Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115124d3-bc8d-4a8f-9911-18d7672349be.roa
File:                     115124d3-bc8d-4a8f-9911-18d7672349be.roa (raw, json)
Hash identifier:          5y7ckt9nqz1W521jKaJoFMErcF1PIYVeSizcuI/Gnqg=
Subject key identifier:   0D:9F:D4:B2:28:9E:CC:F0:F3:2A:A1:B6:49:49:39:B0:2A:DF:97:EA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4209CD4FE0F7054BDD1F34A778D09056A906ED54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115124d3-bc8d-4a8f-9911-18d7672349be.roa
Signing time:             Wed 15 Oct 2025 15:21:23 +0000
ROA not before:           Wed 15 Oct 2025 15:21:23 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.80.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:cd:4f:e0:f7:05:4b:dd:1f:34:a7:78:d0:90:56:a9:06:ed:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:21:23 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=32af6f30c76ac6b5ba7ed8fe4f5adc3da4e72f7ea0ea836c2f533e5c72346c1f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:2d:32:c2:b1:c9:cb:8f:7d:3f:5a:d6:fa:
                    d0:33:cd:40:ca:8b:d9:67:30:1c:b7:1b:98:6a:59:
                    54:b3:9f:86:0b:79:11:27:00:54:52:b4:11:17:17:
                    72:5f:e3:79:70:9a:6f:93:cb:c4:b4:17:26:7c:de:
                    78:d1:f5:10:34:48:47:f2:5f:16:e3:5f:03:a2:d7:
                    c5:16:66:21:fa:c5:2f:aa:c1:35:ab:de:ef:90:e4:
                    65:b3:58:ea:f8:d9:9f:80:e5:4f:1f:1e:5e:44:88:
                    4d:3b:13:ea:58:cc:a4:7a:87:a4:82:cd:50:d8:4f:
                    80:27:0e:df:4a:89:3d:f4:be:9d:41:cf:23:e0:35:
                    a3:50:af:c9:93:bb:d1:ad:ec:59:39:36:d0:99:03:
                    dd:4d:d7:9b:4a:54:0f:84:7e:cb:c8:ab:3f:3b:2c:
                    06:4e:7d:bb:67:a7:2e:68:07:85:f6:d8:bb:3a:bd:
                    55:f8:5e:52:50:d3:c5:57:07:19:52:f5:c8:8d:52:
                    2f:fd:df:f6:33:79:f7:20:98:66:24:de:10:1f:20:
                    de:87:63:de:68:78:2b:8c:34:ea:9d:3e:98:ab:94:
                    22:ef:70:d8:b7:44:2d:f1:07:ff:3b:6b:18:66:18:
                    34:4a:7f:44:45:e8:79:f7:45:86:b7:66:ae:a8:ca:
                    a7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:D4:B2:28:9E:CC:F0:F3:2A:A1:B6:49:49:39:B0:2A:DF:97:EA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115124d3-bc8d-4a8f-9911-18d7672349be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:29:1b:1b:0d:00:3a:a5:dd:fa:4e:cd:38:ea:2c:40:41:2a:
         e3:38:de:de:35:5c:4c:2a:a0:bd:bd:e2:00:7b:30:39:dc:35:
         d0:75:31:33:21:e6:7e:75:eb:9d:42:0c:91:1b:3a:a3:e2:a6:
         3d:81:b9:d3:c8:8a:de:b8:b8:5a:95:f4:2d:68:a1:f8:f2:2a:
         98:2f:26:1f:04:cf:a7:78:54:8a:c5:74:1e:ad:0b:7a:8e:b3:
         35:ee:5b:09:69:64:d4:c4:b5:8f:c0:80:46:d7:c5:31:92:37:
         a6:91:92:9e:b7:c4:1a:c4:07:5d:2e:41:2f:c4:b0:f8:44:84:
         e3:98:ab:56:7c:90:0d:1a:6c:66:6c:23:25:05:18:70:ca:dc:
         90:72:31:ca:b2:fd:18:8b:6d:e5:99:ee:4f:c6:4a:c4:65:f4:
         6f:82:56:2e:50:3f:a5:85:1d:95:05:59:cd:52:3f:14:e2:22:
         78:c5:df:f8:6f:ae:64:c7:91:dd:4b:c7:e9:ad:f6:8b:31:c2:
         18:08:32:f4:14:60:16:83:f7:b8:89:9b:23:51:f5:79:e4:7d:
         5b:95:3b:4f:e5:a2:9d:6e:1a:62:72:1e:b7:2d:89:bf:2a:97:
         32:d8:4f:06:c1:a7:61:38:91:70:7c:6b:6d:3d:37:b3:37:18:
         62:e7:da:c0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQgnNT+D3BUvdHzSneNCQVqkG7VQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTUyMTIzWhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMmFmNmYzMGM3NmFjNmI1YmE3ZWQ4ZmU0ZjVhZGMzZGE0
ZTcyZjdlYTBlYTgzNmMyZjUzM2U1YzcyMzQ2YzFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDB1C0ywrHJy499P1rW+tAzzUDKi9lnMBy3G5hqWVSzn4YL
eREnAFRStBEXF3Jf43lwmm+Ty8S0FyZ83njR9RA0SEfyXxbjXwOi18UWZiH6xS+q
wTWr3u+Q5GWzWOr42Z+A5U8fHl5EiE07E+pYzKR6h6SCzVDYT4AnDt9KiT30vp1B
zyPgNaNQr8mTu9Gt7Fk5NtCZA91N15tKVA+EfsvIqz87LAZOfbtnpy5oB4X22Ls6
vVX4XlJQ08VXBxlS9ciNUi/93/YzefcgmGYk3hAfIN6HY95oeCuMNOqdPpirlCLv
cNi3RC3xB/87axhmGDRKf0RF6Hn3RYa3Zq6oyqdHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDZ/UsiiezPDzKqG2SUk5sCrfl+owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzExNTEyNGQzLWJjOGQtNGE4Zi05OTExLTE4ZDc2NzIzNDliZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjVlAwDQYJKoZIhvcNAQELBQADggEBAMgpGxsNADql3fpOzTjqLEBBKuM4
3t41XEwqoL294gB7MDncNdB1MTMh5n51651CDJEbOqPipj2BudPIit64uFqV9C1o
ofjyKpgvJh8Ez6d4VIrFdB6tC3qOszXuWwlpZNTEtY/AgEbXxTGSN6aRkp63xBrE
B10uQS/EsPhEhOOYq1Z8kA0abGZsIyUFGHDK3JByMcqy/RiLbeWZ7k/GSsRl9G+C
Vi5QP6WFHZUFWc1SPxTiInjF3/hvrmTHkd1Lx+mt9osxwhgIMvQUYBaD97iJmyNR
9XnkfVuVO0/lop1uGmJyHrctib8qlzLYTwbBp2E4kXB8a209N7M3GGLn2sA=
-----END CERTIFICATE-----