Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/792ea88c-1c76-4683-be04-fac6287d28fc.roa
File:                     792ea88c-1c76-4683-be04-fac6287d28fc.roa (raw, json)
Hash identifier:          mKP4B0bhJOtMGFzlcSlwnBp8NYuPTruaWYKcMQVyO7k=
Subject key identifier:   B4:F8:EE:9F:28:96:75:1A:41:B1:42:1D:F9:C2:AC:B7:E3:67:39:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30BCE84266BEE3DC8FE2C166B4005DB4C983CA65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/792ea88c-1c76-4683-be04-fac6287d28fc.roa
Signing time:             Wed 15 Oct 2025 15:52:09 +0000
ROA not before:           Wed 15 Oct 2025 15:52:09 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:bc:e8:42:66:be:e3:dc:8f:e2:c1:66:b4:00:5d:b4:c9:83:ca:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:52:09 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=4713f929a2ae7eb7b8e40985053652de1c3c99d1d2f6d31cdcd0c670b35a7be4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4f:fe:52:db:e1:2b:81:ac:4d:ad:f3:1f:19:
                    4e:94:b4:33:b7:10:ba:cd:e1:0e:b0:5a:ac:a1:e8:
                    ba:e7:6b:6a:30:2c:a3:eb:f0:a0:f8:63:8d:6b:5c:
                    1f:75:97:69:08:35:76:a5:28:dd:7a:05:c7:d6:03:
                    1d:ab:b2:2f:03:7c:01:c7:d7:17:af:64:73:de:70:
                    c6:88:37:a0:c8:7f:0e:ab:88:9e:6f:7b:aa:c5:7d:
                    d5:ee:a9:a7:8c:4a:1a:79:45:bd:be:21:c2:cd:16:
                    5f:e7:55:cd:a0:44:2f:ff:f3:55:e3:47:64:91:9c:
                    d8:21:77:d4:2b:5b:e1:e2:88:db:75:43:6e:d5:c8:
                    3d:c5:f0:7e:3a:59:4a:e1:02:f3:24:ce:6d:06:cb:
                    f6:5f:4d:22:d9:0b:6b:4c:ed:06:73:68:e8:cf:e6:
                    0b:79:7d:3f:7e:8b:36:62:ff:cc:76:39:97:71:c0:
                    79:57:9e:ac:b9:a8:ac:0d:3b:c9:07:8e:f5:f4:bd:
                    1d:4c:36:30:f6:70:c5:36:f1:fd:49:4a:cf:36:a7:
                    89:16:e6:00:84:c4:35:4f:44:93:39:6d:75:8f:ad:
                    0c:57:62:e2:35:a8:ec:c1:74:ad:80:26:55:79:e9:
                    89:3e:24:e1:f8:e2:b1:5b:09:10:70:a4:c8:93:80:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:EE:9F:28:96:75:1A:41:B1:42:1D:F9:C2:AC:B7:E3:67:39:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/792ea88c-1c76-4683-be04-fac6287d28fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:d8:b9:d0:63:fc:27:2a:c4:75:8b:07:a2:43:ae:04:63:
         be:32:0b:9f:1c:f8:55:0c:d6:4b:73:5a:07:ee:ee:7f:7f:06:
         75:ef:31:d0:9c:bf:c6:5f:4d:9d:f2:a5:ad:54:b9:c7:40:b0:
         6b:4f:d3:92:0b:16:27:3f:27:3b:8e:23:0f:06:7f:ba:34:66:
         28:d5:d2:dc:02:1e:7e:78:e1:f6:86:c8:c0:9c:f9:d2:51:c5:
         93:bd:ed:12:4a:15:bd:06:ef:8f:6b:72:11:40:4a:2e:cd:66:
         4b:2e:06:81:65:84:d1:5e:0d:ff:8c:b6:97:02:c8:c0:cc:88:
         d2:dc:c5:95:91:69:8c:80:f9:e9:85:29:60:d6:90:55:71:e8:
         d1:53:06:12:bc:3c:a6:67:28:9f:5c:26:a4:23:6c:69:04:2f:
         73:fc:5e:bd:7f:5c:c6:16:38:76:4d:e0:51:bc:ce:4e:0b:06:
         92:9f:11:3a:c9:75:b5:f2:b6:15:9e:23:45:4a:a6:50:b0:ef:
         db:b4:2d:89:f6:bf:3f:d1:7b:b0:4f:2d:fd:69:19:28:c0:67:
         6d:6a:f0:67:e4:ae:7d:d3:01:13:3a:ce:47:06:5b:ef:e6:3d:
         23:d3:e7:b5:1e:58:de:b0:3b:f1:44:8c:db:1c:6d:29:46:74:
         74:05:42:33
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMLzoQma+49yP4sFmtABdtMmDymUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTU1MjA5WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzEzZjkyOWEyYWU3ZWI3YjhlNDA5ODUwNTM2NTJkZTFj
M2M5OWQxZDJmNmQzMWNkY2QwYzY3MGIzNWE3YmU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfT/5S2+ErgaxNrfMfGU6UtDO3ELrN4Q6wWqyh6Lrna2ow
LKPr8KD4Y41rXB91l2kINXalKN16BcfWAx2rsi8DfAHH1xevZHPecMaIN6DIfw6r
iJ5ve6rFfdXuqaeMShp5Rb2+IcLNFl/nVc2gRC//81XjR2SRnNghd9QrW+HiiNt1
Q27VyD3F8H46WUrhAvMkzm0Gy/ZfTSLZC2tM7QZzaOjP5gt5fT9+izZi/8x2OZdx
wHlXnqy5qKwNO8kHjvX0vR1MNjD2cMU28f1JSs82p4kW5gCExDVPRJM5bXWPrQxX
YuI1qOzBdK2AJlV56Yk+JOH44rFbCRBwpMiTgAGtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtPjunyiWdRpBsUId+cKst+NnOTEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5MmVhODhjLTFjNzYtNDY4My1iZTA0LWZhYzYyODdkMjhmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVtMwDQYJKoZIhvcNAQELBQADggEBAGbl2LnQY/wnKsR1iweiQ64EY74y
C58c+FUM1ktzWgfu7n9/BnXvMdCcv8ZfTZ3ypa1UucdAsGtP05ILFic/JzuOIw8G
f7o0ZijV0twCHn544faGyMCc+dJRxZO97RJKFb0G749rchFASi7NZksuBoFlhNFe
Df+MtpcCyMDMiNLcxZWRaYyA+emFKWDWkFVx6NFTBhK8PKZnKJ9cJqQjbGkEL3P8
Xr1/XMYWOHZN4FG8zk4LBpKfETrJdbXythWeI0VKplCw79u0LYn2vz/Re7BPLf1p
GSjAZ21q8Gfkrn3TARM6zkcGW+/mPSPT57UeWN6wO/FEjNscbSlGdHQFQjM=
-----END CERTIFICATE-----