Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
File:                     3b6f98f3-b828-4069-9b64-8122ea365d59.roa (raw, json)
Hash identifier:          zWadh9jitk/kMYI+IL6V9gatjq119LWEiQ7ohQhggDU=
Subject key identifier:   26:53:9F:E1:CC:3D:3D:F6:88:3D:30:4F:DE:13:2C:09:D2:FB:64:D9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       796EC1059CB75DDC25221F1DE5EFB33B1AD9B3C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
Signing time:             Tue 08 Apr 2025 00:21:52 +0000
ROA not before:           Tue 08 Apr 2025 00:21:52 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fa0:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6e:c1:05:9c:b7:5d:dc:25:22:1f:1d:e5:ef:b3:3b:1a:d9:b3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:21:52 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=ef4c47ce8ef76d067e7b48117273babd2bde1737a3c53034d485a18aab1868b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:b9:17:90:f8:37:73:82:24:27:e6:df:0b:
                    93:59:7f:e8:65:c5:2d:e1:35:41:11:08:c4:a5:e7:
                    06:d2:fc:ba:08:29:04:14:85:d0:86:7a:82:05:5c:
                    9f:14:da:6c:7b:4c:3b:10:13:d4:5e:cd:c9:05:01:
                    e5:f0:63:6d:9f:99:7a:b9:92:1e:ee:e7:1b:78:0e:
                    51:42:2d:1c:cd:32:b1:a3:88:b8:03:c3:44:af:7b:
                    52:31:ae:ed:ee:b8:9d:4b:73:1c:e7:24:8d:75:18:
                    3e:2a:a2:0e:e3:6a:bc:0c:6f:bd:81:ab:6e:12:06:
                    8f:84:12:71:d9:ba:14:0a:94:93:c8:57:85:1d:92:
                    69:6a:2f:61:92:25:3e:d7:9b:97:b6:92:4c:e5:02:
                    bd:62:8f:a4:15:44:54:38:01:ad:63:17:58:d2:a6:
                    22:8c:4f:98:34:5b:1a:47:de:0f:6f:67:84:b2:01:
                    32:33:a2:dd:01:2b:f1:eb:c9:67:78:39:d0:b0:5b:
                    59:f3:96:3a:d9:8c:e8:c4:4c:f9:94:e9:07:e3:1b:
                    0a:fe:e5:40:ab:6d:14:76:48:60:b5:d2:79:3d:d5:
                    c1:04:58:44:8d:35:0c:74:85:5d:28:d4:69:c4:9d:
                    4b:70:12:09:58:0d:a8:06:c3:89:69:43:08:48:ee:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:9F:E1:CC:3D:3D:F6:88:3D:30:4F:DE:13:2C:09:D2:FB:64:D9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fa0:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:30:f6:bb:77:52:f4:67:de:15:3f:2c:d8:9a:1f:f9:ca:
         9e:d6:ed:fe:5e:74:07:6e:7d:5c:89:03:7e:ca:68:f1:9f:95:
         40:14:8b:c3:29:90:f5:df:5d:66:83:81:91:5d:1a:2b:f1:d3:
         01:0e:a2:10:cf:02:e1:71:fd:63:65:cc:a9:97:8c:7f:70:6d:
         d1:81:91:51:7e:6d:1c:84:5b:3e:09:97:7b:08:94:a5:6b:24:
         9a:4e:61:ae:15:1c:bf:7c:cd:13:83:96:64:bb:28:2d:e7:ce:
         a1:4e:20:0a:17:38:79:4e:16:03:d3:d0:24:fa:77:a7:5f:0c:
         b8:bc:bd:90:4a:5e:63:d0:ce:78:35:88:08:a5:39:d5:7d:49:
         79:6f:10:ad:96:a8:e5:31:92:84:20:3a:68:67:00:45:79:d7:
         ce:ee:10:84:b4:3c:d8:4c:ce:04:1b:d8:d4:6f:cf:47:97:af:
         52:23:83:f0:2d:1a:97:b0:18:ae:ca:75:43:81:97:11:f7:1b:
         2a:57:de:2d:d3:6b:c8:5c:0e:d6:b1:cf:ce:a3:5e:cc:fa:fc:
         8a:8e:87:4c:c4:ea:8f:fd:14:ca:f4:7e:12:5d:21:e6:83:0f:
         96:e4:b0:b9:cf:dd:16:40:d6:4c:ae:ea:bc:b2:b0:57:e3:0a:
         18:fb:09:7d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUeW7BBZy3XdwlIh8d5e+zOxrZs8cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDA4MDAyMTUyWhcNMjUwNTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZjRjNDdjZThlZjc2ZDA2N2U3YjQ4MTE3MjczYmFiZDJi
ZGUxNzM3YTNjNTMwMzRkNDg1YTE4YWFiMTg2OGIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdu7kXkPg3c4IkJ+bfC5NZf+hlxS3hNUERCMSl5wbS/LoI
KQQUhdCGeoIFXJ8U2mx7TDsQE9RezckFAeXwY22fmXq5kh7u5xt4DlFCLRzNMrGj
iLgDw0Sve1Ixru3uuJ1LcxznJI11GD4qog7jarwMb72Bq24SBo+EEnHZuhQKlJPI
V4UdkmlqL2GSJT7Xm5e2kkzlAr1ij6QVRFQ4Aa1jF1jSpiKMT5g0WxpH3g9vZ4Sy
ATIzot0BK/HryWd4OdCwW1nzljrZjOjETPmU6QfjGwr+5UCrbRR2SGC10nk91cEE
WESNNQx0hV0o1GnEnUtwEglYDagGw4lpQwhI7kJVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJlOf4cw9PfaIPTBP3hMsCdL7ZNkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNiNmY5OGYzLWI4MjgtNDA2OS05YjY0LTgxMjJlYTM2NWQ1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+gEDANBgkqhkiG9w0BAQsFAAOCAQEAi64w9rt3UvRn3hU/LNiaH/nK
ntbt/l50B259XIkDfspo8Z+VQBSLwymQ9d9dZoOBkV0aK/HTAQ6iEM8C4XH9Y2XM
qZeMf3Bt0YGRUX5tHIRbPgmXewiUpWskmk5hrhUcv3zNE4OWZLsoLefOoU4gChc4
eU4WA9PQJPp3p18MuLy9kEpeY9DOeDWICKU51X1JeW8QrZao5TGShCA6aGcARXnX
zu4QhLQ82EzOBBvY1G/PR5evUiOD8C0al7AYrsp1Q4GXEfcbKlfeLdNryFwO1rHP
zqNezPr8io6HTMTqj/0UyvR+El0h5oMPluSwuc/dFkDWTK7qvLKwV+MKGPsJfQ==
-----END CERTIFICATE-----