Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa
File:                     f545cb29-8814-4cd2-8474-142d37f94263.roa (raw, json)
Hash identifier:          b6P15T3HiUskW6GHJx3Z+b0GvQL77Lb1xgcxEqspz6k=
Subject key identifier:   D1:C8:E1:F5:FB:C8:D3:C3:FD:E1:6B:59:13:60:C1:0C:FF:74:DA:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       29D67024420D7964C42F7085B873341AB22865
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa
Signing time:             Fri 28 Mar 2025 16:41:01 +0000
ROA not before:           Fri 28 Mar 2025 16:41:01 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f12::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d6:70:24:42:0d:79:64:c4:2f:70:85:b8:73:34:1a:b2:28:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 16:41:01 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:81:14:80:4d:d5:4d:85:15:4e:ac:cd:76:
                    57:b0:a0:c6:e0:cd:e9:66:01:e4:3c:d6:48:77:d5:
                    e8:82:a0:14:60:10:74:da:e1:3a:2a:2e:9a:77:5f:
                    85:53:e9:68:88:ff:3f:45:92:c9:1f:4c:eb:b1:f9:
                    04:05:70:4f:95:60:d0:ac:7e:48:3a:c6:c1:ab:4c:
                    1a:34:b2:8d:4a:5b:03:96:c2:7b:98:1d:e9:f9:c6:
                    43:08:96:ff:b6:d1:fd:4b:c2:5b:66:67:29:c5:82:
                    cc:31:00:7f:c8:bd:73:3c:6c:74:2f:29:19:b9:f9:
                    91:14:ec:4f:5a:15:a5:8b:a3:03:72:76:ef:65:ce:
                    ca:78:cb:e0:1e:a8:6f:74:4d:ee:fb:81:41:87:5c:
                    a9:69:f0:01:64:b5:99:de:06:f8:48:e1:9d:72:b4:
                    4a:2b:a1:61:a6:0d:3c:16:59:c1:e6:4c:18:d0:88:
                    b9:67:cd:62:75:b3:72:a6:eb:ec:c9:8b:f9:35:34:
                    60:7f:98:45:2a:67:08:46:e4:06:0c:c7:51:3c:64:
                    15:81:a4:ed:c4:79:1d:e0:4d:d0:47:3f:45:82:a7:
                    8b:a5:f5:1d:be:db:d8:5e:ff:e0:e6:b9:53:5a:5c:
                    90:fa:44:27:a1:69:2b:29:4b:ae:f0:ef:ca:f5:1e:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C8:E1:F5:FB:C8:D3:C3:FD:E1:6B:59:13:60:C1:0C:FF:74:DA:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f545cb29-8814-4cd2-8474-142d37f94263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f12::/38

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:83:43:92:ce:6f:87:8f:11:05:07:5d:fe:4c:fd:fb:3a:
         e0:57:30:d3:5a:f5:bc:84:e4:24:51:7d:13:39:93:4c:fc:c8:
         bc:4f:5d:d6:3d:bb:a0:8b:c2:f3:6e:3f:e8:0d:38:23:3f:16:
         14:b9:54:d3:c2:6b:82:f4:9e:b3:bb:60:4a:1d:0b:96:72:0b:
         dc:70:89:64:af:4f:9f:f2:41:b3:d5:06:75:b7:e5:5b:71:d7:
         36:41:95:eb:d1:86:73:e0:bb:d0:4f:76:b5:4a:ef:a1:d5:ac:
         ac:92:d1:84:20:69:90:1f:e9:de:7b:de:60:69:3d:66:3c:9b:
         b5:70:ec:02:b6:f5:37:d0:59:92:e4:51:01:2f:a6:e5:68:91:
         7d:02:c3:c4:d4:c6:63:15:09:63:a4:2f:44:37:39:31:04:aa:
         11:b0:2a:98:4d:3b:fe:95:c8:69:42:00:28:08:ae:98:8b:49:
         32:c3:1c:a1:e6:b5:45:3b:bb:47:1a:2e:76:9f:19:01:19:ed:
         53:b6:16:46:6b:34:1e:1f:dc:73:a0:e7:87:93:a8:4d:56:28:
         f8:87:69:43:82:b1:65:c2:11:72:b1:5c:ac:71:be:98:c5:54:
         b3:87:17:01:64:dd:e0:ea:3f:dd:c1:65:e8:11:11:47:cd:c6:
         17:db:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----