Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b329ed3-b1ae-4a11-a9e0-ebbf3c6f064e.roa
File:                     7b329ed3-b1ae-4a11-a9e0-ebbf3c6f064e.roa (raw, json)
Hash identifier:          dwsSfavRVFVUz/6VBnFtGFP6I9SSVyONLh4Bdr9IvzU=
Subject key identifier:   62:F0:66:EE:4B:77:55:9A:92:0E:40:A0:6B:0A:26:43:1B:1B:FF:7A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7EB8CD507EF22A34843ECBD222693A2DE50F70D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b329ed3-b1ae-4a11-a9e0-ebbf3c6f064e.roa
Signing time:             Tue 14 Oct 2025 18:40:06 +0000
ROA not before:           Tue 14 Oct 2025 18:40:06 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b8:cd:50:7e:f2:2a:34:84:3e:cb:d2:22:69:3a:2d:e5:0f:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:40:06 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=546c15c760b7e1544817da136f7661530f79863e5833f43cfaf86f360dbee7f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:e4:70:31:74:38:df:25:6c:f3:91:d5:67:
                    5a:b3:dd:57:6f:84:9f:ec:29:ea:91:ff:1f:2f:9e:
                    63:12:96:9d:b7:ff:66:86:5e:fc:9d:03:93:c7:2a:
                    5d:d6:ec:c2:e2:c4:14:c6:c9:0f:12:15:be:2b:07:
                    e4:4c:06:f7:76:90:36:49:c1:f2:42:15:ec:8f:4d:
                    21:59:aa:f6:4a:84:2c:2a:2a:02:0e:fb:24:46:31:
                    8f:38:78:da:37:b5:e8:34:df:a6:20:a0:96:6a:e1:
                    82:35:46:08:df:d0:05:a1:bc:21:5c:03:98:43:64:
                    85:4e:d2:71:62:6c:b2:b5:5f:44:07:21:95:21:1f:
                    c9:11:67:26:09:f1:46:79:8e:50:e0:33:6b:9b:0e:
                    e2:21:b4:02:a2:e1:d6:31:9a:5e:4a:f3:81:bb:7c:
                    26:3a:f8:be:d4:75:90:f2:03:c8:13:40:be:35:6a:
                    07:44:f4:86:9c:2f:6f:55:4b:bf:2f:8a:e9:d3:30:
                    6b:26:cf:32:69:2d:40:07:51:a9:d3:4d:c7:2e:9b:
                    2b:d6:41:c6:63:26:9a:f6:97:82:a4:0c:9a:d2:2b:
                    7b:39:79:d8:73:c2:4d:52:0b:bc:d8:f5:61:6b:ad:
                    50:1d:fa:e9:1b:93:1c:5c:ce:a9:7f:9f:47:d5:6a:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F0:66:EE:4B:77:55:9A:92:0E:40:A0:6B:0A:26:43:1B:1B:FF:7A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b329ed3-b1ae-4a11-a9e0-ebbf3c6f064e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:28:61:17:57:61:b2:74:0d:ec:ec:0a:06:2b:2e:d4:56:fb:
         ef:1f:69:2a:ac:3c:d2:ca:1d:b5:96:62:45:4d:86:72:40:39:
         a6:e8:1d:5e:76:6a:00:8d:fd:67:d3:68:52:4e:8e:82:22:c2:
         0d:c0:c6:2a:04:19:3f:c1:56:e4:43:a7:7b:c1:5d:e9:9a:88:
         9e:cb:3e:ba:02:ec:be:47:4e:27:d8:0e:ea:89:48:1e:08:c4:
         71:c9:0b:f8:3d:bd:09:7f:a9:3e:31:70:07:42:25:5c:98:11:
         31:bd:7e:74:61:c4:49:00:9f:db:f3:70:55:5f:e9:80:c6:5d:
         6e:60:8e:40:94:63:f5:7c:7f:3c:e3:e4:1c:74:98:56:b7:0a:
         44:39:af:c3:81:54:61:22:54:80:5c:81:f1:94:50:1c:78:65:
         f9:e6:9b:d2:00:45:84:af:03:82:4d:38:f5:5f:05:f5:21:8e:
         a1:60:24:8a:3c:ea:ac:11:4f:b6:44:8d:9d:d6:82:19:b9:a9:
         22:eb:17:1a:5f:8d:3a:8a:7e:3d:02:4b:68:63:31:b9:06:00:
         88:e4:de:8d:12:78:fe:37:27:24:c5:b7:3d:3d:f5:03:86:46:
         6e:cc:f8:2a:76:8a:d1:ea:74:89:30:65:e7:76:7e:8f:60:fa:
         57:68:a7:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfrjNUH7yKjSEPsvSImk6LeUPcNcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTg0MDA2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDZjMTVjNzYwYjdlMTU0NDgxN2RhMTM2Zjc2NjE1MzBm
Nzk4NjNlNTgzM2Y0M2NmYWY4NmYzNjBkYmVlN2Y4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwaeRwMXQ43yVs85HVZ1qz3VdvhJ/sKeqR/x8vnmMSlp23
/2aGXvydA5PHKl3W7MLixBTGyQ8SFb4rB+RMBvd2kDZJwfJCFeyPTSFZqvZKhCwq
KgIO+yRGMY84eNo3teg036YgoJZq4YI1Rgjf0AWhvCFcA5hDZIVO0nFibLK1X0QH
IZUhH8kRZyYJ8UZ5jlDgM2ubDuIhtAKi4dYxml5K84G7fCY6+L7UdZDyA8gTQL41
agdE9IacL29VS78viunTMGsmzzJpLUAHUanTTccumyvWQcZjJpr2l4KkDJrSK3s5
edhzwk1SC7zY9WFrrVAd+ukbkxxczql/n0fVanOjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYvBm7kt3VZqSDkCgawomQxsb/3owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiMzI5ZWQzLWIxYWUtNGExMS1hOWUwLWViYmYzYzZmMDY0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVKIwDQYJKoZIhvcNAQELBQADggEBAJUoYRdXYbJ0DezsCgYrLtRW++8f
aSqsPNLKHbWWYkVNhnJAOaboHV52agCN/WfTaFJOjoIiwg3AxioEGT/BVuRDp3vB
XemaiJ7LProC7L5HTifYDuqJSB4IxHHJC/g9vQl/qT4xcAdCJVyYETG9fnRhxEkA
n9vzcFVf6YDGXW5gjkCUY/V8fzzj5Bx0mFa3CkQ5r8OBVGEiVIBcgfGUUBx4Zfnm
m9IARYSvA4JNOPVfBfUhjqFgJIo86qwRT7ZEjZ3Wghm5qSLrFxpfjTqKfj0CS2hj
MbkGAIjk3o0SeP43JyTFtz099QOGRm7M+Cp2itHqdIkwZed2fo9g+ldop2M=
-----END CERTIFICATE-----