Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d1a6e11-021f-4ccc-9f4d-839de01d190a.roa
File:                     9d1a6e11-021f-4ccc-9f4d-839de01d190a.roa (raw, json)
Hash identifier:          rUWfw/yg8ED5u0EovxiTtRwBFzwX4vWft1zk8GZMgpQ=
Subject key identifier:   FA:66:6A:05:4D:DC:7E:3C:FF:46:6D:55:43:E6:94:09:50:09:D5:A7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1D38CF8C4A8BC457FF41D55E107BC8C5B848B272
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d1a6e11-021f-4ccc-9f4d-839de01d190a.roa
Signing time:             Tue 14 Oct 2025 18:51:54 +0000
ROA not before:           Tue 14 Oct 2025 18:51:54 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:cf:8c:4a:8b:c4:57:ff:41:d5:5e:10:7b:c8:c5:b8:48:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:51:54 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=bd419ce6e59ae4c75f1e5cb60f050cc4e41da653ade3e51bbc781a284a521695, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:70:aa:b0:b5:29:2d:70:e7:f5:c8:ca:e8:dc:
                    9b:d8:31:c0:c9:10:d5:fa:62:89:9e:f5:0c:43:f3:
                    13:4b:ce:d8:5a:10:ac:e4:04:d5:57:0d:c3:d4:73:
                    f0:5f:a8:f3:c0:da:2a:e0:d6:60:21:ae:4a:cd:59:
                    8a:5a:51:84:64:24:2f:f4:6e:61:e1:07:05:60:f2:
                    7a:8f:ab:c8:59:6a:30:8d:b1:10:ec:3b:a8:19:92:
                    92:e8:08:c3:ab:95:33:d5:d8:dc:96:ac:9f:c6:82:
                    cb:9f:35:59:e4:fc:8a:ee:22:35:63:55:2f:c0:90:
                    bb:17:cf:d3:84:5f:4f:dd:6d:61:9c:6e:b6:f5:5e:
                    ab:89:12:67:dd:6d:4c:bf:e9:44:0d:4e:0c:49:1f:
                    f9:ae:62:7b:47:9f:a2:bb:3c:cb:fc:a3:ce:ad:50:
                    db:37:0e:3f:6c:29:02:4b:41:10:d1:c0:73:44:9a:
                    86:1b:c1:03:e5:ff:a7:86:30:1d:38:da:76:1b:37:
                    59:d1:fc:a0:18:0b:2a:c1:5c:14:a9:04:7e:31:97:
                    60:d4:35:12:e5:bf:07:8b:ad:d9:6f:d1:f0:dc:5e:
                    5d:68:26:3a:b9:85:5e:14:53:5a:cb:04:ba:0d:7d:
                    71:fb:77:a4:a8:e7:4c:e7:f2:67:d9:b3:93:db:af:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:6A:05:4D:DC:7E:3C:FF:46:6D:55:43:E6:94:09:50:09:D5:A7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d1a6e11-021f-4ccc-9f4d-839de01d190a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:0e:e4:00:d8:df:ae:94:25:af:af:1c:51:85:b0:83:22:28:
         6e:55:9a:c4:b0:13:e0:d7:64:23:d6:01:56:22:fa:64:4e:d0:
         bb:cd:5a:cb:47:ae:dc:af:2e:7c:aa:08:ab:3c:bb:bb:6d:7e:
         30:ce:80:5f:36:58:51:8c:ce:09:72:86:15:e7:e8:f7:cf:74:
         75:7b:f2:df:42:7b:37:4c:18:56:cf:b2:1b:35:82:1f:b3:26:
         44:a0:d7:d3:36:8e:46:b2:fa:d4:e3:11:d5:82:76:34:3e:75:
         45:21:28:2b:5b:87:f3:84:78:72:71:eb:90:b4:c0:2b:9d:01:
         8f:32:96:1b:e7:ce:64:69:e5:14:da:d5:05:e6:cb:75:1a:f6:
         da:92:32:3c:76:59:c6:a8:44:40:60:ba:c8:ec:38:29:9c:54:
         a0:8f:ac:d2:e0:b0:31:6a:23:d1:5b:f4:fd:19:97:4b:b6:ba:
         de:d6:84:45:9e:89:3a:ae:a4:75:12:65:e5:23:8c:d4:2c:f8:
         18:0e:30:4c:b7:ed:51:32:9e:ee:e0:66:45:f4:8f:37:41:c2:
         08:47:71:30:c6:a3:be:d9:1f:e5:9a:10:91:a9:8d:f0:2f:b5:
         e3:de:6d:d2:b6:42:64:fc:0b:47:a7:e6:70:02:d0:92:1d:1a:
         f9:93:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----