Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
File:                     64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa (raw, json)
Hash identifier:          KUpmsmap/ChadSkFtevwm/Y8DPDgd/s8rt6vFneyXm4=
Subject key identifier:   A1:2F:B6:18:78:9B:78:D8:19:F0:6B:4F:54:38:FE:33:86:2F:DF:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0B698D1AF8A574D49EA4D1AF478EEA13F8D27BC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa
Signing time:             Tue 15 Apr 2025 00:11:21 +0000
ROA not before:           Tue 15 Apr 2025 00:11:21 +0000
ROA not after:            Tue 20 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fb8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:69:8d:1a:f8:a5:74:d4:9e:a4:d1:af:47:8e:ea:13:f8:d2:7b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:11:21 2025 GMT
            Not After : May 20 23:59:59 2025 GMT
        Subject: serialNumber=74f44b12e953cf87852b0d5bdcff7072b6b22e8754c164b4a25e7cbf9ab111ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:dd:df:4d:35:d5:fb:5c:1d:7c:b7:d3:48:
                    4c:21:99:ba:1f:aa:c3:00:33:b7:33:d5:47:53:24:
                    6c:27:78:2c:e1:a4:d3:c1:73:61:68:24:8d:8e:0c:
                    ab:b8:b0:c4:b2:8c:3f:49:12:e7:0f:3a:4f:aa:73:
                    7e:df:d8:1d:c1:fe:4e:64:05:00:cb:d8:a2:60:70:
                    56:df:1c:29:d3:5a:8b:b9:70:7b:d1:77:da:0c:50:
                    42:6b:2f:b9:bf:77:6a:01:af:e3:58:1c:ca:a1:b3:
                    97:18:79:f2:85:c4:b5:ed:d0:7d:77:3a:de:7c:43:
                    0d:4d:30:e3:04:52:5c:4d:38:a9:b0:53:0c:36:47:
                    38:84:1e:bb:d1:1f:f0:e4:8b:e3:b8:46:43:46:a1:
                    15:49:8f:e2:e0:06:ea:82:a5:0c:60:43:d3:2b:a9:
                    23:4c:38:67:c1:05:f0:ba:d8:0f:aa:83:a7:b8:2e:
                    30:66:ec:99:00:75:c7:8f:6a:8f:0b:65:c4:c0:cc:
                    9d:ed:0c:bd:a0:96:cf:d6:aa:fe:b1:d3:75:eb:a9:
                    4a:9a:91:ac:b6:55:a2:31:4c:2f:09:3c:1d:02:c9:
                    2f:39:33:8d:a5:6d:b8:71:9c:2b:b0:f1:c8:fd:3f:
                    64:0a:21:a9:ba:15:e2:b8:c2:b1:ff:66:42:fd:5c:
                    f2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2F:B6:18:78:9B:78:D8:19:F0:6B:4F:54:38:FE:33:86:2F:DF:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64c4cac5-bd6c-4ca5-84cb-f235a46201cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:47:5e:93:8b:7c:55:f3:29:27:14:89:1f:e5:68:2a:1f:1c:
         5b:92:43:ed:f7:a7:3a:e2:2f:9c:0a:b1:46:e8:aa:5f:95:ac:
         e0:53:8b:88:96:13:a9:b2:ac:aa:7f:88:5d:b6:1e:9b:86:ca:
         ed:42:d0:e9:bc:f4:5a:0b:b8:1a:0a:6a:b5:ec:d7:f7:5d:6a:
         a8:7d:ad:54:ee:a2:40:ea:8b:a2:e7:2f:62:4a:a7:4d:7f:dd:
         33:cc:0e:d2:8c:45:18:ad:ed:56:e9:13:3c:54:e8:78:f9:b0:
         42:5a:a6:69:cc:03:c8:af:1a:0f:52:95:11:33:32:58:94:bd:
         b4:ec:9d:a0:bf:d4:40:2d:55:69:21:eb:db:fc:01:a5:c7:64:
         2b:55:cf:ec:cb:e9:c4:26:ff:a3:65:3c:b1:92:32:6a:2e:b2:
         52:ba:17:77:89:bb:d4:d3:27:62:34:09:2b:d7:ce:09:07:04:
         2f:82:14:5c:a3:8b:6b:13:67:e0:47:e6:80:72:0a:af:6a:69:
         6e:91:d3:a1:f7:df:5a:18:18:c4:36:28:56:b2:66:bb:7b:8a:
         2b:44:3c:ac:99:78:e6:12:b6:1e:f0:5b:31:9e:a9:33:57:ec:
         dc:7a:74:0e:44:ab:c9:ef:c4:68:b2:21:bd:51:f2:1d:44:52:
         bf:f6:61:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----