Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa
File:                     7671e404-27d3-4739-9da3-e9ffff3d4e14.roa (raw, json)
Hash identifier:          YeW6iaHDTbeiOTyjnAke7m3VWLLjIZZ3ZpLRmtVTBFw=
Subject key identifier:   09:B4:5E:E9:45:F4:CB:ED:12:E8:27:7E:13:A4:F7:B3:8D:90:B6:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       19CECE520C8A8ED5B9F7E7212E08E44DC6ED2DC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa
Signing time:             Wed 01 Oct 2025 00:51:13 +0000
ROA not before:           Wed 01 Oct 2025 00:51:13 +0000
ROA not after:            Wed 05 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.76.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ce:ce:52:0c:8a:8e:d5:b9:f7:e7:21:2e:08:e4:4d:c6:ed:2d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  1 00:51:13 2025 GMT
            Not After : Nov  5 23:59:59 2025 GMT
        Subject: serialNumber=6c7c80180e11592a699826d0e6021e66b02a0ad819b8f07f4fff41b1ae073999, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:bf:9c:fe:7a:99:b2:86:9a:3e:e4:92:d3:
                    c3:67:c7:7c:32:99:c5:00:b5:a1:ec:75:f5:f9:b7:
                    6c:06:74:97:9d:c9:30:4d:a4:f9:8b:03:c3:b2:bb:
                    4e:a4:d9:45:5a:b4:6c:82:43:f4:53:2c:b9:fa:ae:
                    7f:4a:45:2e:64:68:11:a2:d4:44:c7:93:db:a0:e6:
                    eb:cb:72:6d:14:71:b4:56:9c:8e:39:38:8b:65:1a:
                    88:81:c1:5f:a3:8c:71:ad:86:16:e9:b6:fc:a8:4b:
                    b7:4d:31:6e:ab:57:de:5a:9b:6e:0e:44:0d:2d:33:
                    bf:7d:1b:90:96:6c:9a:ae:b3:cd:d1:ea:40:6f:18:
                    ed:ae:b1:3f:79:be:d9:cc:03:27:27:6e:85:22:e2:
                    91:ed:a6:b2:2a:c4:1a:87:1f:2f:da:9f:e1:3c:d6:
                    d2:55:73:80:f3:a0:08:4c:99:91:0f:4e:11:c4:3c:
                    0b:55:a0:77:0e:32:93:db:38:d0:33:23:62:9c:6b:
                    c3:57:4e:b3:9d:da:5e:76:e8:c5:47:b1:de:98:94:
                    20:98:0c:0a:4c:a0:2f:c0:83:b0:58:35:27:77:0e:
                    64:4f:0a:ce:ec:d3:44:e5:10:48:84:fe:77:2d:2b:
                    65:27:7a:c6:58:24:45:54:4a:2f:4e:79:b3:80:dd:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:5E:E9:45:F4:CB:ED:12:E8:27:7E:13:A4:F7:B3:8D:90:B6:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7671e404-27d3-4739-9da3-e9ffff3d4e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.76.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:43:58:01:9b:dd:a3:91:a4:e3:bf:97:32:bc:30:fb:ec:27:
         f6:86:73:e2:0c:8b:60:f5:7f:c3:bd:d5:ff:12:d5:f5:ae:47:
         c4:74:78:99:a7:f7:ac:ca:ed:19:02:38:99:be:60:17:f0:34:
         c6:86:cc:c5:40:98:ed:66:47:48:73:56:65:4c:68:bf:f0:54:
         cb:36:e6:1a:fd:9e:bc:aa:c7:17:8b:de:84:54:cb:b9:ef:4b:
         bb:9a:6d:9e:60:58:96:4d:b5:98:4c:01:39:85:32:36:aa:0d:
         d9:60:fc:d1:9c:8b:18:5a:fc:fe:0c:5a:de:73:2f:a8:69:d4:
         68:17:c6:90:ba:24:51:8e:29:4c:71:ce:ad:94:ee:93:c6:3c:
         82:ba:98:dd:9e:81:67:0a:2c:51:5e:87:ae:14:3a:4c:06:97:
         0e:ef:1e:f8:f7:09:3c:d0:cd:10:8d:df:69:06:32:c3:6d:34:
         62:81:1e:55:fe:4e:59:b4:f8:82:62:be:ad:f2:82:77:2f:10:
         85:85:3e:5c:ae:c2:2f:00:39:93:d5:0c:b8:a2:77:39:fe:b5:
         9f:c1:a1:bb:8e:7e:ea:39:0f:03:8d:c1:51:96:81:a4:c7:c5:
         a2:25:c2:b4:ed:17:fb:e8:f4:a8:0e:2b:0d:49:ef:86:45:5f:
         ce:fa:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----