Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4803b0f9-8dc5-44e6-bfa2-47cf74d8b767.roa
File:                     4803b0f9-8dc5-44e6-bfa2-47cf74d8b767.roa (raw, json)
Hash identifier:          H7lYjExhwek/vggeLpgp7LqpnegsGlcODQDi0dCSJz0=
Subject key identifier:   6B:30:EB:CA:3B:2F:54:9F:3B:AE:A0:E4:E7:EA:BB:0F:5A:7F:06:17
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       238BB3BBE9A2DDC0C49B2A7EC9DEAF897117095B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4803b0f9-8dc5-44e6-bfa2-47cf74d8b767.roa
Signing time:             Tue 14 Oct 2025 22:42:42 +0000
ROA not before:           Tue 14 Oct 2025 22:42:42 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:b3:bb:e9:a2:dd:c0:c4:9b:2a:7e:c9:de:af:89:71:17:09:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:42:42 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=56b4b58117af169310f7b15fb6f02cad9008b264ed6f89d840e3deb2648ec682, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:e1:c7:43:bf:ca:44:48:0b:6e:7d:ec:c0:
                    1e:df:b6:67:a7:cc:d7:d3:30:c9:c8:d0:33:c8:f0:
                    8e:8b:12:73:7d:aa:07:cd:2d:70:02:8f:8e:65:ce:
                    ab:d3:ba:dd:49:da:22:c3:c1:76:07:ea:1f:7d:a7:
                    7a:da:96:7f:5c:78:03:c2:57:1b:e1:78:4c:b1:f3:
                    b7:d1:da:d9:85:b8:60:62:7a:60:91:5c:17:a0:32:
                    36:34:e7:ea:94:dd:bb:64:d7:7e:83:4d:09:fa:3e:
                    74:53:f8:51:86:7a:cd:8a:c5:50:b6:c4:4d:fe:44:
                    44:b3:99:7e:b5:f0:bd:c5:ed:ea:0f:ee:d8:7a:78:
                    8d:a9:1e:f3:f5:30:ba:64:90:ef:27:2a:c6:3b:db:
                    d0:a8:49:2e:a7:ae:c2:0b:31:ca:ec:1d:c9:cf:71:
                    8e:19:5d:8c:1b:d3:45:02:b0:91:b3:6b:1e:dc:c4:
                    8c:21:e9:e0:4d:7b:0c:f6:2f:03:07:4e:49:2b:f0:
                    c9:1b:cf:4e:21:5d:5e:01:6c:72:23:be:b7:13:6c:
                    bb:4f:0b:75:10:26:ad:8b:6a:b2:44:a1:e6:c4:0a:
                    41:e8:2e:89:c8:6e:fa:82:cd:67:6e:d4:c7:18:2f:
                    fc:f6:e2:cf:47:98:b5:ca:83:e1:9f:13:c5:e2:a3:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:EB:CA:3B:2F:54:9F:3B:AE:A0:E4:E7:EA:BB:0F:5A:7F:06:17
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4803b0f9-8dc5-44e6-bfa2-47cf74d8b767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:3d:46:b7:6c:f8:82:fb:38:66:37:69:87:26:d5:38:dd:
         18:fd:c7:5b:6b:b8:31:19:67:ed:86:9f:22:b1:0d:7b:b3:c9:
         76:1d:d5:22:e6:15:17:15:1b:72:6b:c3:77:f6:43:c2:f6:f1:
         1c:81:39:44:9a:c2:72:a9:16:a7:7c:04:ec:e4:3b:48:70:b1:
         32:3e:72:a2:83:5b:6b:ee:01:0d:11:d1:ed:f0:04:fd:39:09:
         66:77:05:fd:98:86:3b:7f:90:0b:96:78:ee:b7:0b:d9:96:61:
         67:18:bc:9a:3a:4a:ab:24:18:5a:7f:8e:22:a6:e7:51:06:76:
         87:f0:b1:09:1e:06:f4:68:58:26:cc:ff:9b:1d:f8:38:6a:c2:
         3c:9b:56:98:10:a8:36:44:4f:c5:31:b3:9b:e0:36:24:87:04:
         62:21:e6:72:dc:b9:c6:6c:e5:0a:22:30:9f:89:4e:b1:7d:9c:
         66:45:97:3e:7b:0c:c5:0d:dd:ae:75:bf:a6:6d:43:70:5d:16:
         1e:20:59:10:1e:94:ee:b8:02:29:ec:43:87:ff:ad:86:bf:01:
         e8:ed:a9:76:4a:25:e5:bf:08:83:af:67:45:fe:30:f0:d6:4e:
         5c:0d:f7:8e:3d:13:40:81:01:fc:33:d2:62:f0:11:37:78:52:
         c6:ec:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----