Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/888cfca2-f7de-4b7e-b184-8bc4931feb4e.roa
File:                     888cfca2-f7de-4b7e-b184-8bc4931feb4e.roa (raw, json)
Hash identifier:          lTcTfwipDnaLYrL/5RlWzRlpTq5JWW1N2Nbwqq0uESY=
Subject key identifier:   ED:C8:39:FE:75:21:09:3F:49:14:B7:AF:1F:5D:90:A1:2A:F1:E9:31
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0866A10BE74F80000835572F4D04D6CC369607D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/888cfca2-f7de-4b7e-b184-8bc4931feb4e.roa
Signing time:             Wed 15 Oct 2025 17:21:13 +0000
ROA not before:           Wed 15 Oct 2025 17:21:13 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.68.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:66:a1:0b:e7:4f:80:00:08:35:57:2f:4d:04:d6:cc:36:96:07:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:21:13 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=b2cbf63c525e6338bcb6e311daa0b877da4d6df8fef422557cd751995da78e94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:96:fb:46:03:8b:44:86:9c:4c:95:21:06:
                    21:dc:63:78:c7:24:03:d7:1c:75:ee:0e:8d:5a:09:
                    06:69:93:61:f7:f2:59:40:8d:36:22:02:e4:f1:17:
                    49:4f:e4:ed:56:58:dd:3b:bf:96:1a:3e:cc:dc:a3:
                    85:c5:ca:6e:83:93:1f:a3:7c:4a:97:70:8e:3d:0a:
                    b2:20:4d:9b:54:27:1a:df:a7:6c:a7:50:b2:a8:71:
                    75:51:01:d4:82:cb:16:98:3a:18:e8:77:7e:3a:f2:
                    3e:da:50:8e:c3:55:4f:26:93:64:82:c5:78:fb:64:
                    3b:8a:3c:57:fc:7e:b1:b4:6c:c0:0d:21:2f:12:77:
                    78:0c:8c:83:03:97:6b:22:7e:42:57:3b:3d:9e:b6:
                    58:9a:d2:79:54:f6:17:2e:df:23:40:d3:e5:26:19:
                    56:cf:50:d6:cc:21:27:03:39:da:2f:5b:51:40:db:
                    ce:6b:5a:9b:09:ff:59:37:09:37:45:91:44:95:6a:
                    60:49:df:5b:71:ca:3d:c5:3f:3a:e6:d0:06:3c:25:
                    49:58:f6:64:ed:01:4b:8e:72:5f:d0:d6:45:a6:03:
                    28:28:c9:d1:6c:6b:c9:74:0f:c4:21:85:c0:6c:49:
                    c0:5c:e0:77:35:11:0f:1e:88:16:a2:5d:ca:86:d1:
                    67:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:39:FE:75:21:09:3F:49:14:B7:AF:1F:5D:90:A1:2A:F1:E9:31
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/888cfca2-f7de-4b7e-b184-8bc4931feb4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:33:1e:14:4b:c0:15:82:67:94:74:78:fc:18:e8:9b:a6:
         42:de:2e:df:d5:ab:a4:8a:b1:a8:d0:20:9f:01:6b:09:6e:ff:
         cb:fb:43:b7:9f:3b:78:66:d7:2b:fd:93:2c:9d:47:5d:b2:71:
         55:f6:b1:fa:53:48:41:b9:77:3c:72:25:17:02:cc:dc:1e:4f:
         e3:09:af:f4:0c:5b:7a:48:b9:21:21:05:6f:e7:01:8d:0b:1b:
         37:d2:22:5f:18:9d:7b:59:24:50:fa:c9:77:79:08:0c:b4:d6:
         bb:9b:f1:55:b0:7e:e3:03:af:9b:f7:b7:aa:d3:1a:d2:20:be:
         94:f8:51:7f:5e:6c:62:8e:4c:51:14:fc:ce:c8:67:3c:bb:c1:
         37:f2:a6:48:c0:fd:e5:50:33:53:6f:e4:5c:27:16:2e:96:af:
         06:ac:ab:5a:92:99:f2:e3:6f:c5:da:62:44:a7:6f:5e:d1:e0:
         66:b1:98:e3:0e:ee:04:d3:45:8d:21:2e:f0:db:5f:b0:19:6b:
         44:a0:45:ac:7a:c9:85:48:6a:19:18:c5:2e:e8:c1:e5:f0:8a:
         28:d3:08:b6:a3:43:9a:bb:44:d7:d7:78:dd:f1:54:ef:a4:01:
         12:2e:1c:63:04:dd:49:9d:ea:f9:41:ae:c6:18:7c:a5:cd:6a:
         03:3f:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----