Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa
File:                     9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa (raw, json)
Hash identifier:          Cbbc0YyfeyLlmKD5FN/Y5Aoj4QHqeqhrfLM3UkGLIgU=
Subject key identifier:   F1:8A:36:A7:60:28:4B:8C:7A:53:0B:02:8D:11:62:E7:A6:1C:DC:02
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6EE9FC1A0F1E95F6E469C7E385EC4C0CA42F23B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa
Signing time:             Tue 04 Mar 2025 16:51:44 +0000
ROA not before:           Tue 04 Mar 2025 16:51:44 +0000
ROA not after:            Tue 08 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e9:fc:1a:0f:1e:95:f6:e4:69:c7:e3:85:ec:4c:0c:a4:2f:23:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  4 16:51:44 2025 GMT
            Not After : Apr  8 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:73:21:01:79:23:0d:65:6f:e5:c6:92:e7:
                    46:e2:52:22:a4:f2:21:c2:3e:8e:7f:49:73:78:f2:
                    9b:5e:ce:58:34:c4:20:7f:12:8d:91:20:8b:2a:fc:
                    2e:bc:2c:e6:80:78:d4:f7:7f:e2:10:04:25:4e:ec:
                    f6:9b:2d:96:d2:38:94:61:23:63:f6:01:4a:d6:12:
                    dc:62:8c:3d:42:f0:34:7e:92:62:c6:95:ea:55:0e:
                    7b:85:20:26:5c:15:f7:81:d2:45:cc:63:58:cd:53:
                    3b:45:ef:7c:bb:cd:c9:ae:78:7f:c0:cb:b4:13:e4:
                    6d:68:51:5a:4c:0e:d0:f6:83:c4:67:6f:f3:16:1c:
                    c8:f8:ec:82:9f:00:78:94:9c:ce:fa:c1:c8:a2:bc:
                    ea:5b:8f:f8:0d:79:51:f6:b1:bf:70:2b:17:b0:9a:
                    4f:02:2c:5b:fc:3b:2e:8e:dd:7c:c2:a5:cc:e6:50:
                    d3:4b:65:79:25:a2:5e:ee:fa:0b:ba:3f:0a:ea:f0:
                    60:be:c3:1e:d2:d2:d2:8b:3a:17:d8:4b:50:4d:1e:
                    5f:c5:e3:76:ed:30:7d:25:5a:92:77:63:57:bb:d5:
                    ec:0d:71:c3:10:21:b4:9e:09:d8:eb:43:89:bf:60:
                    14:0f:3f:cb:2f:e9:bf:bb:09:9a:dc:d4:c6:ea:8e:
                    bf:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8A:36:A7:60:28:4B:8C:7A:53:0B:02:8D:11:62:E7:A6:1C:DC:02
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:c3:e4:b9:8b:79:35:fd:7f:88:c6:0a:76:95:98:60:8a:
         9b:01:d1:d4:8c:a0:5f:a4:43:de:d9:fd:12:db:a0:e6:33:88:
         70:26:a8:6b:fb:e2:b5:2c:fb:70:a6:3d:b4:39:86:fd:69:2f:
         b1:83:18:31:34:70:93:66:ff:9b:9f:59:01:93:0e:e7:71:88:
         ef:a8:c2:f8:aa:05:a1:c0:f3:5f:57:34:75:7e:3d:56:25:ff:
         74:32:4f:72:9c:06:0c:f1:de:75:6d:df:ca:71:5d:ac:9f:5f:
         f3:8a:07:d2:8c:84:20:eb:be:d1:d0:c8:2a:75:7a:cd:6c:dc:
         fc:4e:4e:57:5a:c6:79:0b:95:40:7f:cd:35:8d:f8:4c:0a:69:
         b5:b3:8d:4d:db:e6:00:79:b9:8f:9f:47:3f:f1:85:b5:08:0d:
         a4:a3:a9:2a:94:1a:ed:fa:95:65:b3:62:25:d0:38:ec:2a:88:
         54:9d:7d:44:b4:5e:c1:d6:5d:b1:28:3b:bf:1a:bd:37:2a:b9:
         48:fd:ec:bd:61:7d:50:18:62:9b:7b:8d:13:b1:ed:30:88:be:
         5d:c8:39:a6:e6:92:2b:a7:84:03:3f:7c:b3:ad:51:b0:8a:cf:
         6b:9a:23:62:1e:39:dc:7d:60:b1:93:7f:a4:f0:07:85:6f:e4:
         6c:04:ff:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----