Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ded3be-f42a-409c-b612-d4e5dd50db30.roa
File:                     21ded3be-f42a-409c-b612-d4e5dd50db30.roa (raw, json)
Hash identifier:          GU2wmpAYkojWB+/Tnhzjeh4qEBiVh/Pz8u7GbJxpY9Q=
Subject key identifier:   08:F5:3E:9B:C8:7C:5E:1C:C4:7C:14:7D:0A:BF:18:AB:84:22:08:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1007C6E59054C127C1F3E484C772F2AA28A9B4EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ded3be-f42a-409c-b612-d4e5dd50db30.roa
Signing time:             Wed 15 Oct 2025 17:12:12 +0000
ROA not before:           Wed 15 Oct 2025 17:12:12 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:07:c6:e5:90:54:c1:27:c1:f3:e4:84:c7:72:f2:aa:28:a9:b4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:12:12 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=42a80aa7fbf5d302738594d98b43b566c8e6534b650534b7980342ea70188ac2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:12:a1:04:0d:98:25:50:9e:eb:f0:06:da:49:
                    19:fa:d5:94:14:9e:5b:79:5b:33:65:31:b1:bc:4f:
                    03:31:ab:bb:80:64:28:d7:41:93:f1:67:23:5b:cb:
                    b3:23:b0:ce:37:a8:d9:52:33:ef:50:19:62:8c:c1:
                    02:a7:e8:38:a7:02:8f:b5:25:73:30:e5:36:0b:6f:
                    c2:71:b9:56:90:0b:a1:e4:ca:4b:e2:81:36:1d:a4:
                    22:23:4a:4a:bc:a3:d2:b0:12:0f:dc:7d:e1:91:b6:
                    0f:a2:35:45:c0:e9:31:6f:52:7b:5f:c7:79:90:23:
                    5f:dd:85:3d:d6:78:0f:95:49:7c:67:94:cb:57:a4:
                    9f:6f:08:88:d5:21:f6:39:30:e5:c3:74:58:2c:b7:
                    dd:93:2f:1c:9e:69:fb:cd:76:3a:f0:ef:12:86:a5:
                    0c:55:7b:f0:4c:49:e3:11:03:fc:bb:3a:e4:9a:f1:
                    a2:02:f3:53:f0:fa:cd:f4:96:2d:0b:5b:f0:18:6d:
                    16:2b:62:ae:68:36:13:f6:30:ce:0a:2e:64:d5:7b:
                    a0:48:a6:24:41:e7:2d:5f:7f:2f:bc:4b:35:65:2e:
                    c6:c3:b2:e2:08:b3:59:fa:cc:32:bb:8d:7d:fb:7a:
                    76:95:9e:85:48:12:07:44:dd:82:c8:54:28:32:46:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:3E:9B:C8:7C:5E:1C:C4:7C:14:7D:0A:BF:18:AB:84:22:08:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/21ded3be-f42a-409c-b612-d4e5dd50db30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:df:e6:44:fd:9d:af:26:b8:4c:c9:e9:a0:d6:d3:f9:c8:
         49:80:ca:dc:a9:d2:35:25:16:12:e5:df:39:1d:81:c8:65:ca:
         14:b0:e1:be:f1:dc:f3:e6:25:26:72:32:f5:71:f0:2a:99:7c:
         f2:23:56:de:13:9d:53:60:e3:84:6b:27:87:a4:e9:d4:83:87:
         43:fd:33:9d:b8:fc:f0:40:12:f4:ed:e7:28:03:23:21:10:5f:
         a2:2c:21:4d:89:95:93:c3:05:7c:9c:08:85:9f:24:60:04:01:
         71:ac:cd:18:01:34:13:99:6f:a9:d7:ac:ad:99:5d:1a:03:89:
         6f:2e:28:ae:f4:2c:d7:36:76:14:11:bc:88:04:2c:31:05:dc:
         99:e0:61:c0:4f:fb:07:88:01:97:6c:67:8a:80:22:26:52:c0:
         50:87:2f:5e:f3:8c:c7:4f:e3:42:ae:be:c8:d0:31:47:6c:3a:
         92:f9:83:c4:5a:56:e2:ea:82:33:b0:89:99:b9:5c:25:a9:2f:
         48:c0:bb:bc:51:89:94:cf:e4:96:8f:b1:6f:9c:b6:b9:b2:3c:
         69:2e:63:47:4f:43:08:66:66:a5:1b:71:63:46:c4:d9:f6:63:
         aa:62:52:5c:c5:8f:61:3c:34:6c:62:8c:34:b3:ce:b3:09:9e:
         2c:87:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----