Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3655704e-291c-4efa-ba7d-df12f3d0ca75.roa
File:                     3655704e-291c-4efa-ba7d-df12f3d0ca75.roa (raw, json)
Hash identifier:          /a0xhPq/bZ2tqsAbmSFYsRt2E/5xL+8kk5I2178aGnM=
Subject key identifier:   91:36:E2:87:E9:F3:13:C0:82:BB:A1:AC:EA:90:99:44:39:6B:87:0E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       01B128398F167EB2CF642AAE4023E263BA12757D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3655704e-291c-4efa-ba7d-df12f3d0ca75.roa
Signing time:             Wed 15 Oct 2025 16:12:00 +0000
ROA not before:           Wed 15 Oct 2025 16:12:00 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b1:28:39:8f:16:7e:b2:cf:64:2a:ae:40:23:e2:63:ba:12:75:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:12:00 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=874e41f0e1fa63b0ad3d5b877e72dc89d879566c71b884e9db91f9286c068751, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5d:ac:93:7b:89:c9:ab:0f:8b:3c:f0:ca:7d:
                    9a:00:ef:b8:58:43:d0:1b:3c:71:ee:c9:49:d3:4b:
                    ae:80:ed:9a:f9:5c:30:e0:6b:70:1a:a3:1f:b1:ff:
                    49:35:63:ba:19:98:dd:e6:8e:f6:3b:b3:17:ca:e1:
                    7f:39:4d:bd:5c:e0:a8:47:e5:57:6f:f3:6e:b8:88:
                    43:78:83:ad:7c:a4:45:9e:f0:df:bb:52:1b:dd:86:
                    39:c5:a8:ff:e1:0a:1a:5a:60:9d:8d:76:dd:a9:1b:
                    1a:40:7c:4c:7d:c9:2b:cc:33:9a:80:16:88:11:41:
                    6b:a9:cd:69:8f:7e:1e:49:5f:40:c4:0f:37:65:76:
                    cd:3d:5e:2e:16:72:bc:d7:60:0a:a2:ae:fc:aa:5a:
                    44:c4:b7:e0:5d:28:19:fb:56:ea:09:1f:76:de:d7:
                    4d:43:6e:2c:a6:91:d2:4d:38:b2:59:c3:61:db:28:
                    fd:d1:11:c8:ec:50:17:ab:0a:d9:0f:19:4d:92:fc:
                    e8:0a:e8:63:20:78:fd:db:98:55:a8:8c:ac:a7:cb:
                    dc:d3:a7:7b:0e:c1:74:d8:dc:53:b3:e1:49:21:d5:
                    7a:da:f9:3e:21:4a:36:59:73:94:56:93:39:41:a3:
                    8d:52:d2:b6:1e:47:75:68:f2:30:c7:a1:50:b9:de:
                    96:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:36:E2:87:E9:F3:13:C0:82:BB:A1:AC:EA:90:99:44:39:6B:87:0E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3655704e-291c-4efa-ba7d-df12f3d0ca75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:06:d3:52:75:b3:bd:67:27:ea:6b:99:dc:ca:4c:7b:da:d2:
         13:44:b0:3a:c9:6a:2f:97:15:0b:27:05:fb:4d:09:ed:9f:c7:
         f1:3d:48:e3:40:db:cb:9e:c8:4d:d9:0d:5a:ba:b2:4b:34:69:
         67:12:10:ed:88:58:91:0c:76:f5:a1:7b:e7:27:bc:52:77:df:
         96:fa:80:69:ea:83:fa:b2:c0:40:32:25:3a:ef:60:26:2a:b6:
         f8:62:58:cc:49:42:e9:ec:11:ab:50:72:4d:86:96:2d:58:95:
         c2:61:0d:ac:eb:aa:a5:d7:5f:4c:55:84:ee:87:10:01:fa:c4:
         5a:20:09:36:fc:89:25:ef:67:aa:d1:32:b5:b9:cd:44:8b:51:
         ea:4b:7d:74:64:76:11:55:3c:af:e7:6d:39:61:47:e4:55:4a:
         59:eb:45:f5:fc:05:7b:41:59:37:e3:4f:6a:88:dd:16:ae:d7:
         92:79:ee:58:0e:1a:e1:e5:04:19:d5:91:f6:5b:94:a5:83:0f:
         a9:a4:87:ec:fa:8e:ec:66:88:90:ab:b9:91:cb:40:8a:5b:61:
         76:36:49:b3:57:f2:d3:7f:dd:4d:58:ae:0e:88:5e:05:61:f5:
         c2:43:df:3e:f5:89:58:79:bd:85:0f:26:ba:9b:d6:c1:ed:fc:
         1b:95:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----