Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
File:                     bd7b206c-0527-49d0-914a-fe7ee32411b1.roa (raw, json)
Hash identifier:          /eRP+Wxj5b6ZtxiTGvjZFzekTcmVh1SEfL6qgqViTjc=
Subject key identifier:   E4:2A:21:E3:79:8C:08:2C:23:80:92:3F:CF:28:B6:23:8D:F0:A6:C9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       41CAC8C7FAB2B35F806436C581375A9F438F5268
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa
Signing time:             Fri 28 Mar 2025 00:01:51 +0000
ROA not before:           Fri 28 Mar 2025 00:01:51 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffd:8066::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ca:c8:c7:fa:b2:b3:5f:80:64:36:c5:81:37:5a:9f:43:8f:52:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 00:01:51 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:7a:59:2b:16:4b:fe:9a:3c:d0:1e:19:e9:
                    44:ac:d4:38:3d:bf:ba:09:ea:32:df:f7:70:8f:53:
                    9c:b6:74:c8:f7:db:e6:cf:5b:84:c8:aa:1b:a4:15:
                    f0:dd:73:d9:a8:b1:8b:82:b1:df:b3:53:8c:47:ca:
                    ac:98:5d:96:61:b3:56:69:1b:03:58:8b:81:af:52:
                    62:75:7f:6d:3a:d4:78:74:1c:4e:23:02:e2:78:21:
                    b7:cb:f1:52:18:65:84:b8:88:ea:a6:7b:c0:c5:4a:
                    6b:9d:1f:15:bc:8c:16:93:a4:b4:0a:95:e9:ad:67:
                    81:48:7d:12:42:cf:30:4d:15:ff:6f:be:46:a6:1c:
                    c3:cb:b1:63:a2:1f:5f:79:b3:97:2a:99:95:e0:5f:
                    e3:40:42:43:cb:b7:99:07:c0:f6:64:95:6f:89:77:
                    f0:1a:30:e4:c8:7a:2b:a5:f7:40:9e:f4:6e:dd:c6:
                    6b:8b:b7:49:10:e6:34:f7:aa:96:c4:c0:d5:26:22:
                    59:59:ea:94:1e:3a:d3:fe:17:12:52:af:90:20:bb:
                    fb:09:18:df:97:04:66:46:c6:4e:10:d5:b6:6c:27:
                    b1:18:26:d9:0d:a0:c0:e3:b7:fa:58:2d:84:1f:2b:
                    43:8e:4e:d5:cb:ee:c7:14:54:3f:0b:af:bf:01:20:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:21:E3:79:8C:08:2C:23:80:92:3F:CF:28:B6:23:8D:F0:A6:C9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7b206c-0527-49d0-914a-fe7ee32411b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffd:8066::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:45:9b:30:83:35:4a:0c:db:81:0d:56:00:f3:16:4d:97:
         9b:96:4f:61:f7:73:5c:b6:71:8a:1a:f6:02:65:ae:2d:21:0e:
         4e:f6:bb:22:2c:81:1c:b4:a6:9a:ba:ef:1a:92:89:b0:b2:21:
         be:11:29:e7:b7:bc:ee:0d:a6:b6:07:0d:f8:07:3f:f8:24:5e:
         87:7f:96:b8:ff:d0:39:31:84:7c:76:c8:4d:42:1d:5d:c2:72:
         29:66:2f:ae:eb:96:8a:56:bd:e8:26:e7:1d:78:00:8a:80:b2:
         e2:a6:7f:77:7c:ca:5c:26:ee:e1:1a:bb:9e:6b:70:f1:73:f2:
         d7:2f:f9:26:e1:f5:b6:dd:b9:36:b0:17:15:90:3e:16:4f:4c:
         fa:04:28:80:09:bc:61:cf:dc:fc:72:54:a2:f5:a3:37:b6:6b:
         d5:0e:76:d3:d8:09:c8:a2:78:f8:85:24:49:d4:8b:c5:a1:89:
         df:ab:29:4e:2e:cf:6c:42:2c:b0:13:c1:ee:89:f6:ab:a2:fe:
         b9:d8:bf:3c:fc:6b:a2:28:e8:9a:e0:c2:08:85:c1:69:ac:e4:
         da:c0:3c:df:e6:88:c0:a7:0a:f6:18:f6:92:f6:12:42:21:ec:
         0c:c1:ed:b4:ed:2e:09:84:fc:6b:dd:11:1f:c2:7b:67:d1:2c:
         3d:2c:dd:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----