Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa
File:                     8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa (raw, json)
Hash identifier:          aSNCILMyV9q1C9CC7puAmboT976c5U1kP6NbtLKqeBI=
Subject key identifier:   2B:03:B8:34:DF:CC:9C:17:99:CC:6C:5E:89:0C:1B:1C:B6:FD:12:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16387D345EF4569E73C1D67DBBAE5BCA81EE77C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa
Signing time:             Fri 11 Apr 2025 00:11:10 +0000
ROA not before:           Fri 11 Apr 2025 00:11:10 +0000
ROA not after:            Fri 16 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:38:7d:34:5e:f4:56:9e:73:c1:d6:7d:bb:ae:5b:ca:81:ee:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Apr 11 00:11:10 2025 GMT
            Not After : May 16 23:59:59 2025 GMT
        Subject: serialNumber=c7e5e07f7579eb6582939e33b7de73ea290a11105e3c6010604606596d7df45a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7e:da:f3:0c:a3:b8:69:53:ad:d1:0b:f1:89:
                    54:8c:7a:6d:74:01:0b:23:a3:0f:0d:c4:c7:7c:a7:
                    a4:7b:f4:dd:31:95:55:08:d3:03:a9:54:c4:88:cc:
                    17:d4:57:ad:5e:71:7e:2d:e4:ef:67:21:62:45:3d:
                    53:5d:c6:18:e2:74:7b:de:5e:34:ee:e1:b0:28:59:
                    e7:81:e2:be:b2:fe:e0:d4:eb:1b:16:58:15:10:f7:
                    9a:43:fc:6f:59:cd:5a:06:22:74:92:9a:9d:16:91:
                    9e:88:e3:4f:5d:81:c4:17:29:8b:5e:2e:b3:5b:f3:
                    43:1c:6b:1d:9c:c5:7b:bd:58:d8:16:2f:d8:7e:e9:
                    a1:ec:f8:04:3b:c2:54:43:1a:51:3b:44:15:81:ee:
                    47:0f:90:4e:0c:04:ad:d8:be:b6:bd:10:15:ac:88:
                    d4:78:ee:5e:66:ab:59:15:e7:b9:93:50:06:7c:0b:
                    e8:eb:5e:0a:78:1e:88:f2:42:ab:cd:e2:03:dc:7b:
                    32:76:d0:12:69:f8:b0:18:8e:b6:e3:16:d2:61:6d:
                    28:5e:7c:37:fd:5c:d7:77:af:96:2a:a3:e7:d7:27:
                    f6:ac:4a:17:25:a5:ec:c5:cd:40:5c:d9:fb:f8:0e:
                    a3:b3:6d:37:05:dc:a1:84:f8:8c:c7:59:4e:b8:d2:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:03:B8:34:DF:CC:9C:17:99:CC:6C:5E:89:0C:1B:1C:B6:FD:12:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b6616d1-d87c-4d15-b298-8cf39a2dfb3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:68:86:d3:c0:df:e7:79:02:92:f7:6c:81:b3:46:26:22:
         25:e9:5e:84:8f:7c:2f:57:5f:a0:93:1f:f7:17:9c:5c:f1:cd:
         06:52:74:d0:14:21:1d:05:eb:04:6f:91:8f:7d:fa:ab:d5:10:
         df:c4:75:0a:63:ce:57:d7:05:1b:9d:12:8a:52:cd:43:91:b0:
         8d:9b:48:54:61:80:4c:98:86:8b:b3:27:50:9d:96:f4:01:93:
         7e:82:e1:6f:28:f5:6c:61:8a:ff:66:e4:f7:b6:af:40:6e:4b:
         ce:19:10:46:53:d4:19:e1:d4:0e:12:b7:b0:cb:44:7e:61:e7:
         4f:13:73:bf:08:56:73:8a:5d:b4:62:8d:25:20:2c:c8:53:a8:
         20:a6:de:86:91:b9:76:e9:c9:1e:99:83:22:8e:d6:6b:d7:53:
         70:59:31:ff:28:e0:58:cb:c0:62:3f:26:46:8a:24:22:f2:14:
         2e:67:e7:e4:f3:fb:aa:40:31:c0:87:b6:00:93:31:7b:c4:0f:
         82:85:9a:af:7f:b6:7f:56:90:68:3c:98:65:4e:44:de:f1:a6:
         b0:e0:94:76:da:d1:25:37:58:e8:82:05:2d:cf:19:e6:e7:07:
         46:37:66:85:ff:c1:cb:3e:8c:ab:fd:5a:dc:5e:69:f5:92:d7:
         5a:7a:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----