Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
File:                     46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa (raw, json)
Hash identifier:          nljcJwhkuBNUIj8Ic3BvmgIxjkxGn7vYKt8hrZ5+wEE=
Subject key identifier:   4F:C4:C5:5C:7C:DE:6D:AD:83:33:0B:B6:18:B7:5D:5E:04:1B:AE:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E6CE65A031E9C5AAB03C94FE71963B4D68556
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa
Signing time:             Tue 08 Apr 2025 00:11:42 +0000
ROA not before:           Tue 08 Apr 2025 00:11:42 +0000
ROA not after:            Tue 13 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:a400::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6c:e6:5a:03:1e:9c:5a:ab:03:c9:4f:e7:19:63:b4:d6:85:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr  8 00:11:42 2025 GMT
            Not After : May 13 23:59:59 2025 GMT
        Subject: serialNumber=d386dadfd7ec30fb46e3030d137ce7698922cf1547aaf10ed65341c32ed44989, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:d7:42:1e:2b:d7:98:25:c2:44:67:7e:3e:
                    d8:83:bb:fc:e0:f8:e6:cc:c3:21:bc:5d:37:db:37:
                    3b:2b:9d:05:25:c1:21:c6:a9:44:c6:1d:97:25:d5:
                    d5:43:ff:f4:8d:f2:d4:b1:ac:2b:7b:7f:bf:15:24:
                    f2:7e:a8:84:4a:9b:4f:80:fb:b8:75:33:2b:f2:ad:
                    4d:a5:de:dd:33:ed:31:b3:68:df:1c:61:30:10:31:
                    84:b2:aa:e8:e8:62:f6:16:d9:da:a0:c6:93:b5:0e:
                    f9:f4:e3:d1:01:9d:77:fc:da:af:ec:9d:a8:b3:c3:
                    b4:6c:13:ec:fe:8f:c9:c3:a9:f8:e2:4e:be:d0:0b:
                    e0:9e:fc:d9:1f:b4:f3:38:22:d3:fa:5c:b5:7c:13:
                    64:ab:92:0e:4f:c3:70:fd:06:9a:dd:73:a8:2d:66:
                    3b:84:42:d7:d8:54:a8:98:85:58:2a:4e:d7:ac:7f:
                    fc:01:66:3e:31:bd:02:f2:99:64:ea:42:3a:63:f7:
                    96:83:c1:dc:db:0d:c8:c9:dd:16:56:a1:e9:fb:f4:
                    f5:28:ba:f6:5f:f0:10:5e:62:07:48:2b:ab:1f:e9:
                    dc:fb:21:ae:af:d8:e7:3b:f7:2b:65:ce:9d:b3:0d:
                    68:3c:29:e9:f4:41:cc:cc:2e:96:f8:68:11:4e:cf:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:C5:5C:7C:DE:6D:AD:83:33:0B:B6:18:B7:5D:5E:04:1B:AE:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46edd7ff-96c0-4dcb-a72e-2dd489d695eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:ac:ee:78:c5:0d:69:cc:2b:9d:a4:28:0b:6c:44:cd:0d:23:
         6a:94:36:ea:77:29:09:66:a4:c8:65:cb:3f:3d:68:eb:14:7e:
         45:1d:ca:2f:64:fd:07:67:f7:6b:fc:d8:2f:c8:2c:a7:13:4c:
         ee:8c:9d:17:9e:a9:85:ac:07:a9:5a:79:e4:5c:47:12:d8:62:
         27:48:28:38:f7:10:cc:b1:cf:65:d4:00:be:cf:9e:88:ef:7f:
         f1:0a:f7:54:6e:1e:a8:64:4f:85:70:66:9f:6e:09:7f:b0:f8:
         16:35:14:b2:21:2f:81:09:a9:da:52:a3:27:59:e3:19:54:b9:
         aa:5c:b5:90:8b:6b:37:30:c5:f6:df:8a:98:99:f6:15:44:d0:
         6a:1a:31:0f:68:b9:4b:f4:bf:0d:86:73:c5:2f:0b:da:21:4e:
         ae:2b:13:d1:7d:46:8e:ab:87:8c:78:b7:c3:a0:3a:b9:c3:14:
         d8:ed:61:86:5b:d9:77:ce:df:44:3e:64:7f:07:c7:df:c5:e7:
         a4:15:5c:08:a3:ee:ac:3d:c1:bf:51:21:b7:d9:f9:c2:7c:dd:
         a0:59:71:00:c9:2f:7d:54:d9:8d:2d:46:a3:36:1b:a7:23:95:
         32:91:ad:54:1c:de:fe:77:61:76:23:b4:4c:c2:77:59:19:b6:
         f7:9a:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----