Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
File:                     6a94972a-5622-44f7-85a8-f166881512cb.roa (raw, json)
Hash identifier:          FGDctu06B8jQ0NG7jPnxRzyOLppArjPVrmiSnKrOUmY=
Subject key identifier:   DD:90:51:E3:98:E0:5D:96:42:E9:16:F5:2D:1D:84:EE:D4:80:A7:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66EB27AFB68A2701A2E6AB1D0D5449DE98281266
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa
Signing time:             Wed 01 Oct 2025 00:51:15 +0000
ROA not before:           Wed 01 Oct 2025 00:51:15 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:eb:27:af:b6:8a:27:01:a2:e6:ab:1d:0d:54:49:de:98:28:12:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:51:15 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=30b96c46e329e6c4489e9f6198481862ba84dd3b6469242784934d3a2622274c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:d7:5b:18:da:65:ed:96:05:27:ba:c9:8c:
                    a2:9a:5b:eb:b1:54:f5:8e:7d:28:7d:15:72:31:97:
                    79:a1:81:86:8b:00:98:ba:e7:b9:bc:77:de:ed:fe:
                    45:ff:d0:24:a6:e6:6b:9e:83:27:4a:8f:cf:ea:97:
                    6b:9a:89:97:5c:3b:71:fb:b4:ef:d3:ff:25:dd:ad:
                    47:55:d2:c9:f4:d9:50:46:38:8b:af:17:6b:aa:6c:
                    05:ec:93:ff:4b:f7:ef:4c:05:07:36:05:2e:7b:fb:
                    7b:61:a7:16:da:60:fc:32:49:a2:81:d6:b8:d2:1e:
                    0a:22:53:e1:ce:6a:4c:40:42:28:de:7c:e0:48:a2:
                    d7:0f:07:3d:3c:16:4b:25:a4:49:ff:68:8f:b4:d8:
                    c8:e7:73:e4:c9:47:67:26:89:91:08:8a:ee:26:82:
                    29:50:14:f4:8a:ba:99:71:ce:e9:6f:01:18:a9:bc:
                    61:c4:63:98:0d:e7:22:a9:e8:b8:ff:c6:9d:e7:7c:
                    e1:63:2b:62:2c:13:0b:ab:bc:d8:fe:26:c2:14:db:
                    e1:d8:d6:1d:31:44:5c:36:53:41:e9:ba:3c:3d:de:
                    20:7e:1a:b8:09:7e:bf:ce:a9:da:6a:b7:7a:1c:74:
                    6f:b9:38:68:74:03:3d:6d:f8:fc:8a:45:26:f1:ae:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:90:51:E3:98:E0:5D:96:42:E9:16:F5:2D:1D:84:EE:D4:80:A7:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a94972a-5622-44f7-85a8-f166881512cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:2f:65:91:b2:0d:33:0f:1f:b8:20:0c:6c:7f:93:7e:58:
         70:23:3c:51:c4:15:ef:37:f5:40:73:8c:e0:c8:13:c6:fd:22:
         4b:81:40:f1:de:ab:0c:e8:36:e5:50:63:8e:ef:36:29:d6:45:
         6c:f8:95:26:8f:1a:42:76:90:4e:2c:ac:9f:a5:ab:3b:bb:c4:
         ec:93:27:e7:77:6a:03:e1:e5:da:a7:da:1c:d9:34:a5:34:1e:
         92:a7:8e:5d:e6:84:b8:ed:66:55:40:95:fd:00:53:02:fa:41:
         18:75:df:6a:86:5b:7c:31:89:b4:3c:77:49:b3:5c:64:fd:05:
         08:6d:2a:74:36:46:cf:9e:fd:e3:20:e1:79:70:50:98:59:dc:
         7e:41:63:a6:24:00:33:c5:8c:9d:fb:e7:6d:8b:24:df:84:d7:
         4c:91:3c:f7:23:63:67:b4:cd:67:55:03:6d:b1:a6:c0:31:9f:
         14:98:5e:c6:6c:21:0a:16:bc:91:f5:60:78:7c:0b:fa:a9:91:
         99:38:6e:2b:6f:22:11:00:fb:05:4c:40:7b:fe:be:d6:a8:b2:
         73:5b:f4:93:20:52:60:11:06:a0:a4:dd:85:0e:e6:f4:ee:e4:
         b8:45:c3:f3:c3:49:49:26:22:db:9c:bf:6f:83:ab:2c:42:1d:
         fc:ad:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----