Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f68fcc8-b195-4976-9284-d79e4746e63a.roa
File:                     1f68fcc8-b195-4976-9284-d79e4746e63a.roa (raw, json)
Hash identifier:          yvhKkDPFA3h8TlaPrMPez/xoes9psY2QgMlX6xfh3M8=
Subject key identifier:   82:75:81:69:51:62:41:25:90:19:80:0B:9C:81:30:83:A3:A1:51:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       597282342F9621677BCF002277FB3A0D70F89534
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f68fcc8-b195-4976-9284-d79e4746e63a.roa
Signing time:             Tue 14 Oct 2025 22:02:07 +0000
ROA not before:           Tue 14 Oct 2025 22:02:07 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:82:34:2f:96:21:67:7b:cf:00:22:77:fb:3a:0d:70:f8:95:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:02:07 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=cf34725419b3dd6451a869e329bac791ec69ead34e1933a876a0d7eba8de791f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:c8:9f:5d:ed:0a:8d:34:57:fc:75:43:61:
                    d7:cc:bb:21:5f:45:18:c4:7d:23:cb:74:bd:c6:c4:
                    40:7f:8f:5e:a5:fa:1c:dc:a0:4a:fd:d3:74:90:90:
                    e0:f1:89:6e:bc:27:ec:f6:06:78:25:7d:eb:45:36:
                    c8:2b:e4:fc:c9:29:e5:dd:bc:18:bd:d1:e4:61:26:
                    7b:d3:d2:7c:14:ae:3b:39:d0:b8:ee:5d:71:5f:c8:
                    c7:76:7b:c8:bb:b0:3c:22:c6:61:f4:a5:53:bb:b8:
                    5b:ef:a7:39:f0:6b:9a:98:c8:65:ca:0f:b6:78:19:
                    65:f5:45:e0:1a:d5:91:42:09:59:f2:77:15:c4:6c:
                    2e:a7:ac:c3:1c:d2:6d:18:4f:72:af:ff:f0:ea:eb:
                    0a:30:47:d0:92:44:9d:13:e9:b0:64:bb:cb:89:79:
                    13:b1:4e:8a:80:0a:c4:b5:52:e5:38:40:43:d4:6a:
                    24:c5:4b:7b:bd:c1:d8:1c:81:2f:99:6d:ff:fb:be:
                    0f:57:12:7f:ff:65:f8:44:4a:1c:3f:8b:22:17:7d:
                    26:be:7c:9d:7a:07:f6:d0:9e:ae:3b:ee:42:de:c1:
                    39:c4:3e:11:60:ea:cf:4e:43:72:f2:7b:04:5c:d4:
                    a9:96:54:92:60:df:49:01:bd:30:0d:c9:64:79:6c:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:75:81:69:51:62:41:25:90:19:80:0B:9C:81:30:83:A3:A1:51:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f68fcc8-b195-4976-9284-d79e4746e63a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:87:77:fc:d9:34:48:b1:2a:a0:a3:67:c9:fd:aa:44:e6:59:
         17:59:9d:cc:57:9b:93:7a:3a:55:5f:72:f6:1d:f5:5f:c3:dc:
         15:be:e4:e4:f4:32:ed:21:e8:8c:79:62:a6:9f:ea:a4:ad:ae:
         0c:a4:7a:93:8b:ad:39:d1:b8:35:c8:7f:6a:36:c5:f0:75:b6:
         52:39:09:47:c8:5b:9f:10:30:a0:53:cb:7d:8a:6a:20:ea:57:
         70:f9:81:60:cf:9e:7e:88:05:99:45:6d:5f:39:04:17:6d:3c:
         68:75:40:64:ff:d5:71:5a:03:e2:ea:c4:ea:30:5b:3b:fa:0e:
         83:6a:4d:6c:91:85:f6:db:88:4e:6c:1e:da:b0:79:38:90:c5:
         f4:84:1b:83:aa:c4:1e:d1:fa:3b:a1:ec:07:5e:bf:64:c4:71:
         82:63:b4:ba:fb:e5:04:70:59:cd:c7:f1:8f:60:49:17:23:29:
         b9:e2:12:6d:0f:66:b5:6f:74:4e:0c:0e:e8:89:c3:d1:3e:d5:
         72:82:2e:7b:06:a0:73:9a:47:06:28:4b:61:ae:d4:af:26:7a:
         04:1a:8f:69:67:14:00:bf:eb:f7:97:fe:4c:a2:9e:06:d5:99:
         44:2d:ef:37:00:43:cd:85:49:1a:d6:d0:82:3d:b3:08:d6:03:
         e7:cf:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----