Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa
File:                     ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa (raw, json)
Hash identifier:          bVXl68HI3pG5630ujOmQR6IKAkG9NSG2peEDR8LQxRc=
Subject key identifier:   C1:2E:33:01:8D:C4:A2:9D:FC:81:05:F8:57:21:9C:E1:BD:C1:18:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A0BD3C19DA5AAD1859C986EE89BEF405B6F820D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa
Signing time:             Fri 28 Mar 2025 15:00:23 +0000
ROA not before:           Fri 28 Mar 2025 15:00:23 +0000
ROA not after:            Fri 02 May 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff6:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0b:d3:c1:9d:a5:aa:d1:85:9c:98:6e:e8:9b:ef:40:5b:6f:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar 28 15:00:23 2025 GMT
            Not After : May  2 23:59:59 2025 GMT
        Subject: serialNumber=86ff1ba7f37c07ea49679b2e542eb40e56d1ceb6b770caca63ddb18febe03b1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:84:dd:b2:27:cf:e2:62:ca:f0:50:c0:36:
                    76:08:00:70:38:5a:83:1c:9b:f2:6d:26:9b:f2:36:
                    0a:f7:bf:b5:54:f9:e6:e0:8f:57:0f:84:22:48:7d:
                    52:bf:ef:64:5a:bf:26:bc:9e:3a:ae:56:17:77:78:
                    d2:db:ea:3b:0c:7c:d6:78:04:56:a2:35:ae:6e:08:
                    06:66:e5:ce:e8:3d:d2:1e:ea:ee:6f:b3:25:3c:d8:
                    94:91:78:50:da:68:b0:4c:8f:48:a2:1b:06:7c:a1:
                    b0:a5:99:3e:d8:9c:db:1d:ea:5e:e0:57:83:4b:18:
                    6f:c5:d8:6e:91:52:6d:ac:b8:72:22:71:d7:32:96:
                    3f:2c:40:b1:03:c9:f0:8d:a6:ee:f7:b6:9d:27:71:
                    69:22:3e:c3:a9:46:1c:52:18:61:72:23:c9:d7:d0:
                    43:26:9b:68:d9:7c:c6:dd:a8:09:f2:53:69:b9:b3:
                    af:31:c7:86:64:10:25:c1:c9:bd:0a:ae:c2:38:33:
                    e5:2a:b6:5e:93:2f:f0:29:ee:55:0e:60:85:1b:38:
                    d2:f4:7e:1f:de:a5:a7:5c:2f:fd:e4:44:9b:d1:50:
                    c4:2a:91:ba:58:12:5f:17:2f:36:1b:70:d5:35:01:
                    cd:62:40:19:9d:76:0e:12:3e:c7:44:c1:b3:f3:e4:
                    29:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:33:01:8D:C4:A2:9D:FC:81:05:F8:57:21:9C:E1:BD:C1:18:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba0ecf03-8344-40b3-b6e9-02cbee7fa1f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff6:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:50:fb:d1:52:9b:7e:aa:7e:58:10:9d:a3:4a:8b:68:fe:
         e1:ff:bc:e7:1d:37:97:3e:28:d3:d5:2f:53:6b:39:d1:1b:35:
         e4:62:d2:4c:ab:b1:54:97:43:5f:95:4e:22:5f:d2:6c:f1:a8:
         83:2d:2c:98:f5:9d:8e:7c:af:65:58:9e:6e:52:ef:9e:1e:4e:
         3b:cf:d9:02:38:8c:c8:d4:98:e2:ae:0e:50:09:da:66:70:81:
         07:db:7e:36:a5:e1:2d:29:de:e4:d6:6a:39:31:3f:a5:36:fa:
         7e:e7:e4:69:86:f1:9e:0b:3b:31:dd:4e:91:92:00:10:b7:78:
         7b:77:7f:75:a6:0f:8a:9b:92:45:1c:73:7d:ee:fb:d0:90:3d:
         54:73:1b:ad:4d:6f:85:9e:0b:38:a9:b0:73:33:79:2d:cb:db:
         7c:02:c3:84:ee:79:1e:b2:b5:cc:06:49:fc:87:3e:8f:64:f7:
         34:4f:96:50:27:9e:39:14:6a:38:97:a1:c0:c8:49:13:55:1a:
         d0:71:74:ac:64:2a:cd:65:3b:37:27:71:21:14:89:96:d1:75:
         55:45:71:bf:ab:3d:7b:b9:17:21:a6:60:d0:09:b0:d5:2e:b0:
         42:14:b6:7c:32:5e:80:df:e4:dd:81:5f:3c:95:c3:1a:d2:d3:
         82:93:82:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----