Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66a4a32-256c-41dd-805c-945e5d18221b.roa
File:                     c66a4a32-256c-41dd-805c-945e5d18221b.roa (raw, json)
Hash identifier:          xv2HzLChe4DtLrMSLgQO9wcgQao1nwmyFVIoyfaJOu0=
Subject key identifier:   56:94:77:D4:67:9F:55:E1:EF:63:16:A6:46:BE:C6:E9:8C:1F:E9:CE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79E8C0D0A32EDAF01E8D47E23F8FDB3D008BB6D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66a4a32-256c-41dd-805c-945e5d18221b.roa
Signing time:             Tue 14 Oct 2025 22:41:59 +0000
ROA not before:           Tue 14 Oct 2025 22:41:59 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.64.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e8:c0:d0:a3:2e:da:f0:1e:8d:47:e2:3f:8f:db:3d:00:8b:b6:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:41:59 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=26a9af8936aa6ac468ab54b613f4601b3167738f77bcfdcff9393dff7278c2ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:3e:9c:1b:1e:76:13:d1:ea:80:cb:ee:e5:
                    ec:2c:27:11:07:fd:2d:25:4d:5f:20:d3:85:f5:f3:
                    69:d7:0a:28:f4:2f:25:7d:1e:58:a8:0e:d5:28:77:
                    02:58:80:c1:48:5f:34:8c:93:a4:86:a3:7d:a3:0d:
                    0f:bb:d0:1f:ed:ee:0b:2e:95:3f:76:f4:04:eb:2f:
                    b5:ec:c9:55:14:d3:03:16:a8:3e:5c:34:c1:8c:98:
                    50:26:5a:d4:71:5f:7b:89:36:52:fa:58:cc:56:2b:
                    56:07:2a:af:38:18:f0:8e:2c:2f:2e:9d:74:31:b1:
                    ad:41:a9:47:2e:a6:1f:63:ec:a7:42:7d:13:c8:15:
                    cc:f1:3f:2c:53:18:2d:0f:ce:2c:47:5a:0b:c7:a9:
                    05:3c:9c:e5:64:e1:e7:44:f0:30:7e:74:31:a3:92:
                    7b:b5:22:f0:73:4d:9f:36:ba:9a:47:25:62:1b:7d:
                    53:10:63:0b:92:c9:b8:63:ed:6e:56:73:70:b6:8e:
                    c8:34:71:32:73:d4:8e:69:48:aa:67:7f:24:c5:98:
                    3b:5f:e5:12:2a:65:63:dd:6f:1a:46:f5:46:95:d1:
                    13:8c:84:1a:1a:79:8e:21:f7:87:70:32:23:18:a6:
                    2c:82:89:98:ee:8d:ef:08:ef:21:97:9a:85:f4:7c:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:94:77:D4:67:9F:55:E1:EF:63:16:A6:46:BE:C6:E9:8C:1F:E9:CE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c66a4a32-256c-41dd-805c-945e5d18221b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:7f:d3:79:dd:d1:25:e0:85:34:53:32:f6:56:51:2e:43:
         83:08:70:30:ac:c0:36:5c:35:35:e3:71:79:12:45:ce:b7:35:
         fa:55:11:75:72:81:2e:53:02:7d:f8:74:c9:fa:9c:32:f6:64:
         a9:d9:96:87:5e:ad:96:33:c2:dd:85:3d:30:4a:8e:f4:92:ff:
         f7:f2:f4:cf:ad:a6:92:0b:0f:8f:d1:c5:0f:50:f0:8f:2d:09:
         11:b6:ae:e1:49:e1:56:d8:36:73:60:34:af:63:83:6c:56:28:
         7c:12:e0:a3:cf:66:aa:4a:5d:a7:b5:e4:69:b4:29:0b:5c:67:
         bc:29:8d:eb:4c:f4:48:61:11:cf:a1:89:9b:2c:44:8a:60:b8:
         b3:19:89:0b:f5:17:af:b0:a1:a8:fd:d8:56:22:54:bf:47:a0:
         e8:18:64:89:00:5d:38:12:51:43:b7:00:ea:d5:a2:30:da:63:
         1f:61:28:9a:0d:f5:1b:6b:1f:fc:4b:af:3f:41:15:7f:15:fe:
         29:85:43:35:3c:95:45:05:13:48:45:8b:fb:e6:61:1f:95:c2:
         8e:9f:b5:9a:92:9a:79:dd:83:bc:5f:6b:99:61:6c:f9:ed:9d:
         44:7d:fb:00:d4:f3:0c:d9:bc:17:90:72:f9:80:dc:69:29:10:
         44:97:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----