Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0949ddfb-683d-4786-8ed0-fc7daa1a4f98.roa
File:                     0949ddfb-683d-4786-8ed0-fc7daa1a4f98.roa (raw, json)
Hash identifier:          ajxEGtMdBXNm2XLXgS2eTGsheFn2qk/JFCO0t5eANtI=
Subject key identifier:   DC:32:43:C9:37:D1:75:B5:F3:6D:0F:52:AA:0B:97:6A:23:A5:B9:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16D439C8F908E66E20BD0F233B10DB08B7155525
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0949ddfb-683d-4786-8ed0-fc7daa1a4f98.roa
Signing time:             Tue 14 Oct 2025 22:42:44 +0000
ROA not before:           Tue 14 Oct 2025 22:42:44 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:39:c8:f9:08:e6:6e:20:bd:0f:23:3b:10:db:08:b7:15:55:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:42:44 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=54f3333de9acf2f65650d4d101f56060a24f334bfcb645a9a640283981d6affe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:a9:99:92:e1:2a:0b:20:8c:22:5a:0c:ae:
                    da:67:96:4c:bf:c1:93:f3:39:1f:88:d7:b3:a2:aa:
                    01:fe:ec:c3:ce:20:78:56:1e:52:a2:14:a5:d1:d9:
                    9f:09:12:64:f5:e5:f7:6c:8f:c5:5f:a0:3d:1a:95:
                    5c:ca:8c:15:26:a2:61:ce:e7:26:f9:7b:ff:3a:af:
                    f3:7c:dc:17:26:03:b8:50:03:30:1b:99:03:3f:b5:
                    42:6a:1f:e3:b4:37:7b:56:e0:ab:60:3c:4a:17:0d:
                    c3:59:d6:4b:7b:cb:c2:14:1d:2c:df:18:52:5b:2f:
                    2d:f7:14:69:cb:5b:e5:61:c3:04:15:80:b1:9e:c2:
                    e2:5d:cd:82:f0:94:01:26:2b:04:bd:b5:6c:88:c1:
                    da:21:03:85:07:b1:b9:dd:12:67:32:2d:37:e2:03:
                    fb:4e:58:f3:06:69:45:c8:e6:85:eb:a7:44:82:01:
                    bb:86:51:7e:80:7f:c4:77:5f:54:80:f5:22:e9:4b:
                    4a:74:14:50:ea:5f:8a:ca:d3:5a:a2:43:f1:b1:28:
                    7f:10:df:84:06:ef:d9:87:be:d3:01:d5:ee:ff:f0:
                    53:78:f1:7a:b8:9b:f6:c4:4d:fa:c6:dc:76:6c:0d:
                    2a:a8:22:82:02:8f:47:77:4b:bc:d3:ca:9f:7f:4f:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:43:C9:37:D1:75:B5:F3:6D:0F:52:AA:0B:97:6A:23:A5:B9:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0949ddfb-683d-4786-8ed0-fc7daa1a4f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:5c:21:35:fb:fb:87:ca:b5:19:1b:ed:3f:cc:57:06:b4:68:
         dc:c6:9f:a5:ef:34:4f:42:70:00:fe:15:bf:44:8e:f3:9f:f1:
         12:7a:fd:90:3e:db:e9:50:e4:b0:47:06:06:03:cf:d5:ca:a8:
         3f:ba:db:4f:76:c3:7d:3e:9d:ce:1b:3f:e0:70:4b:85:42:27:
         ac:5f:1d:24:4a:51:e2:75:75:50:3e:c2:34:76:65:9d:2a:7f:
         d3:d4:82:df:9c:92:7d:2d:a9:9d:96:92:18:8f:e9:3f:ea:af:
         5c:e2:bd:63:02:b4:61:42:94:d9:eb:a6:16:25:66:94:40:29:
         4a:53:6d:31:c5:06:e5:ef:38:0d:2b:e9:2d:d7:02:70:86:a2:
         1c:a5:19:7b:ec:5c:30:b7:8e:4a:89:72:60:df:91:cc:70:ba:
         00:13:20:08:68:bd:b8:1c:5d:9e:b4:6d:d1:8b:d8:83:43:2f:
         a3:24:a4:7e:f8:0d:a9:cf:72:cc:ca:5d:18:a7:a4:78:66:be:
         0e:9e:86:e6:cb:06:f1:85:d9:62:eb:8d:94:9b:0b:51:09:ca:
         53:61:4b:06:da:52:40:50:93:69:24:4a:f9:83:2b:90:da:87:
         c2:24:81:fd:5e:73:b2:13:9c:92:54:2d:9f:00:f6:69:3e:41:
         a9:43:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----