Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a35d510c-952e-49d3-a544-aa0601ba6eae.roa
File:                     a35d510c-952e-49d3-a544-aa0601ba6eae.roa (raw, json)
Hash identifier:          wYwTA+suOPjnDXIGH/FtJRVxuaH++o8WA+iCzSdJghA=
Subject key identifier:   90:8C:13:5F:9A:14:4C:30:D3:A8:4D:0F:FF:C9:81:C6:CC:7D:AF:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       16F9ACAC99640BA38ED7FB068A2F0D349E979BEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a35d510c-952e-49d3-a544-aa0601ba6eae.roa
Signing time:             Wed 08 Oct 2025 00:40:47 +0000
ROA not before:           Wed 08 Oct 2025 00:40:47 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f9:ac:ac:99:64:0b:a3:8e:d7:fb:06:8a:2f:0d:34:9e:97:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:47 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=b94b745e1d3c6a98d6b8035608d0c9c8afb2ef945beadde0db7913831854228e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:e1:2d:7a:6b:81:14:4e:c7:da:68:ff:96:
                    fe:9a:07:96:70:3f:7c:c5:e6:2f:36:ae:7f:a5:43:
                    bc:84:2c:03:d3:3c:55:51:f6:86:f1:b5:29:16:af:
                    da:6d:df:ba:4d:01:65:ec:7e:ba:c0:2e:b0:77:97:
                    24:f1:4a:42:d3:1e:89:e4:27:e2:11:97:66:75:40:
                    27:3e:be:ed:d6:27:83:a3:22:f4:19:8a:62:bb:e5:
                    0e:e2:65:f9:dc:a9:c3:5d:b5:1f:bf:fe:5e:ed:4c:
                    35:1c:18:27:94:c3:aa:54:e7:ad:3e:da:7e:cb:c5:
                    a3:f2:a1:60:90:32:70:e4:a2:31:0c:ed:47:19:1e:
                    4f:22:85:38:62:a6:43:d3:c6:35:ce:8a:b8:0e:76:
                    d3:6e:60:8d:77:f5:23:d9:5a:c6:66:6e:5d:88:6b:
                    94:82:57:71:f1:6b:2e:5d:67:67:d8:6d:a7:66:c7:
                    bd:8f:61:fa:f8:f7:05:17:af:7e:e8:37:68:3f:2a:
                    95:a2:9f:e1:7a:8d:27:35:d9:29:60:c3:d2:bc:12:
                    d1:00:21:ff:ce:39:50:24:c1:b6:c6:c1:76:4a:2f:
                    9b:29:ee:c5:98:b5:08:1c:57:85:7d:3d:0f:e1:1b:
                    83:be:39:47:5e:f8:11:c5:45:a6:20:1c:fa:8d:d7:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:13:5F:9A:14:4C:30:D3:A8:4D:0F:FF:C9:81:C6:CC:7D:AF:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a35d510c-952e-49d3-a544-aa0601ba6eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:70:a7:c5:4f:60:c9:cf:2c:21:c8:27:6f:c5:c0:9b:54:47:
         82:2c:d1:04:fb:cb:5e:b3:27:56:fb:9a:40:4d:89:76:05:5e:
         b5:55:44:52:b1:e0:1a:c1:29:95:68:fe:31:69:d4:65:f4:94:
         a2:7e:d0:18:de:30:2c:c6:4e:e6:9f:6b:62:25:b3:1c:54:52:
         5d:a1:26:1e:56:2c:a6:83:19:47:e7:cb:d2:2d:07:84:6c:a5:
         ec:8f:36:20:81:e3:16:6f:b0:94:f1:8f:00:39:9b:67:f8:57:
         d9:2a:ae:bd:0b:5f:c2:32:3b:76:4e:ed:92:b9:79:3e:42:24:
         4b:65:10:d1:4c:3f:bf:9f:37:16:96:73:30:f9:30:70:03:06:
         5b:90:87:d1:82:86:cd:4f:bc:0d:cc:2a:bd:68:1f:83:64:ab:
         32:19:c9:26:dd:62:98:f1:06:38:8e:f8:40:f9:6c:a1:75:f1:
         28:9e:4a:32:23:9b:b7:21:5b:c4:dd:7b:5b:50:23:62:4b:69:
         18:88:13:74:f9:5d:90:e3:d7:cc:90:36:54:cb:7f:e4:2b:a5:
         49:a8:c9:96:9a:95:ac:ca:96:39:a7:92:f7:aa:61:db:19:c4:
         b9:a2:f2:6a:fd:89:6c:9e:e7:ad:d0:22:7d:a3:24:2e:7f:10:
         36:85:73:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFvmsrJlkC6OO1/sGii8NNJ6Xm+4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDA0MDQ3WhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTRiNzQ1ZTFkM2M2YTk4ZDZiODAzNTYwOGQwYzljOGFm
YjJlZjk0NWJlYWRkZTBkYjc5MTM4MzE4NTQyMjhlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfkOEtemuBFE7H2mj/lv6aB5ZwP3zF5i82rn+lQ7yELAPT
PFVR9obxtSkWr9pt37pNAWXsfrrALrB3lyTxSkLTHonkJ+IRl2Z1QCc+vu3WJ4Oj
IvQZimK75Q7iZfncqcNdtR+//l7tTDUcGCeUw6pU560+2n7LxaPyoWCQMnDkojEM
7UcZHk8ihThipkPTxjXOirgOdtNuYI139SPZWsZmbl2Ia5SCV3Hxay5dZ2fYbadm
x72PYfr49wUXr37oN2g/KpWin+F6jSc12Slgw9K8EtEAIf/OOVAkwbbGwXZKL5sp
7sWYtQgcV4V9PQ/hG4O+OUde+BHFRaYgHPqN1/IbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkIwTX5oUTDDTqE0P/8mBxsx9r6IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzNWQ1MTBjLTk1MmUtNDlkMy1hNTQ0LWFhMDYwMWJhNmVhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjljgwDQYJKoZIhvcNAQELBQADggEBAEVwp8VPYMnPLCHIJ2/FwJtUR4Is
0QT7y16zJ1b7mkBNiXYFXrVVRFKx4BrBKZVo/jFp1GX0lKJ+0BjeMCzGTuafa2Il
sxxUUl2hJh5WLKaDGUfny9ItB4RspeyPNiCB4xZvsJTxjwA5m2f4V9kqrr0LX8Iy
O3ZO7ZK5eT5CJEtlENFMP7+fNxaWczD5MHADBluQh9GChs1PvA3MKr1oH4NkqzIZ
ySbdYpjxBjiO+ED5bKF18SieSjIjm7chW8Tde1tQI2JLaRiIE3T5XZDj18yQNlTL
f+QrpUmoyZaalazKljmnkveqYdsZxLmi8mr9iWye563QIn2jJC5/EDaFc/k=
-----END CERTIFICATE-----