Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643422ab-ebd5-4430-ae2a-bd4664692778.roa
File:                     643422ab-ebd5-4430-ae2a-bd4664692778.roa (raw, json)
Hash identifier:          g8uyEG582Yr1ZWInyhh53dVo6vO8V4GfCMEDbereUo4=
Subject key identifier:   0E:59:C5:67:14:9A:C5:2B:BD:96:C7:93:13:84:D5:D6:A1:46:E7:FB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       28D8D72B7988AF54AB679C686976C38BDFB65FE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643422ab-ebd5-4430-ae2a-bd4664692778.roa
Signing time:             Tue 14 Oct 2025 20:52:50 +0000
ROA not before:           Tue 14 Oct 2025 20:52:50 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.144.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d8:d7:2b:79:88:af:54:ab:67:9c:68:69:76:c3:8b:df:b6:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 20:52:50 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=d1e103821b74397a2d01a0857be837093bb1181abed3efa2f9e5f84367d39291, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:4b:bb:89:54:44:4c:d5:b0:0c:89:8a:53:
                    b7:6e:13:18:a5:70:37:fe:34:44:59:af:41:f2:2a:
                    9f:4a:f5:d1:0a:86:5d:24:41:20:e6:03:e0:77:b9:
                    a8:1d:4b:c1:22:b8:9b:4a:db:0b:d5:59:6a:36:82:
                    0d:88:6b:d3:50:58:6c:3f:35:98:fb:bc:4d:36:77:
                    c0:8e:ec:13:1f:83:98:2d:1a:5d:ce:ee:16:dc:88:
                    cb:20:83:47:12:5d:6e:07:34:8c:16:80:ec:03:54:
                    7f:a6:e6:8f:6d:80:f8:55:cc:14:d1:8d:cf:5a:78:
                    98:5d:d2:44:58:79:73:19:30:92:8c:9b:eb:7e:94:
                    2e:68:d6:63:54:66:0e:65:20:78:df:c0:b8:34:27:
                    23:28:46:f5:a6:d9:25:81:7f:41:03:fe:ad:13:08:
                    e5:88:93:d4:d5:37:cd:df:29:11:f9:3b:10:43:28:
                    50:3f:4f:18:d4:30:06:9e:b6:fa:81:89:ce:18:5e:
                    ba:cc:88:21:b9:66:05:40:8c:57:cf:60:f4:bc:0d:
                    3f:66:29:36:67:4d:99:8b:75:28:1b:67:71:06:4c:
                    70:dc:e7:c8:5a:57:f9:67:9b:67:ee:d1:fb:3c:41:
                    b0:72:a0:bc:1c:36:0f:97:f0:e9:cb:d8:48:b2:a3:
                    9f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:59:C5:67:14:9A:C5:2B:BD:96:C7:93:13:84:D5:D6:A1:46:E7:FB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643422ab-ebd5-4430-ae2a-bd4664692778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:3b:ed:2f:b6:c4:4a:ea:a7:6d:26:3d:36:f3:8d:23:3a:fc:
         2a:b5:0d:d3:32:52:e8:50:5b:fe:76:f9:d9:3e:9a:2f:5d:d3:
         5b:0a:46:1c:0b:d1:b1:ad:b3:1e:14:23:41:67:33:47:ea:91:
         cc:29:3e:f9:b8:d4:bf:e6:8c:54:82:84:4e:f6:cb:93:2d:b1:
         ea:3c:ee:02:b9:83:71:57:90:01:19:b7:72:ee:fc:a2:90:83:
         53:f3:c4:b2:b4:bc:42:c6:d4:32:0a:46:36:f1:5b:40:26:8c:
         2d:09:8e:b1:1d:d5:7c:97:94:32:a7:ec:29:90:cc:82:f7:07:
         f1:7b:02:10:06:bc:7c:0d:08:7b:d0:bb:5f:77:1a:ca:ab:ea:
         1e:ac:ad:b1:47:c4:53:96:15:f6:d8:34:41:29:02:1a:eb:f4:
         83:6b:b4:5d:2c:3b:4e:85:c8:94:ce:1f:5b:9f:2a:90:10:c9:
         d7:af:5b:45:35:2d:d6:2c:aa:ca:3f:45:31:0f:1d:38:6f:36:
         f6:88:5c:c8:21:4c:ad:b8:e1:7d:7c:54:a9:5f:38:df:dd:5f:
         84:62:32:7a:31:d0:8c:67:f8:10:bc:f9:89:3c:cf:85:be:b9:
         9f:5f:59:f7:17:49:ed:99:b2:c7:f6:7d:01:7f:58:ad:ff:02:
         c6:45:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----