Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4fbd7db-4065-473e-9370-6225c78c886f.roa
File:                     c4fbd7db-4065-473e-9370-6225c78c886f.roa (raw, json)
Hash identifier:          yzxS0N2OyESZO+c74N4OiebYhxe3k/KW41cbxra7nCA=
Subject key identifier:   69:3B:68:F8:2D:39:6F:AE:BA:CF:4B:53:4C:39:AE:8E:57:D8:0D:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3AA71E753FA085A25289B765062CE9DBEC4AFA8B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4fbd7db-4065-473e-9370-6225c78c886f.roa
Signing time:             Tue 14 Oct 2025 23:40:28 +0000
ROA not before:           Tue 14 Oct 2025 23:40:28 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:1e:75:3f:a0:85:a2:52:89:b7:65:06:2c:e9:db:ec:4a:fa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 23:40:28 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=ad6949c00463fc758e15c0b7c89f2094d58b93f6c91a82488c882a21f107c8df, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:df:20:95:15:32:9d:0b:ff:7d:c1:59:5d:
                    d6:97:fa:8b:55:39:43:4b:94:64:50:18:98:85:6c:
                    00:f0:77:9d:97:3c:e1:04:12:5e:ec:32:ba:e1:08:
                    ab:48:a6:3c:10:a4:fb:c6:db:cb:35:3f:13:e6:5c:
                    4d:9a:ff:5b:84:cf:1f:21:f1:39:ef:60:47:32:eb:
                    df:d9:4a:b4:e4:92:37:50:d6:4a:b7:20:90:9a:13:
                    32:b8:d3:26:74:c2:11:6a:fd:f7:dc:36:19:82:65:
                    91:51:77:ca:71:5a:1e:d0:e5:2e:be:4c:31:9a:50:
                    77:79:06:97:94:6d:7e:69:6f:5d:40:fb:ca:63:9a:
                    ec:08:75:1c:76:98:98:ce:18:3c:c0:70:88:ae:a2:
                    19:be:c9:ec:9d:b1:47:1b:d9:db:1b:17:ef:0a:98:
                    bd:cc:ac:3b:2d:b7:7a:b8:e1:66:3e:c2:64:de:a8:
                    1c:7b:d9:50:1f:7e:7a:f8:a6:9a:1c:c8:14:13:64:
                    66:23:d3:d8:3c:ff:af:9f:ae:48:44:c3:e7:39:b3:
                    1c:3e:39:aa:3a:66:1a:bb:d4:d0:f7:a7:d9:fe:27:
                    88:12:f0:4f:6e:dd:5f:88:1a:b7:08:1c:0e:c3:e6:
                    9e:c1:23:f9:39:a9:ee:42:a1:6f:ee:28:d5:36:ba:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3B:68:F8:2D:39:6F:AE:BA:CF:4B:53:4C:39:AE:8E:57:D8:0D:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4fbd7db-4065-473e-9370-6225c78c886f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:d2:88:9c:83:e5:e1:cc:9e:65:b8:46:b2:b2:1d:7b:0c:
         d4:3c:a0:5f:51:e9:24:a0:fd:49:cb:f8:02:92:96:b3:8d:ec:
         82:45:19:60:3e:56:4b:e8:4f:44:bd:2b:6e:a6:cc:eb:e2:ca:
         1b:0c:f3:88:af:ba:a7:b5:21:bd:fd:70:2e:d1:74:f1:c3:23:
         1d:d9:d5:b3:b1:5b:0d:d4:9b:4e:a6:02:55:78:9f:09:3d:40:
         bc:96:2f:13:05:ee:21:44:6e:97:09:1b:f2:20:6d:70:9a:c8:
         b3:ab:06:e6:3b:18:52:d2:9b:c2:0e:1f:3f:3f:e0:93:f4:57:
         77:b9:01:8b:f8:36:d1:3e:38:85:72:a3:4c:32:47:9a:97:c9:
         19:17:79:49:34:89:17:f5:58:f3:37:78:7b:cd:0c:b9:6c:4b:
         da:7c:71:3b:1c:f4:cd:71:83:55:03:74:21:d1:19:62:97:9e:
         a9:5d:a4:57:5f:6f:96:96:6e:cc:16:7e:8e:0e:91:f2:d9:20:
         65:a3:77:67:77:77:45:75:1a:85:fa:4d:af:32:e1:8b:69:42:
         dc:71:f3:a1:31:08:84:0a:8a:aa:62:56:20:96:67:e9:06:71:
         10:0f:a2:5d:0b:36:fe:80:85:bf:74:b9:90:3d:4d:2b:a3:c8:
         36:cb:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----