Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1486b7dd-c067-4f59-83a7-08aeaa29a948.roa
File:                     1486b7dd-c067-4f59-83a7-08aeaa29a948.roa (raw, json)
Hash identifier:          cuOWcCxu3Ira5kxw7E7IL8JI6lYiy0o6x3HEbT9v+es=
Subject key identifier:   B0:5C:F4:F7:6F:0C:8B:6B:1D:B1:60:06:13:E6:F0:9A:DD:3C:5E:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       02824772437DD982102D9317D665D1F63D4802E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1486b7dd-c067-4f59-83a7-08aeaa29a948.roa
Signing time:             Tue 14 Oct 2025 22:39:38 +0000
ROA not before:           Tue 14 Oct 2025 22:39:38 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:47:72:43:7d:d9:82:10:2d:93:17:d6:65:d1:f6:3d:48:02:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:39:38 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=8fa9dc03439cde6e5ce98efb05a8e3ccf90dcd03ddfb7337b075024a16b95d4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:e4:25:a9:05:01:9f:4b:d4:2e:ae:5b:89:
                    78:02:d1:38:80:cb:ce:8b:ed:15:07:f3:36:8c:0f:
                    fd:33:56:7f:21:5c:67:06:78:b5:17:fb:f4:26:89:
                    bb:52:ca:03:dd:5e:6b:0e:f2:0c:f5:5c:2c:e6:a8:
                    2e:c0:fa:48:5a:36:55:2d:d5:2e:2b:4d:d4:fe:ec:
                    00:0d:6c:29:a0:2e:b6:27:a6:fa:a3:e8:b3:c9:c8:
                    ed:d2:02:bf:ec:97:70:6f:16:4b:a9:9d:d1:4a:fc:
                    db:d9:dc:d9:03:95:a4:d7:58:5a:b1:84:a5:a5:4e:
                    bb:a2:a0:b6:f7:a0:f3:59:5c:8e:df:b1:89:16:3d:
                    62:fc:b3:9f:d3:bf:3e:43:23:1b:23:0d:f7:fe:25:
                    f9:cc:c2:a0:e4:cf:f3:fe:ff:76:fa:c4:fb:79:9d:
                    8f:01:64:33:06:60:8d:e0:15:3b:7f:aa:03:83:a8:
                    f5:ed:11:23:ad:fb:f4:60:23:72:a5:26:32:2e:6c:
                    78:62:9d:3c:11:55:84:df:97:5e:c0:61:4c:77:7c:
                    c4:33:51:cf:77:72:34:ec:c9:e3:a1:17:57:5b:b2:
                    1a:44:21:ba:f8:eb:fe:f2:85:5c:9f:05:70:3a:a6:
                    70:42:90:88:ff:ce:69:37:cd:58:ff:74:1f:8d:25:
                    14:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:F4:F7:6F:0C:8B:6B:1D:B1:60:06:13:E6:F0:9A:DD:3C:5E:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1486b7dd-c067-4f59-83a7-08aeaa29a948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:36:75:f5:fe:5c:48:d6:5e:5b:e0:dc:39:df:bd:3b:f5:fd:
         a7:3a:77:a4:29:95:8a:79:52:91:44:62:e4:d0:0c:dd:4c:88:
         ea:ec:33:d6:91:61:04:23:1c:03:a4:3c:6d:83:3d:d9:bb:7c:
         fa:a2:57:97:ed:94:3c:d4:d7:e3:b4:91:82:8c:dc:fe:21:0b:
         b3:aa:8f:d0:c4:8f:ef:db:b9:05:a0:97:02:5a:6c:94:f9:ab:
         79:86:be:7d:57:59:ce:fe:e5:b7:9a:c8:e7:93:7f:29:b0:5a:
         db:20:b5:99:e6:d6:27:8d:33:0c:0f:25:03:70:3c:ec:2b:89:
         03:bf:16:9a:71:f1:86:21:38:60:57:c2:fd:91:6b:cb:fb:03:
         f6:e4:9d:b0:3b:60:8c:3b:5e:71:9c:11:02:b5:43:b7:4e:c4:
         c7:67:70:7b:79:23:a9:e4:0e:eb:76:33:a2:d9:31:0f:6d:a7:
         89:2e:1c:10:82:4b:3e:6a:3e:2e:40:4b:cc:39:f4:c8:7a:29:
         ec:39:58:36:02:bb:2a:81:b4:3f:59:ba:c0:64:55:fd:65:dd:
         f6:74:fd:d1:59:35:8b:60:5d:22:d4:a7:0b:46:c5:57:70:2c:
         81:53:3f:29:39:70:5b:31:be:71:7f:3a:02:1c:f2:ff:cd:30:
         86:95:d1:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAoJHckN92YIQLZMX1mXR9j1IAuIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIzOTM4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZmE5ZGMwMzQzOWNkZTZlNWNlOThlZmIwNWE4ZTNjY2Y5
MGRjZDAzZGRmYjczMzdiMDc1MDI0YTE2Yjk1ZDRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDow+QlqQUBn0vULq5biXgC0TiAy86L7RUH8zaMD/0zVn8h
XGcGeLUX+/QmibtSygPdXmsO8gz1XCzmqC7A+khaNlUt1S4rTdT+7AANbCmgLrYn
pvqj6LPJyO3SAr/sl3BvFkupndFK/NvZ3NkDlaTXWFqxhKWlTruioLb3oPNZXI7f
sYkWPWL8s5/Tvz5DIxsjDff+JfnMwqDkz/P+/3b6xPt5nY8BZDMGYI3gFTt/qgOD
qPXtESOt+/RgI3KlJjIubHhinTwRVYTfl17AYUx3fMQzUc93cjTsyeOhF1dbshpE
Ibr46/7yhVyfBXA6pnBCkIj/zmk3zVj/dB+NJRThAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsFz0928Mi2sdsWAGE+bwmt08XtUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE0ODZiN2RkLWMwNjctNGY1OS04M2E3LTA4YWVhYTI5YTk0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVOowDQYJKoZIhvcNAQELBQADggEBAFA2dfX+XEjWXlvg3DnfvTv1/ac6
d6QplYp5UpFEYuTQDN1MiOrsM9aRYQQjHAOkPG2DPdm7fPqiV5ftlDzU1+O0kYKM
3P4hC7Oqj9DEj+/buQWglwJabJT5q3mGvn1XWc7+5beayOeTfymwWtsgtZnm1ieN
MwwPJQNwPOwriQO/Fppx8YYhOGBXwv2Ra8v7A/bknbA7YIw7XnGcEQK1Q7dOxMdn
cHt5I6nkDut2M6LZMQ9tp4kuHBCCSz5qPi5AS8w59Mh6Kew5WDYCuyqBtD9ZusBk
Vf1l3fZ0/dFZNYtgXSLUpwtGxVdwLIFTPyk5cFsxvnF/OgIc8v/NMIaV0Vk=
-----END CERTIFICATE-----