Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aadb5338-c6eb-45d9-87bf-b95d066eb7c6.roa
File:                     aadb5338-c6eb-45d9-87bf-b95d066eb7c6.roa (raw, json)
Hash identifier:          7O3l6HFr5B8hsKPq36vP2OLjWdDJAHLQVFmKZBkJZxU=
Subject key identifier:   2C:3F:C1:D3:D5:67:24:83:A7:25:A3:59:01:F0:1B:F6:8C:14:88:B8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6CA91AD2FFA4275B790D14D602D4C665F0EA5FA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aadb5338-c6eb-45d9-87bf-b95d066eb7c6.roa
Signing time:             Wed 15 Oct 2025 17:52:48 +0000
ROA not before:           Wed 15 Oct 2025 17:52:48 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a9:1a:d2:ff:a4:27:5b:79:0d:14:d6:02:d4:c6:65:f0:ea:5f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:52:48 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=a87f50c03f775cdc45409154699eb14f8910f59f539890502f25db6132344f93, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:d5:42:c2:60:6f:27:56:d3:69:d2:80:ec:
                    eb:7f:e9:2a:f7:cd:cf:a6:49:0d:7b:2e:ca:c2:d9:
                    6e:6e:e4:34:54:56:4e:5d:a7:c4:0a:f8:fe:62:c2:
                    d0:06:d8:68:b8:64:8e:ed:55:4a:89:15:1a:7c:43:
                    b0:29:2a:37:54:f4:5a:d8:8c:c3:08:60:35:dd:34:
                    15:6a:f8:f5:61:41:1a:a7:44:de:7c:ac:6c:5f:36:
                    a1:4d:f0:3f:52:80:d3:ae:35:5c:81:e7:8d:8e:f5:
                    b3:d2:72:77:5e:42:ea:1d:97:e7:89:db:47:be:7d:
                    ed:b2:30:10:6e:8a:8c:1f:27:87:c0:d6:c7:30:66:
                    23:2a:34:3b:ca:cb:ef:82:e6:31:fd:38:c5:85:58:
                    cf:e5:4a:39:b6:ca:c6:5b:ee:fc:57:24:8e:77:dd:
                    9d:81:46:36:ad:89:19:00:77:96:61:73:47:10:34:
                    3d:d3:44:89:d5:80:ee:71:9e:e9:09:80:d8:97:56:
                    c8:c3:c5:0d:63:4c:ce:d1:c5:71:30:05:83:35:fb:
                    0c:e8:5e:11:62:a0:63:4a:fa:7a:32:06:83:09:40:
                    18:8f:b5:42:09:c6:b7:19:7d:b5:ed:55:87:78:96:
                    80:63:8b:6d:7b:80:91:29:5a:e0:9c:bb:0a:8b:ee:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3F:C1:D3:D5:67:24:83:A7:25:A3:59:01:F0:1B:F6:8C:14:88:B8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aadb5338-c6eb-45d9-87bf-b95d066eb7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:50:14:f4:cd:d0:ef:c7:a7:7e:dc:c4:c4:8f:2a:96:3e:cd:
         49:2b:6f:c2:27:78:ca:d7:ce:88:ed:52:36:1a:94:a1:2c:a8:
         5b:e3:26:47:d8:48:de:b6:47:c8:7c:5c:e9:06:93:4a:7e:39:
         8a:0b:1e:08:52:4a:a1:d2:5f:37:c4:61:b7:41:79:8c:99:1a:
         9a:9d:02:2e:72:6c:7e:e1:ad:1b:a2:95:18:d1:38:4d:1b:09:
         3e:a1:a4:ba:2f:bd:0a:de:bd:93:e1:41:e9:27:df:22:93:1b:
         c6:9d:cd:54:59:8d:bf:bd:a6:b7:a0:d3:fb:c4:e9:d4:01:da:
         f2:4d:45:e2:03:16:4d:9e:96:e6:44:e2:c9:4b:30:2d:e4:6a:
         80:05:d3:00:26:3a:1b:b1:33:b8:9e:50:cd:85:05:bf:d1:c5:
         50:58:3b:dd:fa:dc:50:cc:4e:0f:5e:a5:9f:d1:06:bf:79:70:
         aa:c6:f0:bd:e1:89:ce:f6:a5:16:4c:b9:7b:9e:4f:1b:7a:5f:
         8a:30:89:f6:63:14:d3:a0:ca:89:76:e0:92:1f:2d:1e:ab:82:
         ad:6c:a5:10:99:89:3f:f8:3c:f1:58:19:6c:25:95:f3:ad:70:
         b0:2e:30:84:21:59:a0:b4:30:b6:bc:01:0a:30:4c:53:f1:bc:
         3e:e6:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----