Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d523799-67f5-4753-8db9-0184ac765017.roa
File:                     1d523799-67f5-4753-8db9-0184ac765017.roa (raw, json)
Hash identifier:          qpDvlL4RDj+GZBTPm5E2XKKdVzJH3rHtgCTrAU3d/vM=
Subject key identifier:   C6:B4:39:34:8C:3D:64:16:BD:50:DE:29:A5:1D:B3:95:E6:8F:80:A6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76D69B8E570639B783ACC276342A532248850E5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d523799-67f5-4753-8db9-0184ac765017.roa
Signing time:             Wed 15 Oct 2025 18:11:20 +0000
ROA not before:           Wed 15 Oct 2025 18:11:20 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d6:9b:8e:57:06:39:b7:83:ac:c2:76:34:2a:53:22:48:85:0e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:11:20 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=8fe6bb0312f95f528537a16626e3a2f35c00884b838dff05aa6f8972df222f51, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:fa:a9:a0:ed:a5:fd:c7:40:12:29:68:1d:
                    5b:d9:64:4a:c1:2c:01:4a:a1:6d:ea:46:3f:ca:74:
                    3e:0c:1e:ca:e6:3f:f7:3d:e2:fa:dc:dd:7a:fa:5d:
                    54:8a:76:fa:76:18:cc:2a:e0:4f:99:f3:ec:6d:8d:
                    dc:9e:b4:8b:e8:30:0d:39:a9:a0:18:68:68:1f:7f:
                    4c:94:68:52:71:db:17:82:a1:f7:fc:31:40:f1:d2:
                    4c:99:25:55:ba:bb:66:96:b4:c6:3d:54:52:65:b6:
                    fa:17:27:0e:79:55:f4:5b:77:0e:91:3d:f9:0d:1f:
                    7c:55:0d:92:ac:6d:5d:d5:e3:d3:47:87:3b:00:e2:
                    73:15:d9:ee:b7:5b:0d:65:87:3d:24:85:39:fc:88:
                    58:72:21:68:0e:fb:d2:64:9f:19:e1:dd:0b:cf:d4:
                    4c:e1:91:13:60:40:16:26:02:c4:38:c5:d8:ab:ad:
                    60:1f:76:bc:06:24:34:b3:88:e2:4a:b5:42:7a:8a:
                    34:51:94:0d:1e:4c:26:12:7c:80:10:7f:ee:69:2a:
                    e2:4b:ea:28:d5:f7:81:56:48:e9:c8:05:75:49:b1:
                    fd:c2:72:ab:0e:69:d0:c3:6f:12:a7:cc:a8:f7:94:
                    c8:1b:c5:96:0e:5b:d4:aa:1c:90:95:22:62:68:ac:
                    1e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:39:34:8C:3D:64:16:BD:50:DE:29:A5:1D:B3:95:E6:8F:80:A6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d523799-67f5-4753-8db9-0184ac765017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:96:99:f3:0c:3c:b7:c1:4f:d4:53:aa:80:e0:b4:d3:37:
         bd:40:cf:8b:38:7d:12:6e:9b:79:6a:3f:c2:a1:cc:29:f4:b0:
         94:cb:5a:a6:db:e9:48:dd:1d:45:56:db:81:20:1d:af:c0:da:
         f8:e8:36:1e:fc:77:ea:75:bb:70:be:28:aa:7d:85:9c:85:c0:
         19:c8:65:4e:56:e9:d4:2a:c6:38:03:bb:7d:5a:dc:bd:62:e5:
         98:9c:74:67:53:5e:ad:b7:f0:db:3e:0f:5e:94:fe:be:b3:ab:
         0d:3c:0c:9f:64:de:ac:50:30:11:59:44:67:24:89:3a:64:ab:
         94:2f:b7:61:b0:46:82:77:af:87:c2:4b:02:86:b3:d6:81:a9:
         ec:e4:66:47:a4:92:03:21:49:6d:ca:68:5a:89:17:d3:68:0d:
         2e:8b:10:ce:ff:b0:71:1b:76:fd:2f:fc:85:97:5c:52:b4:e4:
         1e:4d:62:6c:eb:71:cf:ad:81:a8:94:52:1d:9e:ab:25:41:c4:
         3f:20:3b:08:9d:a4:d5:0b:e2:30:38:a5:d1:26:ca:31:ee:48:
         13:dd:ce:e8:64:10:19:cb:c7:82:eb:bd:fb:28:34:7d:83:f2:
         67:44:7c:6b:9f:b5:8b:7a:c7:0d:36:64:27:fc:d2:84:4c:98:
         57:f9:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----