Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa
File:                     6d04681e-2458-4f39-84be-dcccbbcbdab0.roa (raw, json)
Hash identifier:          01kF4e4ISkzv1+9+02F8S0bIbVmKhTZp9/DzNTW5i5E=
Subject key identifier:   63:38:DF:90:D2:28:F6:5F:F6:E3:69:A1:F2:3E:B6:C2:1F:53:3C:90
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       9D61112498004D8DC82CF1554DE1A58B8AC82F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa
Signing time:             Fri 21 Mar 2025 00:11:15 +0000
ROA not before:           Fri 21 Mar 2025 00:11:15 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f60:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9d:61:11:24:98:00:4d:8d:c8:2c:f1:55:4d:e1:a5:8b:8a:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 21 00:11:15 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:30:79:c6:9e:8a:1b:51:fb:8f:b5:62:c4:
                    ee:0f:85:b2:85:64:8a:90:c9:af:cf:18:80:d4:94:
                    fd:95:72:ce:c9:69:f4:21:c8:8e:27:85:a4:b2:43:
                    6e:46:c6:2b:27:b1:2a:0e:85:6b:13:7d:fd:59:b0:
                    51:e5:bd:bc:9b:09:10:c1:a1:c0:4b:0b:b8:8e:66:
                    01:f5:91:42:ea:57:88:ee:48:70:22:28:6a:7b:4f:
                    d9:8a:a8:5a:54:96:d0:92:61:a0:3e:0a:e5:a8:da:
                    6d:af:1b:03:d3:01:d3:56:ee:57:08:a3:2c:97:30:
                    42:e1:6e:12:70:3e:9b:fb:cc:e6:bd:9f:66:c2:f7:
                    db:69:0a:c2:a9:e5:21:a6:3c:f4:7b:2b:98:be:ec:
                    a7:a7:49:06:fe:3b:95:aa:cf:c5:9e:54:9f:6d:9c:
                    91:d4:da:a3:35:b4:2c:13:ff:7a:3e:3a:23:f0:64:
                    f8:75:1b:80:e9:35:cc:c2:58:92:38:6d:65:aa:f1:
                    ae:5d:9d:af:76:9f:28:22:5f:36:09:1f:33:75:2e:
                    0a:0b:ab:66:7b:a9:76:20:90:23:c3:7a:16:b3:51:
                    92:95:ac:79:95:30:71:79:19:2b:3c:c9:2d:22:bf:
                    0c:ed:cd:41:fb:c1:f5:d8:59:8a:bd:52:f6:bf:67:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:DF:90:D2:28:F6:5F:F6:E3:69:A1:F2:3E:B6:C2:1F:53:3C:90
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d04681e-2458-4f39-84be-dcccbbcbdab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f60:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:72:16:0e:49:aa:b5:19:7d:31:cb:3c:12:83:be:f4:e3:
         89:83:99:50:b7:5c:f5:e3:25:96:59:92:d6:d4:b6:9c:8c:dc:
         35:5e:26:68:3a:98:b1:f4:35:8a:fd:a7:1f:9d:d1:db:f2:56:
         19:38:3d:c2:bd:86:2f:79:65:21:22:9d:4b:92:f4:aa:c8:8b:
         a1:09:02:00:6b:eb:c4:53:5c:ea:03:c9:fc:67:e5:65:fc:83:
         c0:bc:eb:cc:2c:41:c1:d5:48:4f:e9:0c:23:69:61:bd:6b:b0:
         10:a6:82:e9:27:02:16:b1:79:f8:5e:68:50:85:82:c7:3f:0d:
         8f:48:a8:25:49:49:90:7c:a2:34:f6:fd:fa:e7:34:de:dc:a8:
         53:33:f7:f8:f6:58:35:2a:e7:61:72:a8:4f:f6:ff:28:60:24:
         ef:a4:8b:43:f9:1a:6e:7d:9e:a8:b0:48:ae:41:5d:ca:5d:bc:
         df:ad:d6:d0:3e:2a:73:f8:03:b4:f7:2f:78:80:14:18:12:f0:
         c7:b0:93:be:d5:ce:b7:2c:a3:cd:9f:ab:b8:a9:bd:8b:2a:6f:
         63:71:e3:c6:52:b7:5a:1a:f1:fe:53:be:73:fa:68:b3:b2:78:
         64:43:e4:a8:24:27:f6:94:64:59:25:be:70:52:66:7b:fd:cc:
         92:dc:87:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----