Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa
File:                     953f92fa-8022-4f8d-aa19-8d28c32712f2.roa (raw, json)
Hash identifier:          UUtY2bvlmRWXKilvaClsM86y1t33BmIdyxVdwRVrivs=
Subject key identifier:   FF:B7:96:B9:45:D4:EF:23:67:B1:DE:07:5F:5B:A6:7C:EE:7A:17:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       624F2382C11E6C962F3AF10F9B7C35D7D80E2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa
Signing time:             Fri 28 Mar 2025 16:32:03 +0000
ROA not before:           Fri 28 Mar 2025 16:32:03 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f70:3400::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4f:23:82:c1:1e:6c:96:2f:3a:f1:0f:9b:7c:35:d7:d8:0e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 16:32:03 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:b8:3c:e4:61:d9:81:a3:c2:86:e8:ec:d8:
                    9b:4f:27:a1:2f:42:71:eb:bb:59:50:32:4c:2a:3e:
                    ec:dc:7c:fe:b2:db:33:41:aa:46:df:64:3b:87:b7:
                    85:c3:77:d4:04:7c:72:16:e2:2f:6e:2d:d3:f2:19:
                    74:fb:8e:93:5f:82:b6:b8:0f:b1:4e:17:31:76:0f:
                    45:64:70:27:19:64:93:d9:93:09:a7:49:83:2f:cb:
                    57:44:ec:4a:fc:a8:d7:bb:58:c2:11:37:c8:3e:15:
                    bd:0d:94:84:60:a9:5f:40:3e:c8:fb:5e:6a:87:34:
                    41:8c:ef:0f:80:69:29:ce:37:a0:d5:b4:5e:79:25:
                    04:a5:f8:5b:46:37:25:b7:69:87:86:f9:9e:d3:50:
                    08:95:82:47:93:1a:3a:86:78:d0:17:1b:5f:45:a1:
                    df:0b:3a:4a:9b:54:19:f5:d7:7a:cd:23:7f:e3:49:
                    6c:d2:69:58:8d:fb:a9:1d:cd:ba:68:19:0f:cd:37:
                    73:83:ea:d9:01:f7:2d:07:5d:23:f3:f4:2b:37:4e:
                    3f:5d:b5:ba:41:99:dd:38:f5:3b:f6:8a:e8:a7:fe:
                    4c:4a:08:55:c8:ef:99:42:15:1e:b5:26:4c:2b:f1:
                    0f:89:67:d9:88:ea:72:8a:aa:bb:6a:80:ba:34:14:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B7:96:B9:45:D4:EF:23:67:B1:DE:07:5F:5B:A6:7C:EE:7A:17:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953f92fa-8022-4f8d-aa19-8d28c32712f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f70:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:52:45:68:bc:6e:de:ce:98:ec:3e:1c:2e:fa:16:d8:f3:
         5c:57:89:8c:a4:d1:ac:f5:0e:e8:f1:f8:98:19:d4:9f:d3:e7:
         b1:4d:62:17:e2:e5:97:28:3d:9c:7d:82:06:ba:fe:c1:01:47:
         41:45:f6:69:95:7e:8a:fb:bf:0c:bc:05:64:b1:a9:46:0f:01:
         01:98:85:0c:36:bd:24:1a:93:2a:6d:af:ad:59:a1:47:a6:c6:
         84:fc:2b:ae:49:fc:29:b0:5e:08:6d:dd:09:bd:c6:3d:88:66:
         c9:22:92:b3:53:9e:08:09:7b:85:05:09:b8:cb:c8:68:43:d5:
         fb:f6:bc:9b:7f:7c:21:1d:d6:dc:56:f0:ad:9d:f5:53:11:63:
         ae:f9:41:c6:0f:bc:14:a7:a9:b6:59:a3:27:07:b5:3e:ba:19:
         b0:f1:2f:1b:66:bf:38:2b:15:4a:2e:79:91:10:a5:0a:ec:28:
         2a:29:03:3a:6a:5e:3e:cd:47:a5:52:6d:06:76:c8:f8:db:c0:
         d2:3b:2b:e1:c7:39:38:41:a4:27:6c:c8:18:87:49:f5:f4:ee:
         53:78:8c:45:dd:cf:9a:3e:0b:3f:0a:b0:74:01:1d:90:17:d4:
         53:d1:40:e3:54:5c:b7:83:a3:0a:b6:85:9a:14:c1:67:68:98:
         7a:41:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----