Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa
File:                     da22f6ed-91b5-496a-92fc-485157f509f6.roa (raw, json)
Hash identifier:          xGaubZBVo8iFSwiMMjwoFujJ/dj0EwSbEWo9cdxVOH4=
Subject key identifier:   A6:C4:A5:2F:0E:4A:23:91:F1:06:56:58:73:0D:C7:78:01:C3:3E:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       21EDE134CAC67975B3B52873ECE60A773EC723BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa
Signing time:             Tue 25 Mar 2025 17:00:14 +0000
ROA not before:           Tue 25 Mar 2025 17:00:14 +0000
ROA not after:            Tue 29 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:4140::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ed:e1:34:ca:c6:79:75:b3:b5:28:73:ec:e6:0a:77:3e:c7:23:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 25 17:00:14 2025 GMT
            Not After : Apr 29 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:6e:ac:60:02:79:b6:fd:c0:ff:f5:65:ef:
                    34:de:44:c5:af:35:7a:82:ea:07:70:1f:89:8d:e3:
                    f1:3e:f6:b9:8c:9e:50:5a:24:0d:cd:aa:de:8e:9b:
                    ec:b8:1e:01:2b:09:c9:27:4a:4d:dc:17:b0:79:68:
                    f5:a4:ac:06:30:26:72:83:77:b3:bf:e9:39:de:a2:
                    eb:b1:8e:0e:2b:2e:01:99:4d:c5:60:5c:70:ae:b1:
                    4c:4b:f6:b8:20:da:e4:96:1d:40:74:8b:ca:35:df:
                    f7:52:ae:60:20:fc:29:00:a6:4d:f7:42:35:1c:8a:
                    9f:6c:0a:19:ac:2a:02:1c:28:bb:95:c2:05:c7:8b:
                    79:a2:85:85:de:d8:1c:bd:f0:c8:44:9c:d0:2b:af:
                    cd:cf:dd:3b:ce:7f:55:e1:65:36:90:4f:7b:fe:f3:
                    75:b7:40:9f:76:a4:a9:2c:0f:7c:31:0c:0a:ad:da:
                    1e:c7:94:73:35:b6:82:e5:b5:08:06:a0:24:67:91:
                    87:f3:bb:68:fe:4a:39:43:d8:ee:52:77:a2:c2:57:
                    e3:3a:9c:fb:79:19:33:0d:13:83:1c:6e:7f:6d:71:
                    bd:34:05:37:30:90:8c:73:e3:31:c4:93:71:c3:8a:
                    32:17:58:37:87:e6:00:69:d6:30:5f:33:9b:e4:99:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C4:A5:2F:0E:4A:23:91:F1:06:56:58:73:0D:C7:78:01:C3:3E:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da22f6ed-91b5-496a-92fc-485157f509f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:38:72:31:f3:c6:50:25:cc:c6:45:9e:a9:21:3a:57:1b:
         e1:56:eb:3a:ae:fb:64:42:a4:ab:cc:b0:36:35:89:10:08:a3:
         cf:13:2a:cb:ee:b1:c0:70:e3:e2:46:92:c5:6f:41:4e:a0:13:
         07:e1:6d:6f:bd:b3:a0:0f:72:53:4f:0b:a0:b9:f0:be:4a:0b:
         1c:13:50:43:b0:a0:e6:76:cc:73:a0:71:fc:c1:97:cc:6a:3e:
         f5:ac:f4:0a:33:97:01:24:15:fc:98:b2:8e:d3:16:72:26:8f:
         e5:a1:ec:58:20:02:d3:c7:8f:da:c7:cc:a2:2c:2a:d4:71:50:
         1e:5c:7f:15:70:84:db:70:44:38:c5:3d:cb:3c:ed:c1:9d:6e:
         d9:af:a5:75:4b:cd:01:b2:82:36:78:83:28:f1:96:4e:74:8e:
         bd:50:2f:4a:78:0b:6f:1d:39:ef:85:85:17:80:7e:64:9c:23:
         9e:7b:df:bd:0b:80:82:32:59:98:2a:5b:54:b4:68:00:02:2a:
         98:9c:3c:bd:55:aa:ec:86:3a:40:e8:50:01:40:31:58:e8:ae:
         6f:93:3f:70:6c:a2:18:63:00:e8:33:f5:aa:51:86:ce:33:c5:
         dc:6d:49:11:1e:e0:4e:39:70:91:1d:0c:22:dc:38:9a:16:92:
         6a:32:2f:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----