Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa
File:                     4492468d-ade8-4955-9c65-98cc7b723380.roa (raw, json)
Hash identifier:          LKiZ85SMMAS7kmUg+4eAEARNWDCrXi3YtPY6fl5UIsw=
Subject key identifier:   32:38:FC:BA:B7:3B:E0:96:A5:BA:44:48:98:32:99:35:36:14:73:47
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       413597A343C93344DF6873D9840208383B34EB39
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa
Signing time:             Fri 28 Mar 2025 15:32:10 +0000
ROA not before:           Fri 28 Mar 2025 15:32:10 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:35:97:a3:43:c9:33:44:df:68:73:d9:84:02:08:38:3b:34:eb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:32:10 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: serialNumber=cd8ba3c9ed6300ab583afe7516e0739e40dc833660ff7163f5375b326dca4aec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:f9:43:77:5e:e4:cf:87:d4:3e:94:80:e1:
                    19:c0:2d:b5:2f:55:66:74:70:fa:48:49:9f:4a:c2:
                    3e:48:9c:ae:21:ef:ef:28:32:6f:44:f8:15:09:57:
                    e7:d9:fe:0d:39:c3:c4:3c:93:71:73:18:81:59:31:
                    2e:1c:83:fe:be:6b:04:fb:3c:cb:fc:38:c3:0e:07:
                    fc:99:c0:14:a8:25:a5:12:2b:03:4d:ca:1f:32:b9:
                    0e:c6:b9:57:50:22:b4:47:04:89:c6:83:d1:0b:e4:
                    8b:00:1f:6d:25:d8:4c:91:3e:fe:92:51:9a:a6:2f:
                    95:75:fd:80:e3:36:fd:f2:de:bf:64:94:3e:10:33:
                    07:62:01:dc:e3:e2:88:cc:5a:0a:e7:4b:04:8f:3f:
                    bb:d0:5e:da:9f:6e:0a:95:21:12:a1:45:2b:16:21:
                    c4:91:05:3f:54:c3:95:68:a4:41:db:9a:ac:d2:ab:
                    34:7e:29:b8:d8:3c:08:c3:d1:ca:13:9e:57:20:01:
                    40:c7:bc:ef:c8:95:5d:46:2c:ee:be:3e:4d:9d:8b:
                    5a:6b:a0:fd:7e:a0:58:4c:83:83:2d:88:31:4d:46:
                    2d:bb:f3:b6:3b:e7:8f:be:b6:7f:64:e5:d8:cf:bf:
                    50:57:86:58:53:99:cf:de:a0:f2:52:d1:e7:3a:a0:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:38:FC:BA:B7:3B:E0:96:A5:BA:44:48:98:32:99:35:36:14:73:47
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:38:82:4e:fc:d6:92:39:ea:fa:78:9f:3c:f5:9f:33:74:
         ca:c2:83:29:64:6d:a7:29:f5:7d:98:e7:a4:be:33:3d:b7:ff:
         2a:c7:23:a2:3d:f0:f6:44:9e:88:6f:9c:83:9a:77:47:2e:68:
         a5:2d:34:30:1c:f3:3d:7a:27:02:f4:31:40:37:53:1b:84:13:
         a5:dc:96:6e:cb:da:72:d7:29:ca:d6:9c:93:ae:d8:49:71:3d:
         ec:6c:6f:33:be:22:09:e2:b0:78:09:7a:ab:87:88:b9:8b:91:
         b0:89:d4:c4:4a:66:ad:7a:1b:92:2a:fb:5f:7f:f7:15:ec:a7:
         16:59:37:ca:8e:b1:d9:2f:01:59:e5:98:76:98:fe:bc:e9:c1:
         99:b7:8d:bc:59:62:3b:92:60:9a:ac:67:43:7c:41:a0:f3:30:
         4b:81:b9:bb:d5:4e:fa:bf:bf:df:3c:7a:35:b7:bb:42:88:ab:
         8b:4e:c0:ec:c6:43:ca:0d:56:46:d9:04:b5:30:79:26:64:e1:
         0d:9e:45:92:7c:d7:74:6d:ed:2e:d3:79:a9:b1:6c:99:4c:44:
         ae:b7:9f:13:8a:9b:1e:a9:72:7e:17:8c:76:de:f7:5a:94:9d:
         ff:0f:73:5c:bc:d1:f9:61:3e:27:11:c2:c6:50:84:ce:d2:fe:
         ec:97:d7:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----