Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa
File:                     c017836f-79ac-458c-a671-00131a37e9d6.roa (raw, json)
Hash identifier:          oPRg2h1oWOYXDRV1RMMumI1I1R7FqI/AxSSDLXkErbM=
Subject key identifier:   05:38:BD:67:37:A8:B6:45:FB:94:17:7C:12:92:D5:A0:4D:88:B2:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F2BF2A37B753F664D40FDCBCC5F7683838EC487
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa
Signing time:             Fri 28 Mar 2025 15:01:59 +0000
ROA not before:           Fri 28 Mar 2025 15:01:59 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f69:60c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:f2:a3:7b:75:3f:66:4d:40:fd:cb:cc:5f:76:83:83:8e:c4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:01:59 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c6:f1:e0:b2:f0:09:32:b8:05:9e:f6:a1:f8:
                    63:45:36:8a:ae:ee:3a:5f:19:b4:ec:af:a7:c9:a3:
                    d9:64:fc:31:04:9f:3c:8b:d7:e8:2b:bf:fe:55:12:
                    f6:5b:c3:67:5f:1c:fe:3e:1a:a3:44:fd:1c:04:6c:
                    ca:2e:26:58:8a:53:ca:fa:f9:85:91:50:12:a3:77:
                    0c:52:b4:8b:69:45:b5:cf:d2:7f:05:70:09:75:2c:
                    27:bc:63:a3:e3:90:f2:74:22:c0:b3:fd:a2:b7:eb:
                    76:0d:fc:59:48:0a:34:66:98:ed:ed:5f:00:24:7a:
                    92:ed:38:67:8b:a6:a4:46:a8:b2:7d:5a:38:9a:9e:
                    11:9b:79:e9:9c:5c:5b:a7:24:88:95:4e:56:86:fe:
                    b0:7f:2f:3e:65:f6:d6:df:b3:29:fc:7f:0e:9b:a2:
                    a8:81:dc:fc:af:71:a1:c2:15:70:76:5a:8b:a7:14:
                    e3:06:6b:de:8c:c4:a3:5d:c5:d4:16:e0:6a:70:7d:
                    50:5e:d5:21:bc:1b:62:3e:ec:31:70:c5:48:06:35:
                    57:e7:52:de:07:cb:43:e3:c8:3e:12:81:8e:36:a9:
                    86:26:50:b6:08:24:fa:e0:0b:16:04:81:6e:a4:56:
                    ad:c8:e6:93:4f:b2:6c:8d:0c:8b:ef:31:90:74:e5:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:BD:67:37:A8:B6:45:FB:94:17:7C:12:92:D5:A0:4D:88:B2:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017836f-79ac-458c-a671-00131a37e9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f69:60c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:29:9e:c4:b3:63:29:da:e5:08:2d:97:96:38:eb:13:ad:
         c1:b4:ab:48:eb:d6:6c:81:7d:46:5f:c8:0d:1a:bc:3b:c6:64:
         d3:f8:dd:2f:f4:91:0b:86:db:2b:88:f0:21:75:cd:70:1a:e1:
         36:64:4c:6e:23:e0:50:fb:1d:a9:26:e0:e4:6b:b0:7b:be:65:
         36:b1:2b:ab:44:20:24:d0:a5:c1:a1:f2:f6:2f:ae:03:00:2e:
         c7:29:cc:8d:fe:4d:69:07:d8:a6:7f:cd:7f:cb:e7:68:49:04:
         83:d3:39:30:9f:c2:71:d3:cb:0a:68:da:41:81:95:bf:43:a2:
         06:26:09:9e:b6:8c:ae:8c:fa:6e:40:4c:06:8a:ec:84:1b:6b:
         7a:c8:cb:f0:96:41:2f:30:f6:11:e4:b0:a9:e0:f1:da:34:3f:
         68:3d:d4:b9:b5:35:3b:0a:80:c9:e0:e9:29:3a:f6:3c:01:7f:
         aa:3b:60:01:e9:f9:a7:12:2f:b6:ec:00:44:6f:44:a4:1d:3a:
         96:b8:b1:bd:05:03:6e:69:1d:4e:de:f5:6e:42:25:f1:f5:d0:
         8b:81:6e:1f:66:79:dd:d2:65:89:5b:4c:7f:f5:61:42:4d:3b:
         29:5d:c9:37:03:94:8c:81:38:42:b7:39:f2:39:17:a8:95:ec:
         1f:bd:6c:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----