Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa
File:                     81e78d06-eac0-4f0b-9226-d243d21015c3.roa (raw, json)
Hash identifier:          2+SkwKi9Qxmr0RRSxOju9uZj9oPyvC/gTBRkbwC3Qr8=
Subject key identifier:   01:00:F9:1E:8C:1C:C0:25:80:F0:91:E0:FF:E2:6E:E9:74:7A:74:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0F3D6CC0F932F90DD19C17CE61DC38F5877AD949
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa
Signing time:             Wed 08 Oct 2025 00:42:59 +0000
ROA not before:           Wed 08 Oct 2025 00:42:59 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3d:6c:c0:f9:32:f9:0d:d1:9c:17:ce:61:dc:38:f5:87:7a:d9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:42:59 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=22f028a7353c1d4ddccb5beeeff83419c435b082c6b6b72b7598f699abb4bbc9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:e5:5c:b1:0d:fb:5c:50:4c:ae:93:74:73:
                    be:8b:dc:79:1d:3f:63:da:62:3b:04:26:8a:c5:69:
                    9b:11:b0:98:2e:75:5a:dd:e7:ca:ca:b5:ca:c9:b0:
                    9d:c9:4e:15:23:48:0f:0b:41:d0:8a:9d:f6:c5:c1:
                    62:e5:80:6f:3f:97:6e:41:3c:96:82:5d:81:3d:9b:
                    82:03:a8:a6:e5:f9:53:9b:d2:51:5a:3e:2d:36:39:
                    2a:fa:13:f3:f7:fa:69:fc:e7:29:9b:1f:6d:e6:eb:
                    8a:f0:bd:da:c6:07:b7:24:df:33:cd:55:07:13:98:
                    f0:51:21:37:d3:1f:2e:56:c8:a8:94:80:3d:82:60:
                    94:bc:db:dd:17:1b:95:00:6a:81:56:b9:d5:a0:5c:
                    89:b9:ea:4b:bd:74:aa:40:37:6c:91:87:1a:25:dd:
                    f0:5e:4f:bb:17:d0:15:f5:55:e2:bd:3e:f2:ee:38:
                    39:d1:90:2d:bf:65:f1:49:14:91:b1:60:77:ce:ae:
                    9f:3c:7b:5d:54:e8:16:06:7f:c6:a2:6e:23:15:f3:
                    6c:43:45:2f:8a:82:12:eb:c2:4e:e3:1d:80:ad:87:
                    1c:bc:8a:ff:d5:68:b3:6e:8a:0b:3c:89:27:c1:fd:
                    b9:50:66:ad:f1:8e:99:04:53:52:e8:36:92:3e:2a:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:00:F9:1E:8C:1C:C0:25:80:F0:91:E0:FF:E2:6E:E9:74:7A:74:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e78d06-eac0-4f0b-9226-d243d21015c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:de:58:9e:d1:89:c8:f6:b2:f8:aa:05:6b:74:f1:d1:5a:95:
         1d:2f:f7:c2:1b:fe:71:7e:46:60:6d:d1:9c:a0:c4:7f:70:b8:
         bc:55:ae:24:8f:c3:3c:d3:e3:f4:4c:c1:62:74:9d:d0:96:ae:
         b9:87:e3:5c:78:73:2d:19:8b:5d:9b:3a:c0:22:e6:88:7d:b1:
         db:f0:76:f3:66:9d:27:23:f7:7e:8d:b9:b2:aa:e0:86:0e:79:
         44:0e:ad:ea:4e:0a:08:f0:2f:18:f2:42:54:1b:cf:bb:7a:59:
         e3:23:c0:9f:cb:7c:24:aa:51:af:86:ff:82:62:1a:36:aa:5a:
         0e:99:53:12:8c:02:0d:4b:f2:90:5b:42:b1:09:6d:3b:a0:dd:
         4e:59:5f:7c:aa:14:84:44:63:90:14:bd:c4:d6:82:fb:09:1f:
         27:e8:ad:a0:cf:ef:b8:b9:d0:7f:f4:c7:83:66:b6:19:a1:2f:
         39:94:ec:b5:b7:eb:0e:37:0f:fc:65:3c:dd:b0:54:b8:6a:1f:
         e3:df:a9:fb:98:fc:90:3d:57:1a:20:74:c7:a8:0e:09:4a:6a:
         eb:d1:4b:c4:63:09:d5:1d:78:ef:69:00:01:85:a2:9f:45:c0:
         a4:ab:51:ca:09:a1:df:a3:56:85:fe:7d:24:c4:80:50:4e:93:
         0f:dc:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----