Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d235c80-c44f-4d82-afb6-30e1bd5b0bc7.roa
File:                     7d235c80-c44f-4d82-afb6-30e1bd5b0bc7.roa (raw, json)
Hash identifier:          GeFycSYAddt/Hnt+hToERdwRMGk86EthrvfdHQtVXDk=
Subject key identifier:   AB:A6:9F:30:E1:1A:A0:F6:09:16:7F:FB:D9:F5:78:8B:C1:6B:1B:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       172C623FF1FF15555D8C8BCA8AEF0D8626440BE6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d235c80-c44f-4d82-afb6-30e1bd5b0bc7.roa
Signing time:             Tue 25 Mar 2025 17:50:27 +0000
ROA not before:           Tue 25 Mar 2025 17:50:27 +0000
ROA not after:            Tue 29 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff4:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2c:62:3f:f1:ff:15:55:5d:8c:8b:ca:8a:ef:0d:86:26:44:0b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 25 17:50:27 2025 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a3:f8:32:7a:29:9f:b0:07:bf:cf:9f:d0:f6:
                    4b:2f:6d:83:24:4e:99:74:ca:25:36:b3:83:5a:d9:
                    40:58:a4:8c:d9:cd:c0:5e:42:32:81:ce:be:70:2c:
                    3a:f6:42:e8:93:d7:81:0f:ff:1d:c0:10:c2:41:fb:
                    df:f7:fa:95:ce:12:12:ca:ea:bb:8c:7b:42:88:ee:
                    27:1a:11:0e:cc:1a:65:e0:51:9b:1c:e6:00:d8:1c:
                    e1:d0:ef:66:6d:6a:1f:aa:4c:db:14:47:c4:e0:72:
                    dc:f8:96:92:36:cf:2a:dc:b9:7e:f8:41:09:f1:f4:
                    72:7f:73:38:65:c0:91:6f:18:89:7d:1d:66:53:7c:
                    23:7f:da:3b:bd:8a:6d:59:9a:ee:8f:95:2b:71:e1:
                    92:d8:2b:ca:7f:f6:af:bf:dc:3e:a7:af:ff:bd:78:
                    9a:80:35:f1:cc:6e:63:b5:7c:49:22:19:c1:44:61:
                    cd:80:58:94:21:c3:58:fc:17:ae:ed:db:44:bb:c8:
                    7a:63:28:66:4e:0a:79:74:7a:ae:f8:40:25:d4:2c:
                    e1:8e:91:7a:6b:d0:82:6d:ca:52:b4:56:d6:e5:b8:
                    52:73:e0:3e:02:ac:15:3e:43:02:08:52:cf:0b:84:
                    87:fa:0f:60:ed:9e:4b:7d:12:bd:98:b9:a5:18:6f:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:9F:30:E1:1A:A0:F6:09:16:7F:FB:D9:F5:78:8B:C1:6B:1B:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d235c80-c44f-4d82-afb6-30e1bd5b0bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff4:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:7f:fe:ac:73:7a:a7:13:a5:1e:0d:bd:a4:66:89:33:b9:e0:
         64:66:8d:ab:43:0b:37:07:f4:4b:cd:df:d4:d4:85:e1:fd:1a:
         1e:65:fa:28:e3:66:f2:b1:ee:ef:bd:4f:5c:05:c2:43:08:a1:
         28:7c:ed:12:eb:20:a5:e5:ec:9f:48:ce:a9:ec:ae:de:2b:b6:
         ea:ba:e2:8b:73:3f:10:50:b5:69:51:be:8a:1e:20:65:73:87:
         c6:0a:e8:e9:d1:b3:7b:5e:44:33:cd:c6:6c:b4:14:60:f8:26:
         2e:04:f6:46:e4:c2:ad:b5:a2:8b:76:d9:f5:ef:93:79:94:08:
         a0:7d:b5:c9:82:8a:65:c9:98:eb:ce:90:98:af:e0:27:79:f1:
         dc:66:92:71:24:a6:1e:98:e6:f6:e0:62:30:1d:c2:27:b4:8c:
         3e:b5:15:8c:f7:9a:e9:ff:2f:ba:56:60:53:b3:38:7a:63:df:
         f0:67:f9:49:2c:02:61:17:dd:d9:5f:9d:dd:b3:23:68:7a:a6:
         f9:a2:9a:4c:6e:4f:6d:2f:3f:4a:58:80:23:c2:1b:4a:e9:08:
         96:b7:3e:f8:bb:6e:a0:03:21:a4:65:7f:55:fc:9e:a0:6d:83:
         5c:04:0e:01:bd:35:79:29:d5:08:9d:7d:5f:1a:ee:f6:72:29:
         74:af:de:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----