Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2947eec1-f06a-4dd9-a9bb-ee7e7b8bb5b2.roa
File:                     2947eec1-f06a-4dd9-a9bb-ee7e7b8bb5b2.roa (raw, json)
Hash identifier:          CaHCPRS3CSvTSADb8Y6c3T7IxrVnGdF83zggecLBgIE=
Subject key identifier:   A6:7E:23:70:20:33:2F:07:7A:83:16:80:0B:1D:C1:E6:C0:3F:D8:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0C27312F2F0E5A9285D8C082A39E741CED79C09E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2947eec1-f06a-4dd9-a9bb-ee7e7b8bb5b2.roa
Signing time:             Tue 14 Oct 2025 20:41:17 +0000
ROA not before:           Tue 14 Oct 2025 20:41:17 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:31:2f:2f:0e:5a:92:85:d8:c0:82:a3:9e:74:1c:ed:79:c0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 20:41:17 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=dd3b234721874ebc613eccd3e03623088d23122e77b2bcf235f6b002b43ad27b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:67:3b:03:56:bd:15:55:3d:8c:d0:c3:5e:
                    52:af:29:d9:88:93:a9:4b:24:55:11:5b:ac:8b:8a:
                    57:7f:3c:04:21:ac:34:32:7a:7d:45:e8:7d:fc:ff:
                    f5:99:25:de:f5:70:82:d6:b6:ab:78:bf:9a:5c:53:
                    4c:65:70:1e:f2:3e:6b:0e:7b:75:cc:34:5b:15:08:
                    28:bb:10:67:2d:09:e0:98:ff:4a:ac:c7:64:1a:53:
                    2d:71:df:c0:3a:17:b8:01:5d:ec:77:b5:e4:7e:f8:
                    e8:99:87:93:d3:05:35:c3:b4:b1:f9:50:7d:f2:d7:
                    d8:4c:e8:85:c2:a8:69:49:de:3e:d8:eb:04:b9:f5:
                    88:3a:6a:32:d9:87:13:d5:6e:8b:95:4b:1d:1c:c3:
                    2f:b0:10:94:e1:14:8b:b2:39:b4:9f:29:79:61:c6:
                    e2:f8:0b:d8:16:bc:2a:a2:c4:fc:05:85:37:bb:4c:
                    a0:27:31:a2:57:a5:d2:d1:4e:af:30:b2:0f:f3:eb:
                    5b:35:73:b5:04:22:42:2e:27:8c:4d:e7:b8:86:9b:
                    2f:12:54:15:a3:17:6b:a8:78:f9:ae:ac:7e:02:39:
                    00:b3:15:95:50:32:0a:47:dc:18:4f:f0:bd:93:e2:
                    3c:6f:ae:68:d1:08:21:7e:40:a9:08:4b:38:6e:e9:
                    3c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:23:70:20:33:2F:07:7A:83:16:80:0B:1D:C1:E6:C0:3F:D8:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2947eec1-f06a-4dd9-a9bb-ee7e7b8bb5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:c7:24:de:5b:b0:37:5a:52:b8:3b:ae:7e:76:6c:c9:f3:
         73:34:08:d1:60:df:ea:46:4d:fe:77:d0:1e:0e:16:17:3b:3c:
         57:b6:58:11:5c:0b:64:2a:36:58:fd:04:17:88:79:32:44:0c:
         b5:9f:39:81:e8:22:77:b4:51:83:8a:5c:6c:38:2d:ad:e5:c3:
         9c:c6:62:cb:80:9c:a5:13:e8:86:4f:af:70:29:4c:81:da:3e:
         d6:90:68:1f:0f:ff:e3:85:d2:0e:46:7b:a3:f2:9b:68:87:87:
         fe:b1:1e:7d:ef:16:e0:dd:3f:c3:2a:d9:ff:dc:54:b6:3b:1a:
         e7:33:49:87:66:ad:60:99:3b:45:bf:ab:94:18:64:04:fc:23:
         3c:14:0b:fa:82:96:ab:4c:a1:df:58:53:4b:eb:5b:7d:38:24:
         8e:a8:b3:28:40:4f:fb:27:ef:a1:9c:0b:8a:d3:ab:fd:a7:a4:
         86:f0:da:29:74:5a:25:dd:67:5f:1e:3f:bd:e4:f3:7f:fb:64:
         90:c0:19:60:8e:6d:0e:d9:15:24:71:63:f9:67:b7:c0:3f:28:
         e0:53:4a:74:a0:a0:10:ce:3d:c1:3e:1f:36:9f:dc:dd:1e:75:
         0f:04:a5:a3:5a:5c:c3:52:9e:ce:a1:e9:3d:2f:c8:eb:c2:34:
         30:11:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----