Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/313714b4-47f4-4ad5-9cac-f5ce8ae311ed.roa
File:                     313714b4-47f4-4ad5-9cac-f5ce8ae311ed.roa (raw, json)
Hash identifier:          u7/hH5xY88oKaOyMG0DAxFQchv6TMwK/E9Gf/SOaqsM=
Subject key identifier:   01:8A:15:D7:8C:A1:6B:1A:00:FC:42:73:D9:D1:3F:00:58:5A:56:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15CD9B89EEC044CFD1D085DBDC93C68634A43821
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/313714b4-47f4-4ad5-9cac-f5ce8ae311ed.roa
Signing time:             Tue 14 Oct 2025 22:39:38 +0000
ROA not before:           Tue 14 Oct 2025 22:39:38 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.58.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:cd:9b:89:ee:c0:44:cf:d1:d0:85:db:dc:93:c6:86:34:a4:38:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:39:38 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=8e53c016f9d4604283535ea215f52bbe5008644c7bc099e9416239b485e943bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:d5:df:68:66:9e:11:08:34:76:97:c3:82:
                    74:d1:47:e1:fa:d6:11:9d:38:40:8d:16:74:39:5f:
                    97:93:38:bb:54:61:1d:07:62:0e:ee:01:a8:3a:b8:
                    7c:ee:af:00:c4:87:b9:03:c1:15:c4:8f:c1:4b:2a:
                    95:28:20:32:e3:48:1d:23:d1:ff:fa:5d:fa:27:87:
                    dd:ff:e9:5e:08:4d:dc:ff:59:fa:a6:07:d3:19:5a:
                    e5:7f:bc:b9:91:fe:22:17:77:8a:84:6f:8f:3a:10:
                    36:06:fa:3c:24:dc:80:f0:e1:82:06:4b:63:27:f0:
                    90:65:30:83:2a:19:45:a4:bd:72:d1:07:35:ae:8f:
                    c3:1e:c6:18:10:c8:86:f2:73:62:57:9e:95:46:1f:
                    f7:d8:3f:cb:0f:f6:56:6b:75:3d:d4:19:c9:71:6d:
                    fd:f3:a6:73:39:f0:dd:ff:2a:a0:21:fe:0f:d1:48:
                    06:66:8a:7b:36:fb:13:50:7a:14:82:00:1b:da:f2:
                    d7:28:1d:02:4f:09:cb:65:c9:00:ad:02:23:f1:f6:
                    17:f9:d6:fb:0d:20:14:63:23:5a:aa:92:16:a6:c9:
                    b4:75:b2:a0:b1:e6:fd:ce:6a:44:2d:90:1b:2b:18:
                    77:05:ee:ff:04:fd:64:a8:97:4b:f7:d2:5c:37:8d:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:15:D7:8C:A1:6B:1A:00:FC:42:73:D9:D1:3F:00:58:5A:56:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/313714b4-47f4-4ad5-9cac-f5ce8ae311ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:ba:1f:c6:da:e2:42:91:5e:ba:7c:80:3f:86:c0:d5:af:43:
         72:42:9e:25:e6:76:70:bd:be:e2:36:ee:09:0f:da:dd:76:e0:
         ed:91:05:9f:c5:31:8b:ad:e4:ce:d5:12:02:45:b5:94:54:22:
         ec:fc:26:25:85:57:3b:d0:15:cf:1e:35:9a:93:4e:79:14:d1:
         2b:c5:04:b9:b1:6f:f4:2e:d4:b4:88:61:d0:f8:36:a6:fd:7b:
         88:84:c3:29:29:86:50:1d:91:e2:a4:cb:42:e4:f7:31:ef:09:
         05:16:dd:fe:17:66:dc:31:06:4e:e8:60:f7:a0:fd:4b:73:4e:
         ab:35:f6:4c:6b:75:69:e9:9e:d4:03:14:69:f2:55:b7:c8:32:
         96:84:f1:e6:1e:a3:72:3d:d3:87:e4:2f:4e:0a:c4:04:20:99:
         58:3f:71:a8:2b:13:e1:09:a8:b5:ff:69:4e:8a:f3:40:b4:2b:
         74:0f:93:07:8c:6d:8d:ee:ad:97:25:b6:d5:25:cf:a6:05:a4:
         aa:95:e0:18:4c:4e:17:ad:87:00:a1:cd:d5:76:6c:86:8f:f2:
         19:b7:5a:95:4e:6a:9a:95:51:6c:8f:71:8e:f1:92:a6:34:c1:
         e1:5c:90:0a:f3:4c:eb:2e:ec:8a:dd:bd:f3:c7:49:f8:48:fb:
         9d:90:4b:d3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFc2bie7ARM/R0IXb3JPGhjSkOCEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIzOTM4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZTUzYzAxNmY5ZDQ2MDQyODM1MzVlYTIxNWY1MmJiZTUw
MDg2NDRjN2JjMDk5ZTk0MTYyMzliNDg1ZTk0M2JiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN2NXfaGaeEQg0dpfDgnTRR+H61hGdOECNFnQ5X5eTOLtU
YR0HYg7uAag6uHzurwDEh7kDwRXEj8FLKpUoIDLjSB0j0f/6Xfonh93/6V4ITdz/
WfqmB9MZWuV/vLmR/iIXd4qEb486EDYG+jwk3IDw4YIGS2Mn8JBlMIMqGUWkvXLR
BzWuj8MexhgQyIbyc2JXnpVGH/fYP8sP9lZrdT3UGclxbf3zpnM58N3/KqAh/g/R
SAZmins2+xNQehSCABva8tcoHQJPCctlyQCtAiPx9hf51vsNIBRjI1qqkhamybR1
sqCx5v3OakQtkBsrGHcF7v8E/WSol0v30lw3jfqRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAYoV14yhaxoA/EJz2dE/AFhaVh0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMxMzcxNGI0LTQ3ZjQtNGFkNS05Y2FjLWY1Y2U4YWUzMTFlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVDowDQYJKoZIhvcNAQELBQADggEBABe6H8ba4kKRXrp8gD+GwNWvQ3JC
niXmdnC9vuI27gkP2t124O2RBZ/FMYut5M7VEgJFtZRUIuz8JiWFVzvQFc8eNZqT
TnkU0SvFBLmxb/Qu1LSIYdD4Nqb9e4iEwykphlAdkeKky0Lk9zHvCQUW3f4XZtwx
Bk7oYPeg/UtzTqs19kxrdWnpntQDFGnyVbfIMpaE8eYeo3I904fkL04KxAQgmVg/
cagrE+EJqLX/aU6K80C0K3QPkweMbY3urZclttUlz6YFpKqV4BhMThethwChzdV2
bIaP8hm3WpVOapqVUWyPcY7xkqY0weFckArzTOsu7IrdvfPHSfhI+52QS9M=
-----END CERTIFICATE-----