Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
File:                     991e350c-1b09-4392-a15e-8cc8924ef0f5.roa (raw, json)
Hash identifier:          1bXxAjeipPfhVRT214KDaN/6q2KKP6ZX6xhc9+Aq7bk=
Subject key identifier:   E8:A8:88:29:3D:15:D6:EF:8D:7F:C7:03:74:03:66:34:EA:9C:40:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E46B73CD18873543A0BAE036B1BA3FCF00F0E82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa
Signing time:             Fri 28 Mar 2025 00:21:56 +0000
ROA not before:           Fri 28 Mar 2025 00:21:56 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8180::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:46:b7:3c:d1:88:73:54:3a:0b:ae:03:6b:1b:a3:fc:f0:0f:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 00:21:56 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:81:63:d4:e7:b6:d5:22:53:37:64:e1:ec:
                    59:91:ce:bc:62:f0:a0:a6:75:c2:0e:dc:dd:f5:33:
                    c8:7f:a5:ea:08:a8:55:43:d3:bb:73:a7:b2:15:ec:
                    4b:9c:54:f5:08:c4:b2:a1:38:bd:93:59:d6:18:a8:
                    e1:0b:2e:7d:1c:b6:cc:9e:cc:56:58:5c:a3:46:50:
                    63:0a:2e:1e:a7:f2:45:96:34:b0:09:c8:33:61:7b:
                    4e:d0:98:5b:d2:36:5e:a2:57:b9:17:1d:98:1c:8a:
                    08:77:28:28:64:d0:52:8e:cd:b4:71:7e:11:db:9c:
                    99:00:87:e6:96:f7:2d:03:4d:1d:a0:bc:c3:f3:bd:
                    e5:ed:4d:89:a1:e7:ce:e4:bf:f5:cd:3c:fd:72:26:
                    c4:68:1c:41:77:e4:95:3a:f0:eb:68:e3:94:fc:5f:
                    54:27:2a:3f:30:67:62:e4:2f:ec:16:4b:11:5c:2e:
                    fe:14:41:da:cb:fc:f3:34:27:ee:ab:91:6a:84:00:
                    25:56:04:fa:0e:e4:be:a9:72:c0:82:2c:05:84:bb:
                    b1:fb:ec:54:53:76:a9:8e:dc:70:92:43:a6:78:78:
                    e9:c1:e8:4e:bf:07:45:ef:55:b0:f0:c9:ab:f9:8c:
                    94:1c:a9:bf:8a:89:bc:bd:8f:fd:65:31:9b:ce:ef:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A8:88:29:3D:15:D6:EF:8D:7F:C7:03:74:03:66:34:EA:9C:40:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/991e350c-1b09-4392-a15e-8cc8924ef0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8180::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:00:3d:49:ab:97:48:2a:f1:85:cb:76:ec:4e:bc:41:c9:
         17:e0:60:c6:6e:0e:92:1c:ae:88:94:0d:57:77:65:83:3f:2a:
         47:cb:82:1c:55:68:1f:72:42:70:fe:66:4d:9f:0e:2e:90:3b:
         b8:78:38:a5:56:3d:0e:28:31:6b:0f:f4:ca:17:a4:96:93:2b:
         8b:ec:03:97:f5:87:b8:c1:b6:21:1b:63:50:5e:cb:97:ee:28:
         03:3a:3c:76:95:99:2d:8e:ff:39:29:77:6f:c0:f7:c4:ce:b2:
         d9:46:47:54:c1:50:d8:d8:5f:10:19:10:80:39:b4:8b:d1:fe:
         e7:4a:6e:ee:b3:72:22:43:a7:60:c3:6c:99:58:0c:97:a8:b9:
         f1:66:a5:f1:b5:0a:ae:0e:23:3a:9e:99:70:c8:a0:87:01:36:
         f3:c5:22:b7:d6:b2:18:b0:4f:22:db:17:51:5f:45:91:3a:75:
         6b:ad:5c:52:4f:9a:63:29:33:5e:fb:98:37:64:fa:c6:02:d7:
         a9:6c:76:ae:f1:cd:66:c3:9b:20:01:b6:00:87:01:4c:df:d0:
         60:4e:a8:31:e2:1d:04:77:e8:11:f3:d0:82:8d:ec:04:b4:1b:
         b5:cc:7d:34:65:3c:bb:af:12:10:6c:70:c7:14:a3:a1:fd:17:
         6a:9c:73:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----