Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c599ffe-d296-458b-bb0c-c3477161d2f9.roa
File:                     8c599ffe-d296-458b-bb0c-c3477161d2f9.roa (raw, json)
Hash identifier:          1KE9veImwV1mINYcyF0hRDZYId7CxYd3oBTy3F+u0wo=
Subject key identifier:   A7:4C:E0:AA:19:99:80:49:DA:5E:CE:E3:69:76:D1:1E:EB:0D:2D:D6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       484BDB50DAA0990AE1A6942DA53C541A0B1DC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c599ffe-d296-458b-bb0c-c3477161d2f9.roa
Signing time:             Wed 15 Oct 2025 18:02:02 +0000
ROA not before:           Wed 15 Oct 2025 18:02:02 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4b:db:50:da:a0:99:0a:e1:a6:94:2d:a5:3c:54:1a:0b:1d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:02:02 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=e7d979587867dbbc86e5b8cba44f92c5a570b51cc80b638343adb4f636747e79, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:29:c7:df:81:7f:1a:55:34:f9:15:b5:9a:
                    5a:7b:e7:cf:a7:c6:fc:d9:4f:3b:a3:be:29:03:c4:
                    41:99:63:1d:23:9b:24:5a:fc:22:30:90:cf:bb:62:
                    6b:7b:11:44:ef:d6:86:08:8c:80:f1:15:66:b5:aa:
                    0a:94:32:80:b5:0b:8b:c7:c6:ab:a9:18:2c:5b:be:
                    39:0b:ae:fe:7c:12:f6:21:ff:22:71:8e:d9:14:83:
                    1f:cb:07:10:dd:90:8f:81:dc:2b:81:6e:6c:81:46:
                    39:77:b8:a1:b5:f2:0b:09:d0:37:42:3d:d7:ea:79:
                    6d:ce:c1:f4:c8:54:8c:31:43:fd:ac:73:a6:cc:6f:
                    0f:05:27:7b:c1:35:4c:09:6c:c5:a9:0c:9f:04:10:
                    39:dd:aa:3a:55:10:96:23:66:81:cf:33:a5:98:51:
                    9d:99:21:f5:95:65:08:34:b5:e3:b7:cb:47:4f:e4:
                    d2:68:0a:85:e4:c6:fc:8c:69:e9:a1:d8:8c:b8:b6:
                    90:6a:03:19:8f:a5:5c:4e:46:0f:48:44:4a:d6:67:
                    8c:4a:c0:23:68:e1:a3:64:4a:89:9e:f8:b8:78:e0:
                    a6:ce:a7:20:4d:7e:5b:a2:6b:0e:d1:01:86:5f:49:
                    f9:a2:ac:c4:f2:99:42:d5:f2:a8:30:16:32:78:08:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:E0:AA:19:99:80:49:DA:5E:CE:E3:69:76:D1:1E:EB:0D:2D:D6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c599ffe-d296-458b-bb0c-c3477161d2f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:03:c1:90:e4:b4:b0:26:aa:91:e7:d9:52:9f:99:a8:37:31:
         91:ea:ba:3e:aa:78:55:f2:77:ca:39:17:85:d0:ff:0f:a6:98:
         7a:5c:f5:29:03:10:a5:66:c1:6a:f2:db:ae:44:70:1e:6a:f5:
         49:a7:49:2b:90:19:05:04:60:d5:f2:89:ce:9c:c6:d4:d0:66:
         88:05:6b:99:be:83:1e:b1:17:bd:2a:ee:8b:96:ab:44:17:c7:
         15:b5:43:0d:04:27:49:70:44:4e:8d:68:4e:de:ec:b9:b1:c2:
         95:3e:f6:b7:f3:70:8f:eb:88:58:1c:e6:41:51:35:96:af:82:
         21:dd:af:6e:6e:6b:c2:4b:c2:12:9e:a9:42:0a:f2:46:4a:87:
         c8:1c:ac:cd:98:15:ae:40:3a:cf:7c:64:c0:44:9f:57:79:cc:
         4e:8d:bf:aa:5b:e8:31:45:8f:47:e5:3e:7e:70:69:49:e2:e8:
         f1:3b:c6:51:14:11:bc:89:98:9a:95:7c:55:01:18:55:42:00:
         cb:e8:d1:39:45:33:9d:3c:c3:c3:82:7c:28:4b:55:2d:9f:5d:
         a5:81:b8:77:db:ad:85:c9:ac:d7:c2:b0:bf:38:b0:c1:bf:2e:
         03:2b:ba:41:20:e9:2c:5f:cd:8d:e0:c7:4a:12:86:d0:ca:15:
         af:4f:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----