Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2579acdf-afbd-4968-972b-d7d7408c028e.roa
File:                     2579acdf-afbd-4968-972b-d7d7408c028e.roa (raw, json)
Hash identifier:          XYc7bIMgrC56deGJ4xQp2Cf1EzIKRdQZUt6T+N4wRt4=
Subject key identifier:   9E:AA:6F:8A:8E:D5:00:DA:20:9F:24:89:2A:84:BE:96:56:AD:A5:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E0B138872EDA29AD55BE399D1820AAB1DD96F57
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2579acdf-afbd-4968-972b-d7d7408c028e.roa
Signing time:             Wed 15 Oct 2025 18:21:17 +0000
ROA not before:           Wed 15 Oct 2025 18:21:17 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0b:13:88:72:ed:a2:9a:d5:5b:e3:99:d1:82:0a:ab:1d:d9:6f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:21:17 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=5bc1991430c476299d986bacd10f8eb4c86351a532c72377e45ce10036385054, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:1a:cd:d7:b9:97:da:f4:00:85:c4:37:ec:
                    8f:a5:ae:64:56:9e:48:3a:45:70:88:9d:fe:9c:f9:
                    35:a4:33:29:6a:77:82:41:51:0b:31:4a:60:15:df:
                    e3:3e:b1:c1:71:47:71:ce:20:ca:19:26:a6:f2:1f:
                    9f:87:12:b9:ed:91:b4:09:4a:03:2f:33:29:8d:6d:
                    a9:08:0b:24:87:cc:d6:6d:ef:38:76:70:42:b7:08:
                    d5:f5:f5:14:c2:51:bf:f4:99:8c:e3:e6:9d:ed:3a:
                    13:b0:0f:02:1a:57:d9:8b:84:d0:2e:aa:c0:b8:06:
                    f8:29:91:d2:c1:5a:ce:be:fb:a7:1d:c1:b7:4b:72:
                    b9:5b:54:48:6d:df:93:f7:60:d3:66:1b:ef:d9:fb:
                    d1:59:ab:39:ac:13:af:bf:04:cb:cc:a9:ed:0b:c2:
                    99:fb:c2:ee:bf:7e:f8:cd:f5:5b:0c:49:ff:d0:4c:
                    5b:3e:aa:24:2d:75:c9:c6:26:54:46:19:90:ab:eb:
                    c6:1d:0a:e3:61:58:29:85:68:96:a1:4d:43:e1:15:
                    6e:33:d8:c1:00:0d:28:52:44:f2:e2:7c:72:16:99:
                    d3:34:5b:eb:23:1e:30:96:63:f9:ba:78:e8:db:78:
                    fa:2f:d9:26:87:52:4c:a5:d5:d2:58:43:db:12:02:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AA:6F:8A:8E:D5:00:DA:20:9F:24:89:2A:84:BE:96:56:AD:A5:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2579acdf-afbd-4968-972b-d7d7408c028e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:50:e9:1c:b1:04:54:f8:ac:95:55:09:4d:60:fa:f0:9a:0b:
         50:2a:98:bc:fa:ab:56:d9:eb:b6:cc:ee:0a:2a:37:72:e6:40:
         9e:93:66:d2:34:37:8b:4c:da:7c:6c:d9:10:b0:60:b8:89:4f:
         03:8a:f1:0e:a3:4e:35:75:b8:36:36:9f:13:c8:16:8d:d8:9b:
         7a:e4:df:4c:84:e8:8f:94:88:78:91:3c:19:0e:cd:d7:59:04:
         2b:61:ff:b4:13:68:10:33:5c:b0:a7:57:be:c5:9d:fd:6a:5b:
         20:5b:7e:a9:d3:b9:f0:54:d2:df:57:8e:a9:4e:b8:10:4f:38:
         4d:e5:9e:04:dd:69:d6:3c:7a:4c:01:ef:47:13:b6:31:63:f7:
         31:d0:e1:0d:5d:13:9c:3a:7e:1f:19:ad:ce:34:36:be:58:df:
         e9:78:56:77:74:8d:6c:9b:87:e7:2c:18:df:ce:d4:98:bd:c9:
         9c:e5:2f:49:ea:74:eb:9f:e5:a7:5b:ad:46:3f:08:2a:54:2e:
         6c:01:23:37:cb:79:28:ff:78:87:2e:8b:3a:f1:7f:57:ed:35:
         94:1e:ba:ae:ee:91:62:b0:8a:95:d0:94:be:f5:e1:4b:a6:ed:
         7f:10:a2:f1:62:50:4f:4f:d6:2a:c2:1c:1f:56:8b:52:40:d4:
         cc:fd:7b:9a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPgsTiHLtoprVW+OZ0YIKqx3Zb1cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTgyMTE3WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YmMxOTkxNDMwYzQ3NjI5OWQ5ODZiYWNkMTBmOGViNGM4
NjM1MWE1MzJjNzIzNzdlNDVjZTEwMDM2Mzg1MDU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDs4xrN17mX2vQAhcQ37I+lrmRWnkg6RXCInf6c+TWkMylq
d4JBUQsxSmAV3+M+scFxR3HOIMoZJqbyH5+HErntkbQJSgMvMymNbakICySHzNZt
7zh2cEK3CNX19RTCUb/0mYzj5p3tOhOwDwIaV9mLhNAuqsC4BvgpkdLBWs6++6cd
wbdLcrlbVEht35P3YNNmG+/Z+9FZqzmsE6+/BMvMqe0Lwpn7wu6/fvjN9VsMSf/Q
TFs+qiQtdcnGJlRGGZCr68YdCuNhWCmFaJahTUPhFW4z2MEADShSRPLifHIWmdM0
W+sjHjCWY/m6eOjbePov2SaHUkyl1dJYQ9sSAmdzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnqpvio7VANognySJKoS+llatpUkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI1NzlhY2RmLWFmYmQtNDk2OC05NzJiLWQ3ZDc0MDhjMDI4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVhYwDQYJKoZIhvcNAQELBQADggEBALZQ6RyxBFT4rJVVCU1g+vCaC1Aq
mLz6q1bZ67bM7goqN3LmQJ6TZtI0N4tM2nxs2RCwYLiJTwOK8Q6jTjV1uDY2nxPI
Fo3Ym3rk30yE6I+UiHiRPBkOzddZBCth/7QTaBAzXLCnV77Fnf1qWyBbfqnTufBU
0t9XjqlOuBBPOE3lngTdadY8ekwB70cTtjFj9zHQ4Q1dE5w6fh8Zrc40Nr5Y3+l4
Vnd0jWybh+csGN/O1Ji9yZzlL0nqdOuf5adbrUY/CCpULmwBIzfLeSj/eIcuizrx
f1ftNZQeuq7ukWKwipXQlL714Uum7X8QovFiUE9P1irCHB9Wi1JA1Mz9e5o=
-----END CERTIFICATE-----