Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bcff777-6fd1-44c1-a1b2-00ef2bd87871.roa
File:                     5bcff777-6fd1-44c1-a1b2-00ef2bd87871.roa (raw, json)
Hash identifier:          XaXGuqieiXMNbINKX531Zw7Ft6Df7az6iki8ETtB5m0=
Subject key identifier:   59:A6:91:1A:4E:61:82:D5:0B:72:31:17:1D:59:05:5C:07:B9:3C:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       03C3070DB0A5713D63D4C34B4F566097C7F5BADF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bcff777-6fd1-44c1-a1b2-00ef2bd87871.roa
Signing time:             Sat 08 Mar 2025 00:11:25 +0000
ROA not before:           Sat 08 Mar 2025 00:11:25 +0000
ROA not after:            Sat 12 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fef:3400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c3:07:0d:b0:a5:71:3d:63:d4:c3:4b:4f:56:60:97:c7:f5:ba:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  8 00:11:25 2025 GMT
            Not After : Apr 12 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e6:43:c1:cb:f8:7c:d6:db:e1:b8:ba:78:70:
                    46:d0:df:35:38:33:39:8a:73:a5:6b:18:5d:39:a6:
                    f2:e2:4d:a0:b3:8c:f8:ee:74:2e:e3:3b:12:bc:3b:
                    83:ba:2d:37:17:ed:36:af:d6:10:40:3c:7e:d7:9a:
                    03:1d:9f:76:57:d2:37:f8:79:f1:01:31:3a:00:cf:
                    c4:61:7d:0d:5e:57:72:b1:f5:00:7f:7a:a1:df:25:
                    9b:4a:b0:3f:3e:d9:d9:94:c8:84:6e:36:24:67:db:
                    59:8e:64:ba:a3:f3:93:74:44:25:59:b9:88:d5:ea:
                    c7:69:31:af:c9:b8:9f:95:56:7b:9c:2e:e1:95:89:
                    e3:93:76:6a:36:73:53:ad:db:06:99:64:e8:53:e6:
                    13:98:37:3c:d3:4f:d6:be:84:0f:ae:b6:1c:8a:bd:
                    bb:f0:48:58:a0:00:6c:15:d7:3c:20:33:5e:1c:b8:
                    58:0c:a6:27:3d:03:02:78:17:96:57:43:01:bf:4f:
                    0e:ee:c1:9e:a2:6d:82:50:7f:87:12:90:9d:64:8f:
                    12:53:cd:ac:0d:a9:11:f8:04:b2:6f:53:0a:11:95:
                    1e:34:c4:9e:b2:e4:8d:2e:c6:bc:50:2a:8f:2c:0c:
                    ab:0d:99:7b:99:0f:47:08:9e:1f:61:50:62:38:e1:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:91:1A:4E:61:82:D5:0B:72:31:17:1D:59:05:5C:07:B9:3C:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5bcff777-6fd1-44c1-a1b2-00ef2bd87871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fef:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:8a:18:67:b3:f8:5d:b3:90:c8:97:46:da:e0:6a:79:64:
         a9:d9:bc:4e:85:c3:fd:87:ac:d3:84:70:68:bf:fa:20:80:1c:
         fe:ee:53:a0:61:c9:ca:6f:ab:24:82:21:7b:0b:78:c0:b7:5c:
         f6:d5:da:a4:c5:b7:11:f2:e4:38:41:69:8e:4a:fc:b2:2e:02:
         ad:e5:29:94:73:02:27:bc:24:2b:fd:f9:9b:d6:8e:1c:14:35:
         31:71:d2:e1:a2:8a:5f:c7:3a:22:0e:6d:47:de:80:da:c9:95:
         96:e1:fb:32:e5:e4:47:f8:6f:0b:9d:c9:70:5f:d4:bf:9d:15:
         b1:3c:09:85:0a:c4:13:8d:e1:dc:4b:4c:27:da:a2:d6:d2:6b:
         30:a9:c8:65:bf:49:03:c9:6f:8b:99:26:f8:46:3a:b7:e9:4a:
         47:4d:26:d1:78:03:89:cb:21:be:75:41:28:81:54:3e:74:5a:
         19:14:84:ba:a5:9b:fd:ce:6d:60:ba:07:4f:5a:47:bd:48:ba:
         82:31:85:bf:8c:73:4f:62:1d:92:7c:89:1d:25:6a:1a:63:cf:
         7f:79:6f:8d:70:07:c3:91:44:cc:11:89:21:d4:c9:07:6a:38:
         5e:84:f0:95:4f:a3:9e:f1:8b:67:48:8c:cb:74:8c:4a:0c:60:
         5b:e6:f9:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----