Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08d53f-1cb8-4d58-ad91-91f8abb67491.roa
File:                     2d08d53f-1cb8-4d58-ad91-91f8abb67491.roa (raw, json)
Hash identifier:          st3tT/PY2DbHnjs4Ea0L2ub0yjKwkcBmSrG78yrtM7g=
Subject key identifier:   39:9E:57:47:55:39:40:64:48:15:C7:B4:FC:7D:14:33:D2:42:97:3B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5009769BED1B680733E2B89C982B0207D1018A13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08d53f-1cb8-4d58-ad91-91f8abb67491.roa
Signing time:             Tue 14 Oct 2025 22:42:45 +0000
ROA not before:           Tue 14 Oct 2025 22:42:45 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:09:76:9b:ed:1b:68:07:33:e2:b8:9c:98:2b:02:07:d1:01:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:42:45 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=ece0cc6de1e248e8b16c1945bfb5d5d0500be1648aa76192178932be11c09e10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:72:8b:07:bd:01:42:b1:e2:25:a4:b3:f1:01:
                    c1:69:36:4b:cc:c3:a0:b7:56:5d:4b:34:0c:06:65:
                    04:7d:3a:1c:27:47:1a:3d:a7:7a:55:14:a2:35:fa:
                    86:0f:de:d8:1f:0c:6e:12:70:47:ac:53:d9:6a:2b:
                    01:65:78:cd:a0:da:b9:0f:ba:45:3d:70:21:e1:db:
                    48:fa:2a:85:4e:d4:01:2b:82:48:3f:e0:e6:b5:12:
                    ef:81:46:41:b8:8a:50:bf:2a:43:5c:3d:69:7b:20:
                    c6:e6:10:82:a7:d9:fc:1f:16:ba:ba:54:b5:65:04:
                    90:e5:e9:48:13:c4:b8:a4:36:40:5b:60:a7:67:98:
                    00:c3:c2:53:a7:3a:c7:72:98:32:7c:21:f7:76:34:
                    22:db:17:fa:23:8b:af:8b:fa:10:b9:b3:63:5a:d1:
                    33:dd:b4:fa:45:5b:40:0d:f5:93:b9:eb:9a:ed:55:
                    ef:37:38:4d:56:35:d4:4d:65:df:97:2a:b3:ef:c8:
                    54:7a:5c:f2:2c:cd:3b:4d:1c:9d:22:d4:73:30:e0:
                    f2:25:2d:10:b0:1e:9f:24:00:54:f7:bc:12:67:cc:
                    28:f2:dc:20:43:81:39:fb:68:bd:8c:a4:94:d9:bc:
                    5b:16:49:00:ed:01:7a:1f:e6:21:b5:84:8f:2b:ca:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9E:57:47:55:39:40:64:48:15:C7:B4:FC:7D:14:33:D2:42:97:3B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d08d53f-1cb8-4d58-ad91-91f8abb67491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:ac:3f:22:1e:bc:96:7c:2c:b4:1f:b0:90:7f:d3:73:58:
         1f:43:37:ff:80:20:b4:03:2e:42:61:8f:0c:f6:42:52:c2:75:
         31:85:71:b9:5c:27:7e:98:48:eb:5e:40:10:f1:b4:cd:49:5e:
         59:6c:a7:7d:67:87:70:15:ed:b4:ae:54:e0:e2:93:d2:ca:01:
         ef:54:89:59:5e:d4:17:c1:92:af:95:7f:ec:95:2c:45:43:0e:
         3d:f4:40:0f:60:71:ad:88:99:c3:d4:fd:d4:61:7d:62:55:aa:
         d9:82:4a:a0:38:b4:dc:b4:65:c3:a4:70:4a:5d:3e:90:88:bf:
         45:5b:a5:44:5b:89:11:79:07:cf:11:03:79:cf:bf:df:76:18:
         ec:61:2c:8c:c1:cb:b0:79:a1:d1:2b:9f:0c:d0:38:91:ec:bd:
         4a:b8:aa:08:62:5b:36:a9:51:96:30:ea:c2:71:18:47:55:0c:
         d3:46:94:be:0b:81:b1:17:63:01:83:06:11:08:c3:73:d9:1d:
         2c:fd:7d:ad:2c:19:c0:2e:22:a4:d8:c7:c4:ff:7a:49:0c:a1:
         16:05:6f:11:b5:cf:78:c2:60:17:4d:6d:e4:21:37:0a:ad:d4:
         89:85:7b:12:85:20:0b:1c:26:02:5c:9c:0b:cf:ef:9d:aa:90:
         01:1f:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----