Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a3ccb8-e384-40d3-ace6-84f63c2d7847.roa
File:                     b1a3ccb8-e384-40d3-ace6-84f63c2d7847.roa (raw, json)
Hash identifier:          yl/sS2dLVmPl70qP1aOnOm6cyF5Tqnxqo902duxb38U=
Subject key identifier:   F4:2B:D0:02:4B:44:E4:60:0E:CB:87:12:D4:EA:67:AB:50:C7:5E:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       513E85A507F37B4619DBF5A6A54D1D63F630EE68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a3ccb8-e384-40d3-ace6-84f63c2d7847.roa
Signing time:             Sat 22 Mar 2025 00:00:57 +0000
ROA not before:           Sat 22 Mar 2025 00:00:57 +0000
ROA not after:            Sat 26 Apr 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff6:5000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3e:85:a5:07:f3:7b:46:19:db:f5:a6:a5:4d:1d:63:f6:30:ee:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 22 00:00:57 2025 GMT
            Not After : Apr 26 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:f4:70:ce:d8:9d:11:71:34:e0:79:08:3a:
                    e5:a5:63:c3:3d:e1:5a:73:d3:13:3c:d5:97:d2:67:
                    e3:69:15:ff:ef:64:d9:2e:fb:62:27:11:59:7a:a6:
                    24:ab:0e:71:09:59:52:79:d4:a1:cc:96:e0:d5:fe:
                    ea:db:17:59:9c:a2:42:84:37:08:5f:d4:59:d9:be:
                    42:0a:f9:6c:01:20:b0:1a:bb:be:3b:b6:89:c6:4d:
                    e3:03:0a:b1:61:e2:8f:10:a3:ae:95:06:29:92:c1:
                    f2:1d:5a:a5:c5:0b:71:06:f2:0a:e8:3c:70:3f:e1:
                    cb:99:56:df:1f:a3:dd:82:ad:11:7c:86:3e:bd:70:
                    3c:23:20:73:b9:cf:f8:ab:78:fb:37:74:8a:1d:52:
                    6e:7b:1b:6d:5c:7b:21:c1:36:f9:b4:95:9e:bd:04:
                    46:30:d8:9a:ff:8b:2b:de:6e:3b:36:4a:2c:06:09:
                    37:9e:0e:5e:04:1c:f2:53:9e:e3:e1:8d:b6:7e:17:
                    1a:8c:0c:36:f3:3a:01:0e:57:7b:35:30:c6:84:a1:
                    ef:89:3b:f8:69:d5:d9:2d:81:6b:f9:72:d2:4c:14:
                    b8:ec:d2:f3:cb:b1:9b:b0:8a:e1:e0:b6:97:72:dc:
                    e9:92:7a:94:ed:2a:88:3e:30:a1:66:44:1e:d6:c4:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:D0:02:4B:44:E4:60:0E:CB:87:12:D4:EA:67:AB:50:C7:5E:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1a3ccb8-e384-40d3-ace6-84f63c2d7847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:6e:54:01:4a:cb:84:1f:8c:ea:0c:6d:d3:02:0d:95:29:d1:
         d8:19:26:e3:a5:f7:7f:ee:a4:d1:f1:b6:f9:1e:a5:07:93:10:
         56:8a:c0:33:bf:9c:a0:a0:de:bf:ae:c2:d6:8b:1a:eb:35:44:
         ff:48:8c:ba:ac:f6:d4:31:6f:c7:9d:fa:b1:1e:cc:75:71:8a:
         37:8f:56:30:ea:55:37:08:e6:b4:14:0c:67:7f:f6:38:78:b8:
         01:f7:f8:df:e7:45:54:c4:cf:33:7e:d3:05:ff:e7:3f:83:69:
         f2:17:ac:53:f5:ca:8a:3f:51:62:58:22:43:66:32:cb:24:b5:
         c4:38:53:32:37:3f:90:05:b1:99:5d:30:2f:86:fb:e2:12:a3:
         d1:c9:0f:17:25:31:35:1e:76:05:9f:61:b6:ae:f8:93:7f:20:
         1c:8c:64:2a:0a:05:5c:a5:02:39:61:90:ee:c7:81:53:05:8c:
         27:2b:43:e8:ee:e0:fe:59:bf:14:fe:dc:1c:a6:a0:57:04:b2:
         bd:38:43:4b:d7:88:d2:85:b5:6a:27:88:37:70:8f:a9:b9:f7:
         fa:7b:47:dd:25:fb:21:ec:18:7d:8e:ec:17:a5:a6:cd:74:b9:
         4f:1f:f2:03:e5:d8:75:4d:25:1c:44:ba:62:73:65:6e:73:44:
         7d:e1:5a:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----