Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
File:                     a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa (raw, json)
Hash identifier:          m7+X+YFPSZe4gVBSDEqSQZvsOEMbNd8iPMUivSzvI6A=
Subject key identifier:   20:3C:08:AA:08:B1:13:2A:54:25:32:7C:9C:48:C0:DB:96:8E:BD:6B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29A3A4BB2273EDAC5BDFC988B47E247D72A5CD43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa
Signing time:             Sat 15 Mar 2025 00:21:48 +0000
ROA not before:           Sat 15 Mar 2025 00:21:48 +0000
ROA not after:            Sat 19 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2620:107:4008::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:a4:bb:22:73:ed:ac:5b:df:c9:88:b4:7e:24:7d:72:a5:cd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 15 00:21:48 2025 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:39:b3:cf:81:c2:8d:1b:2d:b6:88:56:7e:
                    7e:69:92:09:be:1b:20:94:48:8f:ff:8d:51:23:c4:
                    21:30:04:f2:76:de:97:a5:f3:c3:90:46:76:d1:53:
                    ea:31:85:e3:d1:16:f6:1e:cd:2c:3f:90:68:35:04:
                    1f:9e:7d:58:03:6a:f8:cc:30:1c:09:c8:bd:60:13:
                    de:ba:d7:d3:e0:8d:3c:57:77:8a:65:6b:8f:3b:96:
                    aa:33:7a:14:ed:bc:34:40:b2:00:30:bf:c8:e5:09:
                    8a:90:59:e4:ec:94:2d:94:8e:7b:89:11:87:f4:b9:
                    bf:06:a7:41:22:a1:67:cc:e4:0d:68:89:0a:6a:c2:
                    6f:4e:1c:1d:7d:85:97:e3:0c:02:1a:82:54:31:3d:
                    09:5e:f1:74:69:fc:23:09:84:3d:84:e2:55:8c:24:
                    25:bf:52:b3:1a:ed:76:47:53:9f:bf:41:96:d1:d2:
                    fc:6d:d6:d6:52:c7:01:5d:b9:46:2e:45:99:ae:aa:
                    e2:2a:31:4b:dd:f5:5b:ae:11:46:35:9e:3c:b6:1b:
                    29:96:82:73:9f:ed:f1:56:07:91:68:6e:00:78:b6:
                    e1:81:c3:90:19:d7:b3:f8:fd:ec:02:b3:b1:0d:e0:
                    ef:fa:62:b5:f8:b3:90:d1:89:24:5c:a6:c4:bf:67:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:08:AA:08:B1:13:2A:54:25:32:7C:9C:48:C0:DB:96:8E:BD:6B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a492e851-e74c-44ed-b4bd-4b95f3c87a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:107:4008::/45

    Signature Algorithm: sha256WithRSAEncryption
         65:ab:7f:8d:d4:15:32:28:f1:d7:a5:36:09:e0:3f:9b:07:95:
         29:67:34:fb:d3:c8:73:4b:79:91:ea:b3:1c:ea:5b:f2:36:72:
         ee:50:5b:22:aa:cd:15:0e:74:01:2b:97:56:38:cf:f2:2a:c4:
         a7:16:74:18:8a:94:5b:b1:ea:4a:c6:3a:01:d5:e9:d9:5d:67:
         25:d8:59:d7:88:7e:59:44:8d:ab:4a:03:b7:f8:bc:f3:63:23:
         36:8f:c2:23:b2:1e:16:e1:9b:84:90:1f:22:ee:7e:88:c8:59:
         c7:cd:a8:4e:5c:00:2c:bd:5b:cf:7b:a8:80:e4:15:72:23:b6:
         63:f3:6b:b4:91:18:57:1c:94:60:49:28:96:22:6f:82:2f:19:
         1b:b0:c6:a5:50:08:5e:2f:db:d9:c4:d8:6b:0f:26:f0:01:e3:
         5d:52:c5:82:09:81:70:93:5d:bc:e9:de:16:bc:68:be:41:53:
         28:b0:03:60:05:e5:fb:d3:8c:04:48:84:2e:28:d9:80:b3:82:
         66:cc:8e:1b:ea:8e:25:ea:15:5b:f1:c4:35:01:43:46:ba:b9:
         71:26:99:2c:da:ba:55:6d:89:d1:6e:8d:ce:0b:63:f3:d3:d4:
         77:91:99:a3:91:45:66:4c:0e:ba:6f:1e:77:94:13:14:11:c7:
         78:ca:59:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----