Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f1b9990-4b3d-4227-bc6e-54642a397fd5.roa
File:                     6f1b9990-4b3d-4227-bc6e-54642a397fd5.roa (raw, json)
Hash identifier:          Odw17O/bxKzEANN9L5N8CQIYsEUJis6M8atyPHO4NTU=
Subject key identifier:   39:45:7F:F1:93:89:4D:C0:7F:74:AA:54:64:AD:2C:C1:01:C5:34:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4ADC2582B15C2486928C7889A8159E4ACF1D7CC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f1b9990-4b3d-4227-bc6e-54642a397fd5.roa
Signing time:             Tue 14 Oct 2025 23:42:36 +0000
ROA not before:           Tue 14 Oct 2025 23:42:36 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:dc:25:82:b1:5c:24:86:92:8c:78:89:a8:15:9e:4a:cf:1d:7c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 23:42:36 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=322d6fe28a69aea385e0e47aa4b0f0880aeafaddb3714cb520e7a9c3ea8eec99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:7e:bb:7b:d9:5c:dc:22:13:74:ea:d4:f4:
                    a2:d5:28:0f:2a:f7:70:31:65:69:f7:bd:36:58:c8:
                    c2:f1:9f:92:3d:ae:d9:07:08:dc:62:42:6e:eb:7b:
                    3b:8b:75:ae:b0:f2:b3:de:54:c8:f5:12:da:4c:31:
                    4c:d8:68:ff:37:0c:48:0f:be:9a:03:0b:76:7f:70:
                    26:49:54:0c:5c:7e:a0:3c:49:6f:4b:88:64:5e:82:
                    59:eb:2f:2e:09:49:7e:7c:3d:ed:7d:07:d8:96:cc:
                    ff:33:8d:ee:b8:a1:54:47:74:07:52:6a:df:d2:3e:
                    fc:3d:e9:cc:52:de:56:f1:83:43:c8:84:b9:8a:98:
                    89:46:ae:2e:c1:3c:14:4d:73:76:b6:a0:09:7f:ab:
                    13:7b:39:72:1f:8a:fd:1e:e3:43:f8:5d:47:f6:8b:
                    20:e7:44:c5:e9:d5:65:6d:be:ab:ba:b8:d7:ee:62:
                    f9:d9:92:8d:29:b0:0d:6f:fc:9f:0b:6a:a2:1c:c5:
                    b8:4f:03:ac:57:6a:30:74:1f:10:32:6a:23:e9:d2:
                    3d:36:2e:1a:a0:4d:49:e1:09:0c:9f:31:d6:fe:6f:
                    7a:98:71:eb:06:4d:4f:74:dd:b1:92:5f:44:25:39:
                    e3:19:41:be:99:ce:9b:ec:2a:17:41:50:da:df:6a:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:45:7F:F1:93:89:4D:C0:7F:74:AA:54:64:AD:2C:C1:01:C5:34:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f1b9990-4b3d-4227-bc6e-54642a397fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:01:f8:2f:45:71:15:30:5f:c2:8b:bc:f6:8b:4b:73:31:
         a8:7e:78:40:a2:87:f7:92:df:da:a5:15:d6:32:e5:ab:7a:cf:
         75:6c:5a:9f:2b:99:7c:72:f8:f2:f4:a4:23:50:b1:06:1b:c9:
         e3:de:93:a6:0d:78:54:4a:72:fa:34:ce:9d:78:56:0b:b9:8a:
         24:7c:8e:18:1f:01:68:a7:61:28:b7:5d:0d:aa:37:a7:24:9a:
         ca:c9:6f:48:f2:cf:7f:27:3e:27:a7:20:35:b3:38:0c:48:11:
         c3:a6:f9:be:73:a5:2f:91:54:25:14:f5:94:e1:c0:bf:0e:5b:
         8a:d1:1e:c4:d6:65:fa:7e:f9:77:1f:84:9d:b4:3e:4e:ec:dd:
         9f:70:bb:68:87:93:7f:bc:a1:5a:f5:6f:40:91:43:f1:06:05:
         fa:80:ba:ae:0b:47:9c:4a:22:13:1b:8e:79:02:36:c6:2c:4c:
         ee:92:11:75:72:6a:b4:43:77:3e:3f:b0:a9:ae:57:96:36:74:
         4f:10:48:84:9a:ea:d9:f4:87:b1:77:e7:af:63:37:e4:8c:57:
         00:3f:50:45:b6:2d:9d:87:79:1b:f7:58:49:74:a9:79:bd:91:
         32:ce:f9:38:d9:21:7d:aa:f4:45:ae:2b:e8:c0:37:ad:29:b0:
         50:d5:01:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUStwlgrFcJIaSjHiJqBWeSs8dfMUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjM0MjM2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjJkNmZlMjhhNjlhZWEzODVlMGU0N2FhNGIwZjA4ODBh
ZWFmYWRkYjM3MTRjYjUyMGU3YTljM2VhOGVlYzk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv+X67e9lc3CITdOrU9KLVKA8q93AxZWn3vTZYyMLxn5I9
rtkHCNxiQm7rezuLda6w8rPeVMj1EtpMMUzYaP83DEgPvpoDC3Z/cCZJVAxcfqA8
SW9LiGReglnrLy4JSX58Pe19B9iWzP8zje64oVRHdAdSat/SPvw96cxS3lbxg0PI
hLmKmIlGri7BPBRNc3a2oAl/qxN7OXIfiv0e40P4XUf2iyDnRMXp1WVtvqu6uNfu
YvnZko0psA1v/J8LaqIcxbhPA6xXajB0HxAyaiPp0j02LhqgTUnhCQyfMdb+b3qY
cesGTU903bGSX0QlOeMZQb6ZzpvsKhdBUNrfaqFJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOUV/8ZOJTcB/dKpUZK0swQHFNNEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmMWI5OTkwLTRiM2QtNDIyNy1iYzZlLTU0NjQyYTM5N2ZkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVvQwDQYJKoZIhvcNAQELBQADggEBAKOSAfgvRXEVMF/Ci7z2i0tzMah+
eECih/eS39qlFdYy5at6z3VsWp8rmXxy+PL0pCNQsQYbyePek6YNeFRKcvo0zp14
Vgu5iiR8jhgfAWinYSi3XQ2qN6ckmsrJb0jyz38nPienIDWzOAxIEcOm+b5zpS+R
VCUU9ZThwL8OW4rRHsTWZfp++XcfhJ20Pk7s3Z9wu2iHk3+8oVr1b0CRQ/EGBfqA
uq4LR5xKIhMbjnkCNsYsTO6SEXVyarRDdz4/sKmuV5Y2dE8QSISa6tn0h7F3569j
N+SMVwA/UEW2LZ2HeRv3WEl0qXm9kTLO+TjZIX2q9EWuK+jAN60psFDVAak=
-----END CERTIFICATE-----