar 2025 00:10:53 +0000
ROA not before:           Fri 28 Mar 2025 00:10:53 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f38:2080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fc:16:37:31:cb:7f:71:1e:18:6e:c5:2d:f5:c3:8c:5b:db:53:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 00:10:53 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:0e:ef:d4:c6:c2:ca:df:ba:be:81:45:ef:
                    3e:bd:68:ce:90:7c:11:98:0d:f5:b5:6f:e6:22:44:
                    c3:88:ee:0e:86:92:79:4a:aa:4e:f8:57:28:0e:17:
                    ad:a6:a4:50:77:74:6d:de:f8:48:8c:1d:f4:31:41:
                    4a:af:c4:47:f0:ee:1c:95:ca:2a:e6:6d:5f:25:a2:
                    0d:14:bb:5d:69:e2:0c:72:ff:1e:55:96:8f:25:dd:
                    41:58:da:c1:d3:cf:0e:2d:6b:04:3e:b0:3a:d4:ee:
                    f3:19:49:9c:94:1b:2a:a4:e5:fd:3b:ce:a0:71:b9:
                    e4:48:1d:8a:94:62:5c:44:69:e9:09:96:4c:2a:b7:
                    04:12:41:36:59:91:9e:d0:26:38:08:00:e8:02:05:
                    ac:7e:0b:b9:cd:be:5c:02:4c:9c:a3:3f:c3:9f:61:
                    4e:f9:15:c4:e5:b9:6e:f3:b9:1f:cf:6b:e8:e8:ab:
                    6d:a8:50:78:87:1f:33:23:11:cd:ef:47:c4:06:8f:
                    64:0d:69:1f:11:a2:65:65:52:7d:5a:ac:63:80:fc:
                    0f:43:6e:64:7d:ab:a2:6d:8f:5b:ae:0b:ea:76:5d:
                    d1:6e:bf:8e:b4:fb:b8:33:ed:64:bd:8e:07:10:1e:
                    11:e9:5a:79:fd:06:ea:69:ed:b1:d0:4d:4a:5f:de:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:32:BB:61:A3:86:C7:F4:DC:4F:38:F1:A1:74:07:A0:F9:F3:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2997e2f7-257b-4cdf-86e6-2bc987551ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f38:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:3f:84:7b:23:6d:c7:c7:8b:05:8f:5f:8c:64:b7:2d:fa:
         2a:07:ad:f9:52:a9:08:df:6f:bf:76:94:9d:8c:c4:37:88:cd:
         08:53:fc:7b:7a:39:43:3d:10:70:18:c2:50:d4:e8:46:ed:0d:
         11:e8:3a:4c:06:5d:d3:d3:02:b3:9a:4d:ae:ce:49:8d:e3:ae:
         f2:16:a0:bd:e3:f0:95:96:e0:71:92:8a:bb:d2:3d:22:4e:c5:
         0c:3f:e7:18:3e:bf:8f:dd:9c:bd:57:7a:88:17:e9:48:f1:3a:
         f0:19:a8:d7:9d:ef:2d:1d:5e:60:8f:5c:4f:06:ff:46:19:71:
         23:83:14:b9:b5:83:50:17:7c:4d:51:48:75:bc:11:7b:78:1c:
         e6:72:d8:e3:ce:4e:16:bb:bb:cc:31:87:7e:dd:e4:88:af:08:
         da:7b:f6:0c:56:b8:e5:aa:5e:b5:c9:46:d9:f7:2e:82:ab:3b:
         ac:ae:1c:d2:a9:79:c8:8d:62:7f:91:79:a1:c8:5b:87:ae:0b:
         75:bf:47:51:8c:8b:3e:fe:8e:4e:8b:30:c1:1d:89:49:f5:ae:
         fb:3a:e3:2b:81:ff:12:d8:ff:4b:b3:e3:69:77:bc:20:fa:75:
         29:81:86:c1:82:f7:a6:45:ff:d3:7c:5d:25:03:8f:f9:36:5f:
         62:ed:9f:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----