Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa
File:                     9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa (raw, json)
Hash identifier:          oUEU8gYNao6Vfxig4Fs4c5fHkkZgnMGKocX1967Z+zA=
Subject key identifier:   AE:3A:E8:07:D7:03:1A:E5:5E:1B:9A:FF:7C:64:19:46:AB:AC:05:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4D8E46C0AE8DA3B216008054025B76E2A7536065
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa
Signing time:             Mon 31 Mar 2025 15:30:26 +0000
ROA not before:           Mon 31 Mar 2025 15:30:26 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f29:8000::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8e:46:c0:ae:8d:a3:b2:16:00:80:54:02:5b:76:e2:a7:53:60:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 31 15:30:26 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f09bc25bd017c3530339461d7b2fd344c214b5fa9e7822f8a1e01cf31b47d1c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:34:51:d3:f4:81:8e:28:66:b3:6e:68:81:
                    46:96:30:c7:31:17:fe:eb:4c:7e:0c:05:55:c7:c4:
                    23:59:25:c0:16:64:96:c4:d6:d4:a6:ba:76:53:54:
                    76:38:36:12:fb:9c:7b:31:e1:99:1b:a1:e8:29:7d:
                    0f:1b:7a:52:80:ae:bc:0b:db:a5:a0:d8:e4:55:39:
                    4e:8b:22:f2:2c:aa:2e:e1:33:11:97:f3:9e:3c:d5:
                    c6:5d:51:e9:a7:69:10:ec:b5:65:c5:b8:f8:9e:83:
                    96:d9:1c:04:9b:1f:c0:3b:1e:74:4c:b1:bc:69:c3:
                    4b:0a:32:fb:41:4f:00:99:ef:34:38:ec:4a:cf:3e:
                    b9:e1:00:e4:c8:cb:86:d6:a9:b5:35:0b:c6:f6:1b:
                    c3:19:70:e5:e1:52:a9:c0:35:51:7e:71:1e:86:3a:
                    dd:70:e4:72:73:25:33:01:d4:2b:a9:e2:51:44:c3:
                    16:66:91:cb:2a:3f:c8:b7:b2:e6:ea:fb:80:08:ad:
                    00:3f:a4:dc:e4:ec:58:65:e0:7e:7c:b6:af:bf:0a:
                    0f:c9:fd:ce:61:64:13:32:74:cd:da:99:34:dc:4b:
                    20:4a:ef:d9:87:27:13:9c:e6:9d:2f:0f:bf:4f:18:
                    a6:c3:10:3d:ef:74:72:cb:ff:71:4d:97:99:d0:c4:
                    d0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:E8:07:D7:03:1A:E5:5E:1B:9A:FF:7C:64:19:46:AB:AC:05:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c499ccf-316f-41b0-87af-18c8e8dc8e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f29:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:28:cd:81:7b:13:9f:42:a8:34:34:af:4c:cd:0a:df:3c:
         72:4c:94:e7:39:44:1c:4e:f3:af:cd:d8:61:8d:0a:8a:72:81:
         76:5a:d2:94:51:c9:f3:98:38:20:c6:36:61:c3:82:d4:44:6f:
         4e:b8:a9:de:52:36:ba:75:28:df:e2:4b:db:c8:4a:b9:18:86:
         b3:80:c8:3f:9e:f4:33:22:a1:bd:ea:93:b3:f3:5d:d3:da:7a:
         f5:4c:d6:f3:a3:dd:a1:4a:ec:33:99:e3:fa:ec:80:c2:fc:c4:
         49:09:5b:bf:f9:c4:63:5f:aa:1b:d7:fc:c3:67:d7:36:34:62:
         f8:c1:ed:b9:4a:52:c3:f2:b7:b0:55:9a:3f:2d:69:60:58:6a:
         f6:e0:8d:43:5c:6e:d5:02:49:2e:e8:46:7c:bb:58:bc:45:17:
         a5:d9:0f:c2:5b:5e:b8:12:45:c2:b8:4d:27:e5:25:20:a2:10:
         77:a9:f4:49:dc:95:f2:41:e3:f7:28:d5:9a:8c:4b:80:2b:16:
         0d:7b:60:8c:be:ec:60:88:fb:af:32:09:3a:02:5c:13:9b:fd:
         da:1c:3b:89:78:7c:67:e9:aa:0b:3a:3e:b2:1d:65:6c:83:0d:
         70:42:0e:48:4c:09:0b:15:ca:c6:89:ff:64:70:08:12:77:e2:
         00:5f:3b:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----