Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d2f5ea-ffb3-4987-bbf7-406d27f262af.roa
File:                     96d2f5ea-ffb3-4987-bbf7-406d27f262af.roa (raw, json)
Hash identifier:          aRjIRsIS+FFETTWPI1tsER21ME7u9m07WV4Ms/HkcLY=
Subject key identifier:   CB:DC:23:5E:C5:B4:DA:52:58:06:3D:52:43:3C:F7:A8:93:D3:0B:7D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3156233B50E28C5B8C6E4F417EA65F9D8A4D4881
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d2f5ea-ffb3-4987-bbf7-406d27f262af.roa
Signing time:             Wed 15 Oct 2025 17:21:53 +0000
ROA not before:           Wed 15 Oct 2025 17:21:53 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.72.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:23:3b:50:e2:8c:5b:8c:6e:4f:41:7e:a6:5f:9d:8a:4d:48:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:21:53 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=c69d24b194112ca4965f11245df50884dbd6af89e72fc540e43c4716d7fdecd7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:c6:9d:4d:d3:34:80:23:2a:9e:00:71:a3:
                    a1:af:0d:21:84:0d:01:d5:9f:f5:0e:1a:f1:36:33:
                    63:73:38:ab:8d:8d:eb:06:65:46:b3:80:ba:20:e3:
                    48:0b:3a:e5:40:b4:6c:3a:2a:6c:f4:7f:de:6e:32:
                    58:37:2a:44:10:41:0f:43:c1:e6:30:97:a0:cd:91:
                    c8:9d:7b:94:df:38:50:91:4c:38:32:5a:96:20:d0:
                    a7:7b:84:1a:3e:e3:1e:f7:2a:fd:ba:85:8d:3d:0a:
                    17:3d:b7:2e:f1:d2:70:65:34:ab:74:9c:85:f6:7d:
                    a5:72:58:be:46:97:06:f5:59:86:eb:e8:68:b6:fb:
                    e2:ad:c7:85:b5:a1:73:2c:a4:b7:b5:08:73:8c:f5:
                    0f:9d:b5:e8:7e:ba:39:a0:1c:8e:2e:cd:be:3e:e7:
                    4d:60:05:01:d2:15:59:2f:eb:17:00:55:2a:d3:56:
                    4e:f5:04:74:66:5b:40:02:48:86:c4:be:10:03:21:
                    ea:50:d3:4f:de:62:cf:85:e3:e1:60:23:b5:5c:6c:
                    ca:35:e7:81:da:35:c5:e1:05:a0:cd:af:16:c7:91:
                    31:48:5a:dd:48:30:13:6a:e2:bc:c1:15:ed:6e:0a:
                    01:6f:1b:9f:51:24:ee:8d:52:ff:b4:c4:d1:21:17:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DC:23:5E:C5:B4:DA:52:58:06:3D:52:43:3C:F7:A8:93:D3:0B:7D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96d2f5ea-ffb3-4987-bbf7-406d27f262af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:11:05:de:f2:e5:30:f0:67:01:d5:bf:80:59:b0:7a:23:9f:
         d0:25:75:a9:73:f0:41:1c:18:55:dd:f7:09:04:e2:ab:bd:e4:
         21:90:12:d4:d1:b9:69:f1:a3:8d:0e:b4:cf:46:00:30:4b:ae:
         4e:53:4a:ed:34:f1:43:f7:8f:8c:69:2b:f2:d2:f2:72:33:c1:
         14:b7:62:99:36:65:03:50:cd:55:cd:53:40:18:11:0f:14:b3:
         c9:94:99:10:e9:c4:9a:17:02:ed:50:14:0b:ce:83:1f:30:00:
         d4:50:2f:e7:b2:fa:ea:89:87:08:e4:20:46:bb:d6:69:bf:e4:
         71:5f:d4:2b:39:ab:d2:cc:93:76:8d:56:3e:86:2d:6a:71:ff:
         03:89:21:c6:e8:7d:7d:a7:30:38:75:56:9b:04:f1:1c:82:45:
         67:9f:69:7f:c5:83:97:f7:44:c8:49:df:ed:6f:3c:ea:4c:31:
         2d:14:3e:12:4a:07:da:30:37:3e:4b:40:e6:1e:88:df:6f:45:
         a7:e1:38:f3:74:62:4a:c8:56:27:c3:a3:82:03:e0:61:84:94:
         5e:0e:76:d0:32:6c:a0:cf:e3:4f:a2:22:19:75:59:5b:7c:c6:
         de:9c:fb:c9:e4:ee:bb:fa:7a:ca:aa:80:ad:3b:d4:74:54:f6:
         5b:73:26:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----