Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af2ec58-2e87-41ab-b943-07aa088ca0d5.roa
File:                     8af2ec58-2e87-41ab-b943-07aa088ca0d5.roa (raw, json)
Hash identifier:          ShgR/OkmH73Fx1F9dVv+qu1Wv2DSpJwKYBN3zf7wv9s=
Subject key identifier:   CA:76:63:B2:07:17:AD:67:3B:E2:E3:B4:B1:E0:91:12:E1:55:E5:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3A1DDE3A2233F12B30969AEB71A460F305D59C70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af2ec58-2e87-41ab-b943-07aa088ca0d5.roa
Signing time:             Wed 15 Oct 2025 18:21:15 +0000
ROA not before:           Wed 15 Oct 2025 18:21:15 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1d:de:3a:22:33:f1:2b:30:96:9a:eb:71:a4:60:f3:05:d5:9c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:21:15 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=96c1884488d6cd767af27ca5a3881f45c75cea06417bac66ff5d740c6f900a9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:cb:b9:b2:a0:d1:bd:ea:c8:f8:26:9e:db:
                    fb:2e:06:09:d3:16:93:e5:ee:9e:64:e3:d0:dd:bd:
                    05:cb:ac:14:5f:35:c1:c9:16:0f:32:8c:a1:c8:37:
                    db:21:5f:ac:6e:ab:51:b8:4c:a7:d4:b7:63:90:72:
                    f1:12:84:c9:bd:45:a0:1f:88:fc:c3:f1:5b:05:76:
                    a4:89:08:a5:c6:26:92:26:46:76:60:c3:9d:8d:c2:
                    d6:f0:b7:d5:94:48:04:77:80:a6:e7:70:54:2c:53:
                    7e:a1:88:0b:79:c2:0c:f3:7c:c9:3c:9c:a5:47:81:
                    14:1b:23:20:44:9c:61:a3:91:b3:8d:58:53:97:72:
                    2f:af:bd:c6:80:d3:c4:fa:65:4d:61:d9:95:fb:b5:
                    52:e9:10:21:7e:2d:fc:f0:f7:96:6f:46:dd:ce:87:
                    c4:4f:99:b8:b7:a5:e4:d9:b3:ad:d7:59:56:b9:56:
                    2f:73:c8:d2:43:b9:4d:d6:ba:5d:d3:f5:fd:28:9d:
                    9c:7e:fc:ec:5d:41:9f:df:b7:ec:56:db:a3:f0:e8:
                    37:48:d8:47:1e:9a:f7:fb:06:88:be:76:00:4a:be:
                    88:96:a8:7f:63:ed:c6:9e:cd:05:3f:8c:ff:bc:42:
                    32:89:e7:3d:38:7e:20:61:89:5b:1b:d2:e9:b2:93:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:63:B2:07:17:AD:67:3B:E2:E3:B4:B1:E0:91:12:E1:55:E5:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8af2ec58-2e87-41ab-b943-07aa088ca0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:31:b4:6f:ca:db:c5:c4:df:e4:c9:39:58:b0:81:d3:fd:
         fa:7e:6a:9b:65:f0:d3:ea:e1:54:33:89:34:78:53:7f:95:25:
         44:d1:2c:58:81:88:bf:8a:82:f9:db:78:35:a3:3c:8e:37:49:
         25:8e:f8:99:35:1c:e8:bb:56:c9:63:71:d7:65:c4:9a:04:b1:
         11:a4:16:0d:86:14:0b:16:e0:a3:7c:05:58:97:28:a3:82:45:
         c0:92:8e:79:27:3a:8d:90:bb:11:82:c5:e0:76:e4:a7:17:0c:
         28:f9:2f:1b:c1:7e:57:72:d8:e8:cd:a5:af:13:b1:f5:cc:81:
         cd:85:49:9f:52:17:e8:c0:d2:5f:19:c7:77:20:a0:de:72:e2:
         eb:cd:6a:73:32:b8:33:15:be:3d:4c:fb:24:48:7c:47:44:82:
         f0:3c:c2:8e:47:a1:f4:11:7a:ab:2d:f9:09:05:89:fd:88:af:
         0e:c6:15:b2:3c:8e:1f:56:4a:a9:0f:0f:76:01:6a:20:f7:f5:
         24:79:25:a3:ce:9b:22:c9:13:a4:39:eb:2b:35:1a:14:0d:ff:
         3c:24:f9:f4:73:be:79:f8:02:ce:d4:6e:bc:18:eb:fe:23:49:
         d8:18:32:c7:07:2e:87:58:2c:86:9f:63:e6:0d:e0:d4:67:81:
         e7:94:3d:46
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOh3eOiIz8SswlprrcaRg8wXVnHAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTgyMTE1WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NmMxODg0NDg4ZDZjZDc2N2FmMjdjYTVhMzg4MWY0NWM3
NWNlYTA2NDE3YmFjNjZmZjVkNzQwYzZmOTAwYTlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVacu5sqDRverI+Cae2/suBgnTFpPl7p5k49DdvQXLrBRf
NcHJFg8yjKHIN9shX6xuq1G4TKfUt2OQcvEShMm9RaAfiPzD8VsFdqSJCKXGJpIm
RnZgw52Nwtbwt9WUSAR3gKbncFQsU36hiAt5wgzzfMk8nKVHgRQbIyBEnGGjkbON
WFOXci+vvcaA08T6ZU1h2ZX7tVLpECF+Lfzw95ZvRt3Oh8RPmbi3peTZs63XWVa5
Vi9zyNJDuU3Wul3T9f0onZx+/OxdQZ/ft+xW26Pw6DdI2Ecemvf7Boi+dgBKvoiW
qH9j7caezQU/jP+8QjKJ5z04fiBhiVsb0umyk93PAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUynZjsgcXrWc74uO0seCREuFV5Z4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhZjJlYzU4LTJlODctNDFhYi1iOTQzLTA3YWEwODhjYTBkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZjVgAwDQYJKoZIhvcNAQELBQADggEBAI+BMbRvytvFxN/kyTlYsIHT/fp+
aptl8NPq4VQziTR4U3+VJUTRLFiBiL+KgvnbeDWjPI43SSWO+Jk1HOi7Vsljcddl
xJoEsRGkFg2GFAsW4KN8BViXKKOCRcCSjnknOo2QuxGCxeB25KcXDCj5LxvBfldy
2OjNpa8TsfXMgc2FSZ9SF+jA0l8Zx3cgoN5y4uvNanMyuDMVvj1M+yRIfEdEgvA8
wo5HofQReqst+QkFif2Irw7GFbI8jh9WSqkPD3YBaiD39SR5JaPOmyLJE6Q56ys1
GhQN/zwk+fRzvnn4As7UbrwY6/4jSdgYMscHLodYLIafY+YN4NRngeeUPUY=
-----END CERTIFICATE-----