Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa
File:                     c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa (raw, json)
Hash identifier:          mg8wVqriHP+br7WMJM+129KpMAeJXmeWnUI6/a2VdHo=
Subject key identifier:   00:ED:C3:64:AE:B5:E8:95:85:48:34:A9:3B:31:67:66:27:77:68:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       514149C60D52E4D18A6B89931E9A250186600075
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa
Signing time:             Wed 26 Mar 2025 00:21:12 +0000
ROA not before:           Wed 26 Mar 2025 00:21:12 +0000
ROA not after:            Wed 30 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f61:1040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:49:c6:0d:52:e4:d1:8a:6b:89:93:1e:9a:25:01:86:60:00:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 26 00:21:12 2025 GMT
            Not After : Apr 30 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:4d:b3:23:8f:cc:11:c4:74:e0:43:29:a6:
                    72:d8:c7:7c:8e:6e:cf:44:75:fb:d8:2d:78:41:47:
                    2b:7c:99:5b:2c:33:ff:8c:73:c1:f1:53:0e:a5:76:
                    ca:8e:da:4b:21:e9:5a:95:cf:90:48:18:43:4a:09:
                    cf:ce:cd:40:63:e5:5c:b0:12:07:c9:97:e5:c5:a2:
                    0c:20:95:89:e6:e9:25:50:c7:39:b8:24:15:a9:86:
                    9b:86:90:75:f8:cb:be:b4:e4:a7:25:b2:6e:a5:b3:
                    83:0e:97:e6:ca:8f:b9:48:64:c3:50:31:ec:8d:ab:
                    23:de:02:77:86:2b:29:34:c0:b6:e0:5a:de:d1:07:
                    c1:a4:72:80:bc:ba:ca:ab:80:fa:9c:b4:12:ab:9b:
                    71:96:b3:4a:df:27:85:52:7f:b7:02:10:b7:d7:d8:
                    50:e4:b4:dd:d4:76:cb:0f:55:3d:9c:9f:c3:58:20:
                    43:3f:e6:a0:7d:5e:11:d7:e1:f7:d2:8b:57:76:75:
                    e3:08:ca:6c:05:3a:c7:c4:53:dc:8a:06:08:81:0e:
                    45:fa:f6:01:fa:3a:e7:14:04:57:df:7f:16:77:95:
                    c4:90:30:55:ca:ac:a0:b2:d0:e8:ef:6a:3c:96:7b:
                    98:f2:73:bf:79:aa:a6:47:2e:64:6d:69:5a:b5:20:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:C3:64:AE:B5:E8:95:85:48:34:A9:3B:31:67:66:27:77:68:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c9ab0c80-713e-4c08-a740-97ba0f9d766c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:3d:6d:55:27:98:35:ce:9f:38:9f:57:7b:da:cc:62:86:
         9b:8c:b6:66:cb:71:c1:ae:aa:3c:f7:76:fe:c9:0c:0f:fc:2e:
         96:9a:26:39:ca:bf:72:4d:32:82:16:f0:4e:c6:37:21:8a:30:
         f0:cd:72:93:e4:97:67:bc:a0:06:63:24:b9:46:63:e0:9d:a2:
         a4:3b:29:bb:c9:d8:d0:a9:61:d0:29:b5:da:29:0a:b2:f7:46:
         95:c1:b1:a4:f7:b8:07:32:d1:0b:09:39:39:97:3d:c0:80:bc:
         37:69:33:50:44:e5:cc:d7:1c:28:c3:da:ed:4b:c8:09:d3:60:
         ab:30:50:9c:a8:09:bc:29:c8:fa:74:7c:35:ca:e2:1d:73:3c:
         f5:06:9a:54:f7:c7:eb:53:e3:d8:78:30:ff:c2:29:3b:fe:e9:
         76:79:8a:81:46:9c:04:65:0b:b0:e4:89:bc:09:4c:74:66:f3:
         7c:8f:a8:78:04:45:7b:41:ae:ee:a6:fd:48:a5:22:74:2b:79:
         2b:20:7f:29:19:55:53:de:bb:5b:2f:2f:94:56:97:c3:4c:10:
         b1:ee:04:44:8e:9b:11:4e:e0:7d:7f:67:6f:1c:d4:a8:6b:bb:
         d5:33:f0:a9:36:2f:34:0b:e9:3b:bf:2f:2c:12:36:79:b9:f0:
         b1:eb:97:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----