Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1b3e2a-fcc2-4d87-a63e-fd726a2c28d3.roa
File:                     8f1b3e2a-fcc2-4d87-a63e-fd726a2c28d3.roa (raw, json)
Hash identifier:          jmAHY4hGG0zGPqIOCZMH3FoyVhntdifvabv7SGQxWJ0=
Subject key identifier:   E2:6F:44:38:6E:EF:CD:87:F1:91:95:57:EB:A6:39:81:B3:3A:B1:D5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AF71F46C0C1706B22D36AFC60C44E88ABADB578
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1b3e2a-fcc2-4d87-a63e-fd726a2c28d3.roa
Signing time:             Tue 14 Oct 2025 21:39:51 +0000
ROA not before:           Tue 14 Oct 2025 21:39:51 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.24.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f7:1f:46:c0:c1:70:6b:22:d3:6a:fc:60:c4:4e:88:ab:ad:b5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 21:39:51 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=23a4b2b4ee8385a2fab269b51475f2e59dd642a891a6cf941eeacefeab4fb749, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:66:43:46:3f:cd:f9:b3:f6:4c:21:91:bb:
                    f8:55:c8:c2:a6:ac:4e:b9:52:82:d9:f9:82:e6:66:
                    43:80:e1:92:ba:a0:89:7b:ca:8e:60:45:09:c9:1e:
                    57:d8:80:64:e5:8b:22:3a:e5:ef:5f:8d:63:67:27:
                    4a:c2:67:9d:12:f4:3d:00:c5:7d:c5:a1:eb:df:99:
                    bc:e1:a7:5e:d1:d4:cb:d2:8e:1a:72:e3:11:d1:09:
                    2c:41:9a:df:2b:d7:16:14:bb:3c:db:6d:73:83:f1:
                    39:3a:8b:7e:1e:24:82:fa:93:b9:0d:f4:84:cb:1e:
                    55:e7:65:8e:71:87:77:6f:59:70:90:42:02:9c:58:
                    93:48:7a:c5:82:2d:b0:32:99:51:5b:33:d8:df:a0:
                    af:67:7b:f2:0c:70:bb:bb:27:39:04:ea:2f:53:4a:
                    b5:9d:9b:37:6c:44:a9:28:e8:14:6a:71:0d:66:3f:
                    08:83:1b:09:91:a8:fe:43:85:23:39:4a:ad:49:20:
                    fd:65:06:c4:c4:d1:c7:86:4f:2e:12:7c:8b:57:b4:
                    2e:f3:b7:f3:46:5b:e1:19:fb:de:89:66:cc:bd:54:
                    ab:fe:b1:c8:fd:f8:7f:17:7f:ea:7b:87:d6:c4:ed:
                    69:85:3b:f6:0a:ea:82:c1:e2:09:3e:3c:8d:28:9a:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6F:44:38:6E:EF:CD:87:F1:91:95:57:EB:A6:39:81:B3:3A:B1:D5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f1b3e2a-fcc2-4d87-a63e-fd726a2c28d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d0:86:78:39:e5:0b:05:91:10:de:c1:b5:01:11:7f:43:d4:e4:
         18:60:6e:01:9a:10:e7:3e:c8:1d:bf:c7:bc:65:d3:e1:17:94:
         4c:25:60:01:93:33:c5:a0:bc:c7:b3:14:78:14:50:d4:61:70:
         ee:c6:5b:67:89:02:f2:d1:d8:9c:60:ba:23:23:a3:a1:2b:bb:
         c2:f6:55:1d:96:c9:30:18:be:b9:06:a4:0a:43:75:92:24:ad:
         73:bf:a1:90:bf:f8:c7:01:13:57:e8:7b:1d:ff:ec:87:81:56:
         d9:e2:1c:7e:91:df:7a:3c:f3:f7:ac:3f:29:83:66:e1:2a:1c:
         01:ea:dc:f0:72:37:3f:fe:97:06:35:0a:f5:c2:e9:78:6e:17:
         41:3e:12:57:25:a8:7c:01:26:3b:51:35:46:9e:90:01:88:d1:
         18:75:f9:f4:b5:08:a7:b6:87:eb:94:28:32:08:a3:b1:a9:f3:
         da:46:84:94:13:14:47:5c:b0:f5:1d:04:89:cb:a8:1f:26:4b:
         ff:59:20:1d:18:9a:2b:19:da:73:e3:49:0a:7c:6a:c6:5c:bd:
         05:40:07:a0:0e:df:78:a8:dd:22:99:cf:6e:28:c1:24:5f:a1:
         73:18:af:34:3a:14:c9:05:6a:83:8b:21:68:84:d8:be:03:6c:
         4a:7d:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----