Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa
File:                     61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa (raw, json)
Hash identifier:          76HqOGfO77O2YAIHIq9t4zve9Te5GziptRd0/+AGkVk=
Subject key identifier:   A1:AD:79:C2:9C:5A:B8:89:E9:EA:3F:8B:D0:A9:06:2A:1B:0E:A2:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       773511FD9649CE2FFB6C7D161423C179039DD978
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa
Signing time:             Fri 28 Mar 2025 15:41:28 +0000
ROA not before:           Fri 28 Mar 2025 15:41:28 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffb:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:11:fd:96:49:ce:2f:fb:6c:7d:16:14:23:c1:79:03:9d:d9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:41:28 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:5b:f2:60:39:4a:0a:d0:57:d7:68:01:f3:
                    59:0d:93:b9:46:3a:d7:bf:52:e3:78:db:c7:d9:e8:
                    1a:90:73:8e:89:21:fa:7a:fd:26:24:79:69:54:33:
                    04:6d:7c:6c:71:2c:6a:02:a6:ad:e6:e1:74:a6:d6:
                    fe:e2:31:8b:14:53:fa:bf:f5:d2:0e:05:6c:46:28:
                    07:e8:d4:53:6c:76:91:fd:56:44:48:09:3e:f5:cf:
                    69:22:41:80:89:b9:f1:e4:c4:84:fc:8a:51:97:3c:
                    7f:4a:5f:5d:7a:c0:f2:67:2a:a2:10:73:69:92:29:
                    bc:c8:14:da:8a:07:fe:74:d4:0c:c5:4d:e9:a0:39:
                    06:51:ca:ca:4c:90:49:93:06:9b:8d:af:af:d0:7f:
                    60:58:30:95:fb:0f:48:ce:db:87:ce:0d:dc:f6:c0:
                    07:ed:c2:ed:ad:e8:84:f8:f8:5b:70:1c:a4:14:de:
                    1d:2d:ab:5b:c4:f4:6e:4d:00:00:ee:db:8e:d3:36:
                    71:0e:d6:63:75:f7:2e:0c:6d:98:91:73:e5:26:a5:
                    26:f7:d2:0a:f2:2a:4a:de:0c:2a:17:fc:79:33:f5:
                    b4:43:f7:af:4b:69:28:e1:59:4b:95:81:e5:a4:70:
                    6b:bd:4e:72:87:6c:12:a3:4d:29:98:d8:62:c6:35:
                    bc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:79:C2:9C:5A:B8:89:E9:EA:3F:8B:D0:A9:06:2A:1B:0E:A2:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61a0f59b-1f39-4709-8ce3-9c67e7815a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:77:c1:1e:b9:1c:b1:64:52:cc:c6:5d:4e:c0:f1:85:39:78:
         60:b5:1a:6e:9d:fc:b8:4a:fb:3f:98:e4:6f:10:76:27:ee:3f:
         9f:98:9a:b8:b7:e3:d1:fa:80:27:5c:2f:56:47:3a:33:88:33:
         98:29:a9:3f:10:d6:03:a1:d0:a6:fb:b6:cf:94:6b:f2:1c:3a:
         ee:10:0b:68:c4:b8:bc:e5:2a:89:05:82:f4:12:80:16:fc:89:
         2f:9e:1f:8d:a5:00:15:15:53:1c:84:3f:dd:b3:92:0e:c9:5a:
         01:07:17:68:e7:18:30:6c:84:b6:10:db:7e:75:f9:82:dd:0e:
         79:bb:b3:98:89:9d:7c:1b:1d:1d:cf:24:31:89:ca:98:de:41:
         21:35:08:90:87:4d:fd:47:26:e0:1b:b4:06:cf:13:d8:bc:69:
         05:25:cb:6b:e6:bb:71:20:dd:fc:8e:43:7d:d1:43:b6:42:22:
         33:0d:f8:7c:d9:46:bc:6c:06:94:5c:b2:e4:3b:12:76:9b:1a:
         92:49:d0:c8:eb:6f:37:23:ff:03:45:75:de:7d:55:19:fa:6c:
         b3:cc:34:78:77:f4:fa:7e:1e:fc:03:88:c4:87:a3:dd:9e:a0:
         a5:29:88:23:17:ef:b2:db:6c:64:07:89:bd:59:e7:73:b9:73:
         fa:c0:ec:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----