Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
File:                     30083b55-0236-4f8d-8387-e3015b3d58d8.roa (raw, json)
Hash identifier:          +/PsqcysQ4saSpL8uSklKV696ISHbknEto3FWVJ1xsk=
Subject key identifier:   17:D2:E3:EB:82:5F:53:80:54:E7:80:EE:A5:D2:67:DE:E6:BA:5C:E4
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       232AD6029059764502B19AFF26C495DB6D4339F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
Signing time:             Wed 09 Apr 2025 00:10:23 +0000
ROA not before:           Wed 09 Apr 2025 00:10:23 +0000
ROA not after:            Wed 14 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ffc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2a:d6:02:90:59:76:45:02:b1:9a:ff:26:c4:95:db:6d:43:39:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  9 00:10:23 2025 GMT
            Not After : May 14 23:59:59 2025 GMT
        Subject: serialNumber=15e94fb361abe4dc785280cdac7b51ccfa775d519f3fc670bfd6738e859c7170, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:38:c7:5d:bd:57:5c:0e:0a:af:75:97:d4:
                    d5:62:ba:a7:1d:cc:d8:08:01:58:68:b3:a7:4d:ab:
                    16:aa:d8:a5:6b:05:40:e5:39:85:37:cd:67:89:41:
                    71:3d:92:7e:b5:ed:d4:68:59:19:7a:c3:eb:09:be:
                    d0:19:85:db:9a:19:72:1c:12:22:66:c6:86:1d:ba:
                    5b:fd:90:e9:fb:9a:8e:38:13:cf:6e:6c:9d:89:90:
                    d5:3f:6a:cf:e7:4a:38:ca:f3:96:5c:a6:9e:48:1a:
                    6f:cf:ba:8b:bb:50:e5:05:53:bd:73:45:a3:7f:c5:
                    c9:77:bb:24:b5:19:e1:8d:0d:e7:2e:69:18:76:77:
                    03:6f:7f:80:23:0d:5f:1e:d5:9d:ff:75:23:a7:73:
                    2f:5f:56:13:aa:fd:d0:92:86:80:36:bb:26:19:98:
                    47:55:1e:ed:e2:b8:d7:ca:5b:f6:25:6c:c1:17:12:
                    97:40:a8:1b:07:2d:1e:9b:58:4c:2b:a7:64:77:0e:
                    7c:38:69:21:b2:94:d8:a1:de:cf:c3:2a:e7:2a:f6:
                    f4:1e:ca:70:af:88:dc:1f:bc:25:3c:c2:92:01:72:
                    9a:50:21:a9:ca:e8:21:0c:a5:33:6e:55:77:e2:e0:
                    84:70:ea:69:f9:9a:79:62:bc:6c:70:a2:15:cd:ec:
                    5f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D2:E3:EB:82:5F:53:80:54:E7:80:EE:A5:D2:67:DE:E6:BA:5C:E4
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffc::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:5a:44:6c:e0:e1:24:d8:6f:db:bf:99:4c:7d:fe:cb:89:bb:
         6b:62:3d:d1:fd:d6:38:fe:71:24:33:25:19:01:c0:34:8d:ef:
         05:e9:72:25:0a:51:44:b2:22:02:fc:db:ba:ba:1c:ce:37:22:
         e8:7d:49:54:a2:b2:1f:0a:ca:1f:f1:73:d3:6f:23:eb:06:c5:
         31:90:14:40:72:79:1b:89:11:06:a0:af:48:84:1e:1a:4c:67:
         11:bd:76:45:95:60:89:44:44:14:3f:2d:5b:58:aa:46:c7:da:
         33:05:d1:c3:c1:a5:de:98:ab:db:cc:d6:30:0d:a9:ca:02:ae:
         f6:2a:dc:9f:83:1f:80:5e:92:7c:9e:c8:bb:f3:eb:b8:95:2f:
         97:c3:58:0d:f4:0e:2f:0c:6b:ef:6e:83:cf:69:b9:d5:e3:20:
         26:d8:a4:10:1d:69:a7:0f:9b:e7:8f:fe:df:72:24:b1:bc:52:
         84:7f:27:a0:d3:95:ea:96:2d:b3:d1:9e:b0:b5:3c:d8:2f:bd:
         bb:69:46:88:97:8d:59:dc:29:2d:f3:de:89:f6:25:b7:70:52:
         c8:16:f4:f0:af:b8:05:d1:e5:ec:98:8b:37:2c:d7:ec:ab:fa:
         60:dc:c4:22:4d:c0:48:9a:09:1b:c4:42:e5:ed:d9:75:63:fd:
         b7:7e:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----