Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df477eb-fc7b-4214-a7f9-f956c7e51392.roa
File:                     1df477eb-fc7b-4214-a7f9-f956c7e51392.roa (raw, json)
Hash identifier:          bnBiotEKIef0mQUloaLXeH9rowRx6VQ+NgJXYbJrWOE=
Subject key identifier:   3C:CA:25:5E:EC:CC:19:9E:4C:74:F3:5E:31:00:FC:4F:17:85:17:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52273E0CE2E7F69A6742B55225844B26B7E4D958
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df477eb-fc7b-4214-a7f9-f956c7e51392.roa
Signing time:             Wed 15 Oct 2025 15:42:50 +0000
ROA not before:           Wed 15 Oct 2025 15:42:50 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:27:3e:0c:e2:e7:f6:9a:67:42:b5:52:25:84:4b:26:b7:e4:d9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:42:50 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=66109ccdf36d5366d15f7e4f03c67c13b551d79296b05e1536b88f73f6fe929e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:37:ce:2a:1a:08:96:37:cb:1f:b9:67:01:
                    c5:2d:93:31:81:c5:d1:58:d4:a9:f3:8d:e1:42:0f:
                    89:f2:c2:15:45:ee:ce:5e:b6:5f:98:fa:d7:da:9a:
                    e6:61:01:d2:9b:a8:93:67:17:07:40:dc:bf:74:07:
                    4f:29:9f:74:81:29:b9:27:2b:19:be:eb:7a:43:8c:
                    b2:97:5f:09:18:a1:c4:e2:93:84:42:03:c8:70:1f:
                    55:39:ce:55:b0:c6:ad:8a:ce:88:bf:f0:49:28:ff:
                    e5:f9:eb:37:6c:5e:fc:cc:e2:bc:10:fc:e8:6e:21:
                    ea:6f:91:e5:3f:60:c3:0a:72:71:10:6d:da:3d:07:
                    d4:c5:5c:6d:f7:7a:f7:f0:38:96:c2:8f:fe:a1:5e:
                    62:94:5c:ab:3d:54:84:e9:89:05:1a:ae:53:22:6b:
                    81:e3:b0:c2:8a:7f:58:4e:09:c0:3c:00:cd:26:98:
                    0d:d7:60:b7:93:85:14:93:9f:00:25:5c:de:b5:ba:
                    6b:b0:7e:d4:07:3e:01:df:8b:91:db:2d:df:e4:84:
                    99:fb:9b:37:00:d7:4f:ec:4b:d6:1e:58:b9:c3:f5:
                    08:60:f4:96:26:0c:13:e8:61:00:8e:c9:aa:c9:a1:
                    14:d2:ec:8b:65:47:38:90:bf:cf:34:a4:b7:3a:c4:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:25:5E:EC:CC:19:9E:4C:74:F3:5E:31:00:FC:4F:17:85:17:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1df477eb-fc7b-4214-a7f9-f956c7e51392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:27:c9:71:53:76:86:66:9c:43:44:c9:83:3f:1b:a4:35:
         84:7a:1e:61:2e:53:5a:ec:2f:37:6d:23:17:bc:a8:a1:f7:7d:
         c9:99:b0:ef:cd:bd:d9:d4:38:73:fa:5e:dc:fd:02:66:43:24:
         b9:d9:cb:f0:fe:82:3b:56:2c:52:86:51:0d:9d:49:62:94:fe:
         94:01:0e:b3:38:03:b8:23:e2:d2:41:55:f9:11:82:15:30:ea:
         03:4b:97:d1:a6:a2:55:55:f8:4e:0a:84:47:b4:ac:f3:07:ba:
         00:51:1a:fb:63:e2:83:63:d3:c8:88:02:e1:42:64:a9:e7:3a:
         40:df:8c:79:21:34:f8:91:8a:5d:60:16:2a:35:1e:47:2a:0c:
         92:a9:8a:48:64:ab:fb:75:6c:b7:38:a0:44:7b:69:60:4b:94:
         ee:e5:36:6e:ce:3b:ec:4d:23:68:33:a7:f8:a5:e6:74:0d:54:
         31:8b:0d:6d:0e:2a:ca:ee:69:d5:83:d0:74:32:f4:82:e0:98:
         77:7f:a9:56:3b:44:5b:95:28:b2:7f:a0:db:ae:db:92:4a:f9:
         29:2d:a3:f0:fc:1f:74:96:a5:ec:16:aa:55:3b:50:fa:b2:d0:
         12:1d:cf:25:f4:cc:db:bf:93:a0:42:38:61:2d:70:07:a9:85:
         ed:4b:68:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----