Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
File:                     a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa (raw, json)
Hash identifier:          A/HLIsfY0AgRWGVgPzaSkwbVZgX5tyPcDdoHM7cstzA=
Subject key identifier:   D1:84:74:FC:67:00:90:1E:4B:BD:7A:99:36:77:02:C8:62:72:33:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4542C6983F43042ED0FA482D4B82284675870AED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa
Signing time:             Sat 15 Mar 2025 00:11:40 +0000
ROA not before:           Sat 15 Mar 2025 00:11:40 +0000
ROA not after:            Sat 19 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f32:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:42:c6:98:3f:43:04:2e:d0:fa:48:2d:4b:82:28:46:75:87:0a:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 15 00:11:40 2025 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:c3:a9:a9:57:03:05:34:f6:9d:a2:d0:3d:
                    5e:4e:c2:89:6b:18:06:55:54:fa:98:ed:a3:4c:06:
                    d8:19:ec:60:29:16:62:2a:ff:94:ac:2f:e5:cb:5b:
                    68:95:1c:7a:25:a3:c8:11:a7:f5:92:e3:c5:82:12:
                    b0:1e:1d:70:d9:89:82:8b:2b:64:10:bd:87:bd:80:
                    66:09:ee:71:6e:8d:5b:61:4f:c3:1c:a2:98:c8:60:
                    0e:5e:45:1b:e0:ef:a1:3b:11:fe:51:2b:be:2e:70:
                    72:c3:34:9d:79:36:ef:47:ca:ee:28:73:8d:30:53:
                    35:11:26:49:79:ff:57:e7:f6:3a:3c:df:83:f1:e5:
                    a8:3c:99:62:83:68:71:9c:20:61:e9:ba:f8:94:14:
                    16:68:98:62:e6:81:7b:78:fc:2a:ec:12:16:c5:1d:
                    4d:5e:66:ed:3c:fd:c6:5d:c5:7f:6d:e7:93:4a:23:
                    3c:8d:27:92:81:08:0e:48:52:fb:ce:5b:b8:35:48:
                    8f:b3:8b:ed:19:99:0c:5d:4a:f5:9f:a8:03:b5:71:
                    00:e7:bd:43:3e:3f:32:b1:76:4c:48:65:51:ed:f2:
                    1c:63:c2:93:d7:2f:b0:59:25:c1:17:7a:f5:8a:47:
                    46:0f:64:db:61:da:b8:ee:9d:75:6f:76:04:49:45:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:74:FC:67:00:90:1E:4B:BD:7A:99:36:77:02:C8:62:72:33:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a73f2797-ec17-44df-8c37-4e38a5fc29f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:13:4f:5c:24:5c:eb:d5:44:01:38:00:75:7d:c4:ab:04:b8:
         e3:25:56:66:bb:a3:a3:04:cf:d6:45:d5:99:27:44:79:47:f7:
         d1:73:b9:ac:bc:17:7e:29:3b:d1:0c:f8:6f:4b:69:a9:a9:7c:
         47:b2:de:4e:d2:89:12:5b:b4:c3:fa:1e:06:4c:04:e5:4b:1d:
         17:05:04:51:3c:2b:32:0f:4c:0b:ee:05:25:40:e0:f1:06:c7:
         2d:45:5d:de:a4:4a:c2:6b:73:1d:82:ce:d0:cd:80:b3:e3:3f:
         03:9c:da:c0:8c:ce:7b:ce:e1:a7:88:07:9f:1d:aa:0d:fb:cd:
         bf:de:b3:31:35:d9:35:03:a3:a7:c8:ef:8e:eb:8e:f6:aa:2d:
         56:61:43:36:3f:8c:29:6a:fc:91:3d:79:32:a2:b9:e5:a3:d2:
         03:c7:9c:5d:3e:f6:3c:56:95:05:5b:91:60:33:c9:f7:01:52:
         33:2b:d8:ef:88:ba:33:f1:5f:40:7d:7b:c6:7e:80:a4:89:6a:
         d7:3d:5e:f4:e8:bd:c5:a9:7e:f2:72:0f:95:68:2f:d8:ba:da:
         05:92:f3:33:a5:ab:45:20:bd:bd:ec:e0:07:b3:45:64:c3:f6:
         9b:44:de:dc:f8:ad:89:ce:70:b9:c9:16:37:d0:b9:87:70:79:
         4c:23:fc:e2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----