Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa
File:                     7aec645b-f991-4a6c-97ff-47cd491428c4.roa (raw, json)
Hash identifier:          eIOVkVVtFSNEyrezZiuw7IMjluZms0T11nxcxHaAQnI=
Subject key identifier:   BE:5B:AE:B5:29:EC:4A:8B:E9:F9:54:E9:9B:B5:18:A1:BE:5F:49:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       139F46CE572B9E997FCFFD688AF6F160D0DFD1C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa
Signing time:             Wed 08 Oct 2025 00:51:20 +0000
ROA not before:           Wed 08 Oct 2025 00:51:20 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9f:46:ce:57:2b:9e:99:7f:cf:fd:68:8a:f6:f1:60:d0:df:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:51:20 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=5d84a4a188383f6cf3972a39db9b86ca494ac48c21479a5de121bc4f43ed2286, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:59:3d:df:3e:90:da:89:e9:fe:50:8f:0e:
                    6a:19:76:9a:92:6e:82:79:0a:ab:d7:13:18:f2:9e:
                    41:05:1c:41:e3:e0:e8:7d:d2:74:a7:20:8a:ce:86:
                    cc:4f:4d:77:61:0e:f6:1f:df:94:9e:73:80:4d:28:
                    19:6d:c8:53:1d:4a:50:02:29:9f:36:c2:76:7b:91:
                    7a:b3:94:e3:e5:0d:77:30:3f:8b:e9:7c:48:c2:6f:
                    db:cf:d0:81:b9:a5:cd:09:ea:48:6e:67:74:93:7a:
                    59:2b:f0:2c:cc:32:1e:9d:e4:bc:1e:9a:93:03:61:
                    0f:c0:75:aa:8a:0e:1b:66:01:dc:af:ba:5e:1a:08:
                    d3:40:a4:73:24:5a:54:35:fc:4f:48:00:22:e6:16:
                    de:0f:dc:7e:0b:d3:84:9a:5e:c3:09:20:30:54:9e:
                    b3:e4:20:ee:32:dd:2e:b4:bf:8b:3f:0e:02:ae:be:
                    c3:8d:86:3f:40:d8:ac:eb:cd:a4:ff:47:1c:dc:a4:
                    c2:b2:91:52:bc:b4:d1:a1:c7:c8:8c:2d:82:c9:6f:
                    20:6b:87:fd:7d:18:e6:06:a0:04:0b:0a:15:6e:b9:
                    bb:a5:ba:67:61:e6:a5:b2:b9:61:c4:64:79:3a:41:
                    3f:a6:a8:f7:35:56:d4:cb:f5:45:3a:5f:27:1a:84:
                    dd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5B:AE:B5:29:EC:4A:8B:E9:F9:54:E9:9B:B5:18:A1:BE:5F:49:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7aec645b-f991-4a6c-97ff-47cd491428c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:68:b0:11:42:f2:0d:03:cd:bd:10:f0:5a:31:1c:42:5b:e8:
         2f:68:92:1b:2a:1d:d2:df:05:1f:ec:54:b8:4a:12:5e:ac:96:
         07:3d:0c:59:20:b3:0f:72:c4:bc:69:e9:4c:48:f1:e8:37:e0:
         8a:69:d9:98:38:8a:31:ae:9d:9d:84:47:90:ee:be:44:c8:01:
         04:f6:4b:5e:ea:d9:f5:86:79:dd:4b:2c:5b:84:02:ee:11:d7:
         4c:3f:cf:67:ab:5f:c2:2b:94:c7:eb:60:5d:e9:78:86:fd:fc:
         f7:ac:33:e4:76:e0:87:2f:b2:4d:4b:25:09:04:da:2d:c7:3e:
         fe:26:33:1c:c9:16:29:f8:ed:12:94:44:55:88:b8:fa:a5:8c:
         4a:0d:f4:40:f4:26:6a:4f:3b:0e:4b:a1:c1:4a:91:83:50:7f:
         11:80:96:02:10:68:d7:9b:f4:05:5f:93:f9:dd:27:c2:b7:ee:
         98:b4:fa:76:e6:5e:ff:a9:56:fd:3c:58:3a:26:8d:4f:16:aa:
         cd:1a:5c:4e:ae:76:62:46:f9:b8:3e:83:36:79:da:47:3c:ad:
         0e:94:81:d9:dd:91:7f:0f:5e:91:0d:ee:b8:6f:a3:d9:25:b5:
         99:d7:1c:7a:5f:60:5e:9f:bb:a2:82:1a:23:2c:e5:0b:ac:62:
         a5:e6:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----