Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a7f76be-21f1-4887-aacd-fe583c9fdfa3.roa
File:                     1a7f76be-21f1-4887-aacd-fe583c9fdfa3.roa (raw, json)
Hash identifier:          FzcG/tQzu6qmMsu8DDlmdaH8jaR0THpJcFU4NrBKvJw=
Subject key identifier:   2D:67:83:9B:4C:E6:1A:42:E1:28:91:4E:24:B9:C0:B0:B6:C6:24:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4BFC925BEA479138EB78709A3316042E84BAF1DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a7f76be-21f1-4887-aacd-fe583c9fdfa3.roa
Signing time:             Tue 14 Oct 2025 19:52:10 +0000
ROA not before:           Tue 14 Oct 2025 19:52:10 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:fc:92:5b:ea:47:91:38:eb:78:70:9a:33:16:04:2e:84:ba:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 19:52:10 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=8933aaf88eecec34f6b15875260b4c99f5527a57c32ece9e485b6a62d68f383e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:74:10:75:bb:26:97:ad:b4:e7:56:21:c3:13:
                    15:f4:43:f9:0b:bd:cc:6e:4a:0b:45:44:4e:ce:47:
                    9a:17:ba:ed:53:d2:11:04:d1:e8:6c:31:68:a1:88:
                    6d:52:74:1c:c0:10:72:e0:e1:0b:80:3d:db:c0:3e:
                    fe:ab:59:7a:33:8b:ea:3b:df:36:a9:cc:f8:cd:c9:
                    2d:97:bf:0c:bf:92:ad:76:91:d7:b5:3b:73:52:54:
                    f3:27:b7:7c:14:10:38:72:99:cb:bb:6a:82:0b:73:
                    40:94:76:98:09:8c:76:1e:e2:ec:ff:13:de:9c:eb:
                    95:c5:1b:f2:d7:25:16:81:c8:2e:68:ec:3e:22:9b:
                    d6:4e:c8:02:9c:89:72:47:f8:65:c4:27:8e:5f:08:
                    63:20:b2:59:6e:e6:73:04:51:14:b1:64:9d:3f:b9:
                    d2:e7:44:c4:41:2f:06:b5:d6:a3:7a:52:d9:cb:0a:
                    5e:f8:56:4c:f8:da:e3:9e:be:cb:4c:f6:cb:81:6d:
                    87:a7:b8:be:fe:d0:5a:36:1d:51:9b:b1:0b:37:61:
                    ab:91:31:d7:7b:2b:a9:2b:44:8c:17:16:b4:cc:18:
                    40:b5:3e:92:f8:57:a8:9f:9d:c9:ec:a3:76:7f:4d:
                    4a:e6:1f:b9:3d:c1:51:18:6f:ea:ff:a0:17:0c:89:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:67:83:9B:4C:E6:1A:42:E1:28:91:4E:24:B9:C0:B0:B6:C6:24:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a7f76be-21f1-4887-aacd-fe583c9fdfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1d:90:16:08:fe:7a:06:b5:23:86:6c:b8:68:30:64:47:93:
         ad:47:80:aa:8f:18:b3:a3:f1:b1:db:87:69:35:6d:c6:0b:07:
         d9:54:3a:99:d6:62:65:e2:6b:68:70:56:c5:a1:40:03:69:60:
         5c:03:5c:d1:39:f4:6f:1a:9e:5b:86:c3:72:d5:99:79:90:4c:
         d8:0b:a5:e7:ef:1c:59:c1:d1:e8:ee:99:4e:ec:99:48:a7:26:
         a8:fa:27:c1:fc:01:f9:42:92:ce:e7:86:f0:74:9e:33:35:31:
         37:23:d8:43:f1:da:7f:dc:63:3d:81:74:50:53:9e:3b:a1:59:
         0b:2f:02:04:6a:da:2b:67:9e:4b:9f:80:2a:aa:39:50:ea:75:
         91:87:4c:1f:72:4a:db:2f:73:0c:21:29:33:79:ba:35:b1:a8:
         d5:10:7f:a9:4b:b9:2a:a4:ec:c2:fc:aa:64:51:26:d4:29:df:
         58:72:51:39:37:f9:23:88:6b:19:af:75:dc:70:68:29:56:13:
         f1:82:cb:da:cd:65:d8:5d:21:60:11:22:91:f3:a6:bc:a4:ba:
         f2:7a:74:5d:96:4b:13:49:b7:f9:ec:a2:b4:7d:d3:5f:84:5a:
         d1:8e:d0:cc:61:22:37:36:90:dc:08:e4:b2:de:d5:c1:64:40:
         41:69:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----