Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9190842-30f4-46bf-a567-70aff105102c.roa
File:                     b9190842-30f4-46bf-a567-70aff105102c.roa (raw, json)
Hash identifier:          3YuXDlLsU49u7qb1aQ8+u0TYIFVGz5Tem5DQsDfg0/k=
Subject key identifier:   78:55:15:E9:38:3C:CB:B7:8A:93:2D:35:C8:B3:96:B6:3C:A7:D3:E2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       58C6A519D26D97A44F6DB6B7A7044B7EC0D1EB9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9190842-30f4-46bf-a567-70aff105102c.roa
Signing time:             Tue 25 Mar 2025 17:01:04 +0000
ROA not before:           Tue 25 Mar 2025 17:01:04 +0000
ROA not after:            Tue 29 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8070::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:a5:19:d2:6d:97:a4:4f:6d:b6:b7:a7:04:4b:7e:c0:d1:eb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 25 17:01:04 2025 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:39:6a:ab:55:fc:80:10:b2:63:22:60:3d:
                    8e:3c:56:7e:18:58:30:49:cf:ac:3a:94:32:a2:f5:
                    ba:4c:d0:d8:1b:4a:06:6d:e0:47:e9:a6:8d:75:a7:
                    b5:6c:b3:49:ef:b0:56:2b:26:18:c1:d6:34:06:c7:
                    b5:7f:4c:03:b5:c3:09:ed:4e:d9:28:84:18:73:9c:
                    8f:39:ee:38:a1:eb:58:68:ec:2f:f9:22:b9:db:36:
                    95:69:1b:ae:20:9a:4b:2c:eb:0a:84:cc:c0:5d:ea:
                    74:c4:34:81:49:39:0e:45:78:e4:2b:cd:bc:02:32:
                    25:64:d9:b1:6d:05:d9:d1:d4:ac:db:e6:9d:5a:c3:
                    2b:1d:fa:bf:7e:af:f3:c2:7a:20:40:8b:aa:b9:62:
                    5f:d4:9b:a3:2c:57:75:3a:e0:77:8a:40:bc:0f:81:
                    8a:48:4e:4c:e0:1b:7c:b6:23:84:e3:97:17:19:f7:
                    ec:81:a1:d8:55:22:8c:e0:33:b2:a2:37:75:3b:93:
                    6f:9e:f4:6e:a6:ff:db:b2:21:cc:3d:ed:8e:4e:22:
                    c3:ac:2c:dd:3a:c1:7d:27:01:98:3b:08:48:ca:61:
                    1c:fa:fd:4d:6b:e1:79:21:9a:7c:b6:b7:d6:2d:67:
                    a0:ea:e3:3c:6c:50:de:a8:b7:6d:44:d2:79:29:c3:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:15:E9:38:3C:CB:B7:8A:93:2D:35:C8:B3:96:B6:3C:A7:D3:E2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9190842-30f4-46bf-a567-70aff105102c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8070::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:9e:6d:de:1c:91:00:9f:9e:12:df:8e:1c:fa:7a:c6:a2:
         41:25:73:28:9d:dc:5d:db:ff:a0:62:49:89:c5:58:d3:2e:1e:
         df:57:76:e8:e6:08:51:b8:7d:0a:3e:21:79:a2:e5:05:74:ef:
         fc:d7:e3:44:15:5d:2a:5a:2b:16:82:67:e4:68:8b:76:07:c7:
         80:4a:30:bb:e2:75:aa:fb:35:05:78:b5:d0:a5:4f:b7:0b:60:
         77:67:2a:5c:68:de:a7:ba:6d:62:db:37:1b:76:6b:21:e4:5a:
         d1:00:9d:05:c1:32:87:82:f5:6a:79:03:05:86:6a:4e:51:c8:
         33:5f:54:17:45:01:dc:7a:60:43:f6:02:6b:13:05:64:e2:5c:
         01:cb:15:7f:72:fc:df:47:84:dc:97:3d:77:87:ad:df:94:f1:
         7c:65:d7:24:76:93:14:c4:95:f3:a6:e4:b8:14:a8:84:68:0d:
         e5:ef:e0:07:27:b0:42:95:88:c5:a9:7f:54:e3:b1:8d:15:cb:
         0a:b5:72:fa:ca:b4:52:b1:8f:1a:f9:e9:1a:4e:10:86:a4:56:
         49:bd:11:c7:82:0f:c0:a0:46:36:81:f3:6b:11:35:13:4d:b4:
         82:1b:d0:fa:49:33:95:fb:46:1b:a0:0a:e5:16:79:2a:cf:9a:
         28:bb:ca:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----