Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18177f9d-ec0a-46ca-8ffc-d7e5443e0f8a.roa
File:                     18177f9d-ec0a-46ca-8ffc-d7e5443e0f8a.roa (raw, json)
Hash identifier:          Wyg4zoetSnclfB259iPo74D6gX4OQY9CNPxtVOPrAb8=
Subject key identifier:   FB:F3:C2:99:D4:68:D9:FE:09:BC:7B:FD:89:5A:BC:80:53:0D:9F:38
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E24EE31A5D485E1316CEA294446E5E6CC5C4C18
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18177f9d-ec0a-46ca-8ffc-d7e5443e0f8a.roa
Signing time:             Tue 08 Apr 2025 00:21:56 +0000
ROA not before:           Tue 08 Apr 2025 00:21:56 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:24:ee:31:a5:d4:85:e1:31:6c:ea:29:44:46:e5:e6:cc:5c:4c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:21:56 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=4a9e9ccb0e6ac9baf6050130ce6f3037084f26940cb0197f2a8ca4ea386668c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:df:89:92:d0:d9:f1:2d:92:d4:52:7b:a5:
                    f6:64:4b:ce:a8:11:31:74:c4:cb:b4:e4:60:76:45:
                    74:6c:f5:d9:8f:bf:03:c5:bb:23:76:40:09:11:61:
                    92:a4:26:68:95:04:29:ca:48:4e:08:19:b5:e6:96:
                    00:9c:23:53:61:e2:30:1a:9c:80:72:39:35:bc:8e:
                    75:6a:ef:eb:b9:29:85:91:bd:2b:5a:d7:3c:17:49:
                    39:ce:7d:69:6d:5b:3f:ab:16:19:a5:13:86:2b:7c:
                    6c:a5:85:71:e8:e5:1e:de:e5:f4:cb:0b:24:1f:fb:
                    16:ae:db:f2:32:42:ab:62:c5:23:0b:bc:f3:4f:21:
                    a6:cc:6e:39:d4:f3:21:51:30:b8:67:28:7e:68:32:
                    ab:83:45:27:c3:8e:ed:55:dc:14:13:5a:5a:cc:0c:
                    c9:58:63:ab:4d:4a:6d:b6:a2:c0:72:e7:d7:6e:dc:
                    35:85:45:b3:05:dc:71:59:74:8d:45:a8:79:ad:68:
                    0d:06:0b:94:1f:e6:f6:56:9c:7e:d4:e3:dc:01:18:
                    c9:8b:ed:e0:2a:c9:f9:ee:49:07:39:f9:40:19:c7:
                    75:34:60:35:9e:cb:ac:22:8c:01:a3:20:eb:c3:e7:
                    3f:88:0b:89:b3:61:5b:70:96:6c:29:ae:0d:00:b0:
                    7a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:C2:99:D4:68:D9:FE:09:BC:7B:FD:89:5A:BC:80:53:0D:9F:38
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18177f9d-ec0a-46ca-8ffc-d7e5443e0f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff7::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:bc:ae:f9:e6:54:39:42:d9:1a:64:81:2c:b0:51:18:f7:2b:
         b6:84:09:f0:d3:98:fb:dd:2f:9d:4e:aa:d8:f4:bb:45:4e:a1:
         40:13:4a:ac:74:bf:66:7e:cc:42:ba:06:31:6b:8b:b8:51:f9:
         e7:12:73:54:55:ee:f5:a2:bb:0b:ba:b4:57:84:26:5f:5c:60:
         b1:4f:0b:80:4c:95:be:dc:35:0c:ca:d3:c9:91:0b:92:da:1b:
         a5:6e:65:70:54:dc:68:f1:ba:ac:9b:5c:bf:2f:98:5c:f6:4f:
         ff:ac:6f:3f:c5:8f:60:84:b4:81:31:bb:c2:77:e8:40:0e:20:
         42:73:8e:07:0c:b4:ad:da:97:a8:22:a9:20:6e:68:98:93:7b:
         16:a6:59:50:02:9f:ad:4c:07:a0:45:5f:97:6d:3c:35:57:6d:
         e4:2d:7d:89:11:eb:35:ed:e0:79:f7:42:3e:2a:09:0c:2d:84:
         c8:84:76:65:01:14:20:04:c8:da:ca:c6:3c:40:20:4c:68:b1:
         e6:61:67:b5:9f:1a:82:fe:e3:97:9c:a7:2c:46:0b:59:6d:e4:
         29:41:39:31:c1:b9:9b:a7:b4:19:e9:81:bb:73:ae:1a:77:22:
         c1:a4:3e:de:25:58:37:70:37:49:bd:d9:08:51:89:89:c0:df:
         9a:20:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----