Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8afa52-7c68-46cc-adc5-bc42da37ba92.roa
File:                     7a8afa52-7c68-46cc-adc5-bc42da37ba92.roa (raw, json)
Hash identifier:          /37kZvD8FOgQFYzssAv+rZx28jxfoy6HkEXKulxtjiI=
Subject key identifier:   E9:80:03:E9:92:6A:D0:2A:7F:99:1B:EC:9F:55:28:14:BE:FC:64:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       175D81417BFBB3E483EAA69C8299BC0AE5FA120B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8afa52-7c68-46cc-adc5-bc42da37ba92.roa
Signing time:             Wed 15 Oct 2025 17:02:10 +0000
ROA not before:           Wed 15 Oct 2025 17:02:10 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.240.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5d:81:41:7b:fb:b3:e4:83:ea:a6:9c:82:99:bc:0a:e5:fa:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:02:10 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=8d1be2ca747c89ac2ac795b088db514e8bd38e01a044de0951af4314315e91b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:42:90:53:9d:84:e6:32:0d:ec:77:f8:a4:
                    99:30:03:1f:fb:a3:51:95:50:4f:45:23:2c:8d:96:
                    49:53:d6:35:69:73:e4:67:8b:9c:34:d4:3f:00:14:
                    2d:ee:1e:a3:ca:6a:c5:7d:ce:c8:83:96:ba:82:c3:
                    32:15:bf:9e:21:f6:44:76:60:fa:94:46:e2:a7:1c:
                    0a:cb:63:1c:ac:5f:d1:77:18:bd:73:8c:7a:3f:09:
                    6d:eb:03:a2:cf:84:b2:53:9b:9d:8f:dc:43:7f:d3:
                    74:c4:db:b7:54:eb:1d:63:b3:25:99:32:c1:bc:8d:
                    e3:a7:1c:bc:cf:d7:fd:5d:df:1d:2d:5e:a8:3c:f7:
                    88:4f:4e:ed:f2:07:96:df:ba:b0:1f:80:e3:bd:c1:
                    0d:5e:96:41:81:dd:b1:fb:9d:b2:90:fc:79:29:56:
                    b1:36:f2:76:e8:44:8d:08:e6:84:aa:35:85:09:a1:
                    0d:d4:ce:70:ac:01:0c:b6:31:28:7b:f0:4a:5c:66:
                    c0:13:23:cb:19:04:08:07:e1:9a:f9:95:19:67:23:
                    3b:73:3e:16:19:4e:cf:d8:72:c9:15:92:29:a5:54:
                    08:6c:4e:5a:a6:03:a1:32:fd:91:52:62:f4:9a:c5:
                    f0:20:98:0a:4b:85:28:4c:2d:27:17:f6:c9:70:1b:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:03:E9:92:6A:D0:2A:7F:99:1B:EC:9F:55:28:14:BE:FC:64:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8afa52-7c68-46cc-adc5-bc42da37ba92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:f6:81:12:a6:ff:5a:0e:36:c8:24:76:2a:f8:da:05:de:
         b0:10:b8:d9:65:cb:f3:72:d3:60:b6:81:c3:22:45:bb:e6:ad:
         ee:07:63:a8:3a:f1:3b:07:22:9f:9c:30:b3:68:cc:ca:f5:5e:
         1f:fe:89:19:43:5f:c3:76:a8:60:b5:8a:74:28:07:40:12:f1:
         10:f2:c4:0f:a4:2b:78:ce:d5:4a:69:3d:58:f1:c8:7b:9e:9f:
         70:f7:47:28:a5:a1:e7:2b:ee:90:7b:2c:da:ad:e2:26:58:de:
         a5:8b:4c:73:46:a2:b4:f3:c7:9d:5c:49:d0:ca:b6:c3:cd:e9:
         1f:66:25:dd:df:91:24:7a:90:92:5d:34:1c:37:77:ee:44:8a:
         7b:6c:6f:b8:54:20:64:a5:b0:ed:0d:ef:b6:a1:ba:ca:cd:e4:
         64:17:93:d3:e1:2d:d9:f9:7c:7a:57:b2:9e:c0:db:94:0d:2e:
         11:4a:d6:13:ca:df:a2:8f:a8:39:de:fb:40:66:9f:17:36:91:
         a9:db:d2:2b:98:93:73:e2:e6:3d:90:ac:24:79:a0:73:f7:bf:
         b0:77:0d:6c:76:55:c7:ec:47:88:8a:03:03:86:6e:f6:58:ae:
         ea:b1:e4:13:b2:fb:a7:8c:3d:bd:98:d7:2a:7a:e3:ae:91:49:
         8b:e4:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----