Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa
File:                     800c9a74-7f0a-498d-9672-65112aba8401.roa (raw, json)
Hash identifier:          PpvWq/C+jMYbybNfBcS/HLjHZoReReYlQpBgWdabmFo=
Subject key identifier:   32:22:85:81:3C:D1:72:0D:23:8C:E1:D1:1A:9F:4C:4C:BE:89:5F:61
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1B4ED9A473F0F2535509C196C0E2A004D79C9EED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa
Signing time:             Tue 15 Apr 2025 00:11:08 +0000
ROA not before:           Tue 15 Apr 2025 00:11:08 +0000
ROA not after:            Tue 20 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff5::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4e:d9:a4:73:f0:f2:53:55:09:c1:96:c0:e2:a0:04:d7:9c:9e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 15 00:11:08 2025 GMT
            Not After : May 20 23:59:59 2025 GMT
        Subject: serialNumber=8de48b413d5d06438a5cab5cbbd7a83ec2d27ca14d1103e22f4d8359f41f3ada, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4f:90:5e:4a:7f:52:a1:cb:cd:fe:16:4c:2c:
                    ce:06:e7:8f:3a:c6:96:2f:71:b4:de:74:92:a5:75:
                    d5:ff:32:59:fb:ca:4e:70:de:6b:00:e3:0c:d4:82:
                    a4:9f:e6:ab:59:6c:c3:7d:88:cc:ba:20:03:c8:74:
                    d4:18:a7:40:90:77:23:dd:2f:cd:57:be:3b:19:d2:
                    79:15:be:7c:25:0b:f1:37:1d:79:cc:d6:e2:e9:5f:
                    63:ee:29:1a:3d:e8:5f:7a:4e:bb:83:5b:15:a4:34:
                    ba:45:c1:05:d2:a0:e1:31:34:c4:42:d5:f1:9d:85:
                    fc:7c:03:97:e9:99:6a:fc:4b:64:64:b9:6c:26:8f:
                    11:c2:4b:bd:18:19:36:d3:9f:e3:1e:bb:60:44:1a:
                    bc:be:21:c1:0f:fe:d6:21:14:51:09:c3:9e:47:d2:
                    ce:00:0c:36:24:f9:02:0e:60:c9:01:e0:58:f7:d7:
                    42:d4:96:69:d6:80:10:07:14:7a:9b:50:62:66:99:
                    b3:3f:f2:25:35:ce:96:e2:1f:ba:13:17:58:74:0b:
                    34:2e:0d:e3:d8:c6:ed:a1:83:41:3e:f3:07:ef:b0:
                    52:97:55:2f:05:f1:fe:55:a6:af:88:80:f7:37:11:
                    16:9b:65:b3:2d:d2:14:bf:08:c8:25:c2:d4:41:12:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:85:81:3C:D1:72:0D:23:8C:E1:D1:1A:9F:4C:4C:BE:89:5F:61
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/800c9a74-7f0a-498d-9672-65112aba8401.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff5::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:b2:03:72:c2:31:ce:4e:e6:5c:bd:12:f9:19:8e:81:fc:82:
         84:e6:d4:de:9c:4f:fd:84:49:61:1e:da:94:d9:da:51:14:ef:
         88:02:a4:86:19:a1:8b:9b:15:81:ac:81:49:be:b6:17:61:2b:
         58:21:ec:62:c7:7c:f0:bb:59:ec:47:27:c7:f6:3b:17:50:52:
         d9:a1:45:ad:e5:49:ea:57:8e:47:d0:32:c3:96:91:de:9d:80:
         ab:62:b2:f3:03:47:c5:b8:df:de:8a:8c:a8:31:b7:fd:c4:99:
         4c:e5:96:38:b8:31:00:cc:62:59:1a:ce:d4:a2:6d:7e:2d:32:
         8c:9c:73:ec:79:96:be:19:c5:8b:f3:55:a7:5f:a8:96:0f:7b:
         45:1b:81:ab:c4:ab:9c:02:10:ce:9a:66:f9:89:93:16:9f:0b:
         03:c9:a0:b6:31:05:85:13:e1:0e:9d:24:b0:cd:dc:8d:71:02:
         ce:e3:97:8e:be:35:72:96:0a:33:cf:c4:67:39:10:05:1b:07:
         e7:58:8e:74:08:9f:b1:0a:fa:9c:bf:f5:e4:d3:81:01:1c:04:
         b8:4a:54:6e:fb:56:66:70:41:f8:17:63:f8:04:26:27:35:e0:
         04:14:61:79:17:f5:7b:4a:08:4b:8b:fd:d2:9f:9c:4f:e5:2c:
         1f:e9:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----