Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c7b8e56-a835-46db-89bc-8efa47ef242d.roa
File:                     0c7b8e56-a835-46db-89bc-8efa47ef242d.roa (raw, json)
Hash identifier:          Wab3yT7Jozo63zmmdll9vW1YJkzFShSRZ/IDfUw4O0U=
Subject key identifier:   B0:DA:8C:D6:98:32:C5:6B:F9:AD:BF:68:D1:7C:5D:9B:0E:4D:72:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       694CA5E838434E24299097E8AB7128905ACF8DE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c7b8e56-a835-46db-89bc-8efa47ef242d.roa
Signing time:             Wed 15 Oct 2025 18:12:45 +0000
ROA not before:           Wed 15 Oct 2025 18:12:45 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4c:a5:e8:38:43:4e:24:29:90:97:e8:ab:71:28:90:5a:cf:8d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:12:45 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=5623a4eb49599601d4ecbfda06dc1950829792efa90b8068b920f53db7e6cc36, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:ba:5b:74:b1:e8:ee:86:21:c9:2e:16:c7:
                    5f:7d:f7:13:2b:31:7c:40:21:12:d7:ca:57:c3:f4:
                    84:90:f3:27:f6:22:94:ba:4a:07:a9:84:3d:8f:12:
                    7e:3d:e1:ef:81:0d:cb:1d:36:d9:a5:7d:b8:3c:1a:
                    41:2a:22:e0:29:b9:22:4b:02:2d:dc:18:a5:17:68:
                    18:05:46:9a:d4:86:7d:37:ad:37:e7:da:37:53:5c:
                    17:45:ab:26:5f:46:78:b8:f1:14:74:2a:37:c1:23:
                    a8:be:9e:62:06:58:a2:a4:ac:b7:d8:9c:fe:32:ef:
                    ce:74:a5:79:a6:4f:27:65:94:f4:2b:0b:bd:5e:16:
                    eb:20:b3:c6:08:7d:a9:41:a7:cd:0b:96:ca:92:49:
                    e9:84:73:00:69:f3:3e:d4:b9:82:24:43:91:84:ea:
                    5a:be:ab:5a:54:7c:8e:d1:97:a2:a9:e2:11:71:44:
                    cb:a4:84:14:bd:fd:b9:c7:50:4b:a6:49:b5:7f:9a:
                    05:a9:b4:5e:35:e7:89:b8:de:49:d1:48:88:2e:7d:
                    2d:98:a4:94:03:5b:6c:b2:43:47:74:b7:76:e3:05:
                    3a:7e:20:f4:fa:bd:fa:13:df:13:38:b8:97:ad:e6:
                    75:80:93:81:63:71:17:7d:1e:4d:16:0e:47:af:e6:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DA:8C:D6:98:32:C5:6B:F9:AD:BF:68:D1:7C:5D:9B:0E:4D:72:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c7b8e56-a835-46db-89bc-8efa47ef242d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:63:a0:14:8d:6b:f9:e5:05:66:f9:55:38:e1:5e:fe:62:
         a7:2a:c7:53:0d:7d:a4:0d:67:1d:ec:ef:67:82:56:ec:58:ec:
         ca:ea:69:bd:6e:0c:a1:e1:08:44:b3:25:2d:fe:db:b0:95:e4:
         26:23:4f:13:56:6b:7c:15:42:f3:c8:08:9e:da:aa:ee:6c:8b:
         8b:99:be:bf:77:c6:c3:9f:ae:5a:58:86:82:03:9c:99:22:64:
         95:5a:1f:2a:49:c5:a7:f7:b2:6d:a6:da:5a:7b:d3:e1:e7:de:
         c5:f9:1e:d2:e3:bc:95:76:bf:77:d1:9c:7c:51:8f:47:99:f3:
         4b:4a:7b:2b:b9:59:0d:e4:ff:bb:22:2e:ba:98:6f:a0:60:ab:
         b7:39:66:71:13:15:c3:4f:d3:87:72:d5:45:37:57:19:63:41:
         17:f4:60:4a:74:4b:2b:31:97:b2:c9:69:7e:83:9e:4b:36:61:
         d2:a5:d2:18:f0:0c:89:a3:8c:a8:e4:85:c8:14:c3:08:43:7e:
         12:47:0d:0e:73:dc:72:d5:89:d1:9b:b9:7e:c0:5c:f5:38:da:
         81:94:12:99:ec:81:4e:fe:53:2e:e3:68:1f:ef:fe:60:15:b0:
         c6:57:41:c7:3a:dc:09:7c:19:17:22:b7:ca:7d:26:82:29:90:
         32:4f:f5:23
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaUyl6DhDTiQpkJfoq3EokFrPjekwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTgxMjQ1WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NjIzYTRlYjQ5NTk5NjAxZDRlY2JmZGEwNmRjMTk1MDgy
OTc5MmVmYTkwYjgwNjhiOTIwZjUzZGI3ZTZjYzM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUIbpbdLHo7oYhyS4Wx1999xMrMXxAIRLXylfD9ISQ8yf2
IpS6SgephD2PEn494e+BDcsdNtmlfbg8GkEqIuApuSJLAi3cGKUXaBgFRprUhn03
rTfn2jdTXBdFqyZfRni48RR0KjfBI6i+nmIGWKKkrLfYnP4y7850pXmmTydllPQr
C71eFusgs8YIfalBp80LlsqSSemEcwBp8z7UuYIkQ5GE6lq+q1pUfI7Rl6Kp4hFx
RMukhBS9/bnHUEumSbV/mgWptF4154m43knRSIgufS2YpJQDW2yyQ0d0t3bjBTp+
IPT6vfoT3xM4uJet5nWAk4FjcRd9Hk0WDkev5jjnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsNqM1pgyxWv5rb9o0Xxdmw5NctUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBjN2I4ZTU2LWE4MzUtNDZkYi04OWJjLThlZmE0N2VmMjQyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVk0wDQYJKoZIhvcNAQELBQADggEBAFGcY6AUjWv55QVm+VU44V7+Yqcq
x1MNfaQNZx3s72eCVuxY7Mrqab1uDKHhCESzJS3+27CV5CYjTxNWa3wVQvPICJ7a
qu5si4uZvr93xsOfrlpYhoIDnJkiZJVaHypJxaf3sm2m2lp70+Hn3sX5HtLjvJV2
v3fRnHxRj0eZ80tKeyu5WQ3k/7siLrqYb6Bgq7c5ZnETFcNP04dy1UU3VxljQRf0
YEp0Sysxl7LJaX6Dnks2YdKl0hjwDImjjKjkhcgUwwhDfhJHDQ5z3HLVidGbuX7A
XPU42oGUEpnsgU7+Uy7jaB/v/mAVsMZXQcc63Al8GRcit8p9JoIpkDJP9SM=
-----END CERTIFICATE-----