Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b5f6-6d3f-49f3-a671-bc540fce4cea.roa
File:                     8c71b5f6-6d3f-49f3-a671-bc540fce4cea.roa (raw, json)
Hash identifier:          8F8S65UQDGfUqgZu4RL/DR2vb353xxBjh1BE3y32Wg4=
Subject key identifier:   0B:B4:D3:DD:C0:55:5F:79:A6:F3:76:BC:68:4B:91:F3:90:D9:9E:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E1F16124E2DD0F5D4C099A94A9A3C11651A24C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b5f6-6d3f-49f3-a671-bc540fce4cea.roa
Signing time:             Tue 14 Oct 2025 22:01:11 +0000
ROA not before:           Tue 14 Oct 2025 22:01:11 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.168.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:16:12:4e:2d:d0:f5:d4:c0:99:a9:4a:9a:3c:11:65:1a:24:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:01:11 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=189898693430db70384046a53a867268683304a6f0fa7a69c6a667a462080b58, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:5f:13:43:20:fa:81:00:70:a7:1a:a6:1b:
                    27:5e:36:2b:3d:d3:aa:db:16:33:2f:5f:ba:0a:74:
                    9e:71:4b:b3:80:4a:1a:14:7b:68:78:86:84:7c:28:
                    2d:2d:c1:19:02:cd:1e:bd:f6:6d:7d:18:07:67:83:
                    cb:8c:1c:1e:94:50:ee:9d:12:a5:dd:45:12:cf:e7:
                    d5:6a:87:b1:9d:e0:9c:5e:24:54:d8:0b:2d:b5:50:
                    f4:16:e0:f1:ba:76:ca:ab:da:6c:44:11:dc:39:4e:
                    c4:47:c1:ce:70:15:25:06:5c:25:f9:17:34:16:46:
                    e5:4f:ab:7f:e6:cb:40:ba:61:1d:52:b3:1b:36:7e:
                    c6:8e:d2:f4:34:39:f4:6f:a2:ec:f1:1a:ec:d3:15:
                    5c:1d:50:7e:86:fa:59:38:45:ac:08:dd:17:d9:2a:
                    55:6c:41:ec:94:3f:0b:4c:09:7b:f6:f2:57:d7:98:
                    5d:39:83:37:ab:8f:47:3d:54:07:aa:b7:da:9e:c6:
                    37:ab:b7:80:90:78:76:3a:7d:60:71:10:a2:82:22:
                    0b:e6:31:f8:6a:73:fc:7e:ca:f2:88:46:f0:05:2f:
                    f8:e4:99:9d:e4:1d:1e:f0:9b:b6:20:0b:9f:14:cf:
                    94:11:ef:fa:50:97:2e:d9:29:6d:c5:a9:6b:ad:c4:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B4:D3:DD:C0:55:5F:79:A6:F3:76:BC:68:4B:91:F3:90:D9:9E:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c71b5f6-6d3f-49f3-a671-bc540fce4cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:0e:64:6b:41:1d:65:a8:0b:5e:6e:f3:08:56:de:db:1b:e5:
         fc:be:fd:c0:15:a5:6b:1f:e8:83:ee:0e:41:15:c1:ae:17:61:
         48:16:1c:dd:0c:94:2b:04:d1:2a:55:31:61:57:63:af:26:bf:
         a3:01:4a:16:71:0d:1e:f2:88:90:59:1c:c2:44:cc:00:e0:4a:
         b5:a3:2f:ee:2d:a0:90:44:db:4a:1a:ce:c4:df:11:de:35:25:
         de:2b:7a:82:ab:93:95:f7:3c:42:7a:f4:ea:02:1d:d9:b2:66:
         14:f9:ce:c0:aa:ba:63:23:c3:64:77:6a:0c:f5:28:5e:30:8d:
         c5:27:ea:eb:1c:10:48:ff:61:3f:f5:54:ae:9f:87:fa:16:d8:
         b5:90:d1:e3:16:43:e1:00:a1:4f:a4:c8:72:ea:b4:d0:c2:c9:
         b5:41:ae:dd:03:59:33:20:da:74:dc:4f:56:25:f4:fc:c1:0c:
         85:70:bd:62:4c:dc:86:ad:eb:f1:0f:50:0b:25:12:d5:64:3f:
         df:08:94:51:ff:80:8f:a1:74:0f:26:8a:b7:8b:ad:97:a7:54:
         35:03:02:8b:74:6b:7f:8f:37:d5:f6:12:95:62:2b:ab:ae:02:
         c6:bc:53:d1:4a:48:d8:16:ab:a2:8d:6d:51:7e:2e:ba:bb:3d:
         d3:c9:08:7b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPh8WEk4t0PXUwJmpSpo8EWUaJMIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIwMTExWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AxODk4OTg2OTM0MzBkYjcwMzg0MDQ2YTUzYTg2NzI2ODY4
MzMwNGE2ZjBmYTdhNjljNmE2NjdhNDYyMDgwYjU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Jl8TQyD6gQBwpxqmGydeNis906rbFjMvX7oKdJ5xS7OA
ShoUe2h4hoR8KC0twRkCzR699m19GAdng8uMHB6UUO6dEqXdRRLP59Vqh7Gd4Jxe
JFTYCy21UPQW4PG6dsqr2mxEEdw5TsRHwc5wFSUGXCX5FzQWRuVPq3/my0C6YR1S
sxs2fsaO0vQ0OfRvouzxGuzTFVwdUH6G+lk4RawI3RfZKlVsQeyUPwtMCXv28lfX
mF05gzerj0c9VAeqt9qexjert4CQeHY6fWBxEKKCIgvmMfhqc/x+yvKIRvAFL/jk
mZ3kHR7wm7YgC58Uz5QR7/pQly7ZKW3FqWutxCI/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUC7TT3cBVX3mm83a8aEuR85DZnhYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjNzFiNWY2LTZkM2YtNDlmMy1hNjcxLWJjNTQwZmNlNGNlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjVKgwDQYJKoZIhvcNAQELBQADggEBAKUOZGtBHWWoC15u8whW3tsb5fy+
/cAVpWsf6IPuDkEVwa4XYUgWHN0MlCsE0SpVMWFXY68mv6MBShZxDR7yiJBZHMJE
zADgSrWjL+4toJBE20oazsTfEd41Jd4reoKrk5X3PEJ69OoCHdmyZhT5zsCqumMj
w2R3agz1KF4wjcUn6uscEEj/YT/1VK6fh/oW2LWQ0eMWQ+EAoU+kyHLqtNDCybVB
rt0DWTMg2nTcT1Yl9PzBDIVwvWJM3Iat6/EPUAslEtVkP98IlFH/gI+hdA8mireL
rZenVDUDAot0a3+PN9X2EpViK6uuAsa8U9FKSNgWq6KNbVF+Lrq7PdPJCHs=
-----END CERTIFICATE-----