Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba6198e6-2dce-4551-9ed3-83e4bb88db0d.roa
File:                     ba6198e6-2dce-4551-9ed3-83e4bb88db0d.roa (raw, json)
Hash identifier:          Z/Yqhv12BfbyRbO8tSsg9hGHRPvfW/Kq4HlwV0XRmW8=
Subject key identifier:   05:4B:8B:07:D9:1A:1E:F6:24:93:2D:FB:E9:1F:10:6C:8A:D7:C4:63
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       248EFC817EB445EAF75B2C5E3219BB0845D45CDA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba6198e6-2dce-4551-9ed3-83e4bb88db0d.roa
Signing time:             Tue 14 Oct 2025 23:01:19 +0000
ROA not before:           Tue 14 Oct 2025 23:01:19 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8e:fc:81:7e:b4:45:ea:f7:5b:2c:5e:32:19:bb:08:45:d4:5c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 23:01:19 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=768e5bc2b3a0af66c899406e31b52ba787c4267b646094acecd2b10cdfa545a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:6f:26:47:b3:1c:a3:97:fc:ae:78:b1:c3:
                    9b:1c:3d:a9:78:52:66:0b:bf:e1:64:af:35:41:58:
                    4b:1e:03:e3:98:5b:a1:24:ee:85:41:e4:2a:d8:96:
                    d3:90:47:d1:2d:b0:f7:1e:e6:81:10:9a:75:9c:31:
                    5d:5e:96:54:56:aa:85:b2:84:d9:4f:97:93:d9:dc:
                    18:67:dd:2e:ac:86:5f:8e:1a:14:b7:5c:55:e7:67:
                    bd:f4:63:fa:f7:a7:f3:c8:fd:8d:a9:4b:d6:6d:7a:
                    0f:26:62:f4:98:1f:9c:76:76:d3:de:23:2e:d2:ac:
                    a2:4d:1c:2e:c2:38:ac:15:81:5c:ed:fe:f6:ca:9e:
                    6b:74:1d:d7:b8:8e:54:83:33:cb:52:4f:19:9c:2d:
                    c6:82:9b:3e:d4:1f:a6:5f:cc:f7:2f:65:e8:50:bd:
                    72:fe:03:73:28:9f:5c:6b:9a:22:7a:8e:38:99:73:
                    f3:8b:af:a2:43:6d:08:42:d5:88:29:56:fd:b7:d7:
                    1f:53:21:3f:93:41:81:96:70:36:af:b7:f0:36:8c:
                    50:47:5a:5b:cf:89:9f:1a:2a:36:78:5f:0b:3f:af:
                    64:12:67:97:55:be:d5:15:e2:da:4a:36:f6:ab:ef:
                    0e:4a:7f:77:14:f0:be:90:18:2b:91:39:e6:e5:98:
                    e9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4B:8B:07:D9:1A:1E:F6:24:93:2D:FB:E9:1F:10:6C:8A:D7:C4:63
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba6198e6-2dce-4551-9ed3-83e4bb88db0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b7:da:49:32:3a:0b:93:55:42:eb:a4:ea:14:b8:cb:24:08:
         31:02:e9:19:b5:a0:25:09:71:ba:d2:ae:be:55:03:fe:73:c2:
         3a:68:4c:82:b7:be:67:86:20:cd:7d:63:ba:14:24:6e:06:96:
         af:69:4d:ae:cc:5a:90:b1:1e:a8:4d:47:10:f1:13:55:5a:cc:
         95:f7:99:fa:92:21:67:44:c3:6a:2f:76:5a:49:04:79:b9:ad:
         4e:01:f2:38:36:cc:76:d8:50:39:4d:33:a2:2b:b7:c7:44:9c:
         10:14:5b:b2:33:85:28:ce:98:49:2a:1d:88:cf:f3:d6:88:88:
         3e:14:d4:ef:7e:1f:9b:61:45:d3:21:e8:5d:c6:29:4d:c6:5c:
         cd:c4:b2:6f:8a:87:20:3f:01:56:c3:bf:77:ef:63:4d:af:8d:
         dc:e1:61:22:25:d9:de:7f:16:24:7b:df:0a:16:b6:77:e5:a2:
         67:a4:8e:35:ae:68:49:c0:7a:f0:05:18:13:0d:2d:c8:65:40:
         fe:35:39:e4:b7:ce:eb:bc:00:55:62:39:81:fa:2a:74:57:f7:
         d0:fa:84:88:ac:3e:e0:20:64:2e:6a:d5:72:32:36:e9:1c:d1:
         81:a0:2a:52:c2:06:ab:32:4a:13:d5:01:4d:84:ba:c4:0b:27:
         44:fa:f9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----