Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa
File:                     fd1c8944-1621-4da7-9c93-1eab516bb822.roa (raw, json)
Hash identifier:          ZByQc2jOpqbsfP9XO2OQxyQiqnL2Fm1eoxq1egYTGh0=
Subject key identifier:   BB:FD:2D:77:A8:8A:D7:31:85:F7:24:5D:55:A9:51:6C:A3:CC:D0:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42C6E0E92BCA5EC4E3E57E818EC52AAF47C713E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa
Signing time:             Fri 28 Mar 2025 17:01:48 +0000
ROA not before:           Fri 28 Mar 2025 17:01:48 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f14:1000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:e0:e9:2b:ca:5e:c4:e3:e5:7e:81:8e:c5:2a:af:47:c7:13:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 17:01:48 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:33:4a:68:33:85:ee:16:1a:b5:d7:a6:8e:
                    83:94:0a:aa:90:c7:6b:77:53:da:63:1b:fa:c1:e4:
                    80:2e:ea:6b:9a:71:67:87:29:cc:06:5d:46:8f:e2:
                    08:12:5d:8f:6e:8b:0f:ac:ec:ff:58:7f:ed:75:4e:
                    94:3d:96:a2:6d:51:f5:61:e6:63:b4:b8:7a:04:75:
                    ee:a9:d9:6b:88:b0:df:9e:61:ef:81:36:8f:0b:df:
                    b4:0f:de:ee:be:86:44:01:1b:e2:bd:0e:6a:6b:5e:
                    b4:bf:1a:96:d7:9e:3e:99:98:37:1f:9d:2a:72:f2:
                    eb:58:c0:15:af:48:83:58:0f:ac:50:55:9d:5d:47:
                    c3:19:c5:af:32:a2:65:5e:7b:3e:2c:bb:9b:bf:6c:
                    0d:07:54:63:bb:a2:6a:8a:75:e0:2c:d4:e9:45:78:
                    37:a8:2f:31:56:d3:cb:11:78:cb:b2:d9:d5:93:d0:
                    59:71:2f:63:fe:21:47:a5:8e:1e:56:28:c2:c4:c2:
                    9c:50:44:87:0f:64:5d:d0:ed:ac:4f:ca:0e:3f:f9:
                    0d:c0:4d:52:12:5c:05:eb:94:43:b7:64:79:95:da:
                    a1:7e:79:39:ca:0a:0c:ac:ed:f1:ce:f7:d1:b0:16:
                    83:74:c0:18:3a:b9:f4:5b:6d:ae:fa:17:da:81:b3:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:2D:77:A8:8A:D7:31:85:F7:24:5D:55:A9:51:6C:A3:CC:D0:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd1c8944-1621-4da7-9c93-1eab516bb822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f14:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         b7:82:b8:61:64:9a:2b:2e:86:38:59:c5:17:a1:1e:27:a7:3a:
         df:65:ae:fd:a7:e5:a0:f6:1d:82:84:91:24:7b:fb:37:b7:f1:
         c9:5a:e7:60:0b:aa:e3:63:50:c9:32:31:ac:4d:83:a1:d9:1a:
         fe:9c:4f:c4:9a:35:81:88:c3:64:97:c2:d1:82:02:72:4e:41:
         88:88:93:25:7f:de:f4:e0:ce:c3:87:45:19:88:b2:8f:69:9d:
         68:31:51:07:ef:28:58:93:48:63:36:62:cb:ad:58:64:a4:ba:
         f0:67:b1:65:17:81:93:0c:25:86:11:4d:cc:df:19:58:7d:b9:
         7d:ff:99:66:5b:13:3a:1e:65:fc:1d:08:24:51:c9:c0:87:72:
         d7:8b:60:7d:63:9a:b6:f5:93:c2:2a:93:cc:61:b6:ee:52:80:
         b2:61:2b:5f:6d:6f:e9:cd:40:30:8f:3a:14:3c:93:50:44:09:
         26:29:81:84:2b:6b:a6:10:0e:ff:f9:82:4f:dc:ed:f5:0a:e6:
         d9:ea:1b:a3:f0:0a:f4:09:7d:08:bc:ed:ab:65:34:4e:81:3b:
         b3:bc:e8:a8:7c:20:60:7f:bc:fc:bd:de:17:15:f5:98:3c:e7:
         92:a4:47:e2:42:f8:b9:23:bd:22:f6:c8:14:ce:ad:ad:8f:ce:
         c7:d5:5d:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----