Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/436bb2e3-8b57-439b-b031-d403726da971.roa
File:                     436bb2e3-8b57-439b-b031-d403726da971.roa (raw, json)
Hash identifier:          S3WqUzAFlMkHr/mZPbd6drcGD0+DgqMNn7ONKpQACPA=
Subject key identifier:   7D:36:85:77:45:08:1F:3C:34:C1:BC:94:C4:41:AB:97:9C:5D:5D:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       429D6BFB48981E042D68C27F2D026F6C7EB96AF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/436bb2e3-8b57-439b-b031-d403726da971.roa
Signing time:             Tue 14 Oct 2025 22:12:06 +0000
ROA not before:           Tue 14 Oct 2025 22:12:06 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9d:6b:fb:48:98:1e:04:2d:68:c2:7f:2d:02:6f:6c:7e:b9:6a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:12:06 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=47bcee12820fd0db88547b3b48a5fb62ba55df335cb6050cab1b5023832b7b11, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:81:f9:18:57:07:d8:55:64:a8:c5:66:87:
                    a4:35:b4:ad:a3:26:a9:8a:74:c5:2b:b4:07:d8:48:
                    9c:15:ed:33:4f:b3:cf:0a:2b:ab:a4:7d:3f:26:b0:
                    9f:d1:13:5a:81:61:9d:a7:ca:e3:32:0c:22:db:b2:
                    c6:87:c6:28:8c:c0:ee:a8:24:1e:34:3c:14:3e:76:
                    be:74:c3:05:b7:aa:8f:36:9b:fe:da:24:fc:ae:a9:
                    e8:b6:35:2c:9b:02:48:c1:6c:44:7c:ff:e2:e1:29:
                    31:42:2e:92:ce:67:28:56:b9:86:4b:0a:e7:38:51:
                    81:2f:09:fe:90:24:f7:62:3b:8a:49:82:75:0d:4d:
                    19:36:bb:18:f8:4e:8b:c5:e8:ee:f8:be:5e:72:29:
                    b4:29:e7:d0:7a:c8:6a:b7:3e:85:c4:10:7a:58:ec:
                    7e:7a:6f:c7:43:30:b7:c0:5b:c2:39:fe:51:5b:e8:
                    89:50:90:5e:7b:69:b0:eb:2d:80:66:5b:50:bc:4e:
                    51:b9:d6:0b:40:95:60:2b:09:ca:e6:6c:39:72:9c:
                    a9:87:b9:5b:2f:81:b0:d5:61:cf:1c:4f:ad:f6:1b:
                    9a:9a:7a:08:62:31:56:a7:7f:3a:86:85:24:ac:42:
                    e5:df:ea:4e:fb:d7:e0:31:64:3e:0d:3a:48:34:67:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:85:77:45:08:1F:3C:34:C1:BC:94:C4:41:AB:97:9C:5D:5D:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/436bb2e3-8b57-439b-b031-d403726da971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:47:da:f8:24:a7:96:ed:a0:b4:67:ba:c8:4c:1a:57:5c:fc:
         bb:7b:3c:1e:37:15:1f:e6:56:83:e3:bd:ae:80:96:02:43:57:
         6b:79:79:0d:60:73:b3:9d:94:a9:67:af:6b:3a:24:f8:a7:6b:
         1a:a9:ac:b3:fd:10:5c:50:f5:4d:38:3e:aa:db:90:c3:04:73:
         8e:2e:34:17:16:9f:e6:ff:49:bf:3c:26:88:3a:ae:79:bd:33:
         ae:70:19:ce:d7:88:56:70:63:a3:7c:31:e8:10:9d:02:59:41:
         e9:01:2b:6d:04:90:f4:bb:38:76:a2:ac:7c:9e:18:ad:4b:ed:
         79:86:a6:dc:82:64:c3:c1:5e:d5:21:21:a2:9a:8f:ac:82:cf:
         ca:c3:5d:94:3f:94:b7:b7:40:b6:44:73:d5:c7:8f:38:2d:ab:
         63:8b:dd:0b:e5:9e:9d:71:86:0b:f1:4a:df:ac:ee:e8:d3:56:
         25:7f:4a:ae:4c:c2:29:86:99:ee:54:86:91:56:04:ab:b3:9d:
         19:2c:52:b3:43:96:1b:7b:4c:21:8a:03:ee:72:78:87:85:7b:
         24:1f:86:89:cb:c2:f7:5d:27:89:11:77:60:16:35:41:6f:e9:
         9a:93:3e:2e:60:df:3f:4d:95:2b:b0:82:5c:0e:6c:4f:05:b2:
         6a:2f:46:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----