Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7eb16a-a889-4a9a-983a-f358f420e77f.roa
File:                     cc7eb16a-a889-4a9a-983a-f358f420e77f.roa (raw, json)
Hash identifier:          uw1+PzP6LnUJy/3cfcbO/ekr+A/CDNP6ai62PZGI+xc=
Subject key identifier:   C9:89:E4:11:E3:45:A9:C3:17:E3:F9:3F:24:C0:7A:A7:15:75:1A:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47B15EF4D307D745FBFEC648E6384F0A7022F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7eb16a-a889-4a9a-983a-f358f420e77f.roa
Signing time:             Tue 14 Oct 2025 18:51:13 +0000
ROA not before:           Tue 14 Oct 2025 18:51:13 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b1:5e:f4:d3:07:d7:45:fb:fe:c6:48:e6:38:4f:0a:70:22:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:51:13 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=162ce7dbf0eb11b75615bb22f006ba754124483b223b6f65c54e506e80c6bd55, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c7:7e:1b:53:35:3e:40:2d:9b:13:59:4e:79:
                    b9:ac:d6:e2:11:9c:0a:6a:de:44:c1:1c:0f:b6:30:
                    89:eb:14:f2:e5:a6:00:ef:a0:2d:aa:c7:3d:43:db:
                    74:47:d4:a9:f8:58:68:e2:86:0a:f4:c5:8c:ce:cc:
                    10:2d:f0:c9:27:20:28:23:34:37:64:6d:8a:f4:c3:
                    ba:d7:a2:83:22:af:44:e7:d0:e1:5d:2d:e6:f5:04:
                    8c:59:68:35:e8:c1:d8:4c:20:3b:67:65:3f:22:95:
                    48:79:c4:d0:40:81:03:da:02:cc:4c:8c:30:0e:40:
                    1d:7f:c3:b6:4f:33:65:0e:23:17:9f:d2:f5:02:f5:
                    68:5a:64:dd:da:67:57:f2:11:f0:7d:75:cb:7c:44:
                    15:6f:db:9c:54:78:75:b6:6f:36:70:58:54:d2:bc:
                    ed:96:39:82:eb:2b:1b:94:ea:d4:9d:70:ee:b4:2a:
                    fb:e2:58:23:ab:ec:d0:50:b2:51:f7:90:63:e3:41:
                    5f:84:2d:0f:27:3c:f7:a9:d3:61:3b:00:64:70:88:
                    3f:3e:50:01:a2:df:8c:50:cc:32:97:25:2c:d3:c2:
                    7a:1a:04:f1:11:b8:f8:69:06:ff:85:1e:da:0d:0c:
                    66:57:f6:5b:94:c5:3a:38:0a:b8:58:6f:05:6b:3a:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:E4:11:E3:45:A9:C3:17:E3:F9:3F:24:C0:7A:A7:15:75:1A:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc7eb16a-a889-4a9a-983a-f358f420e77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:09:de:00:21:c5:67:3a:cf:33:db:91:af:2a:60:d5:54:
         4d:04:d3:6e:60:64:c4:7c:38:70:88:f5:ee:ca:56:60:63:42:
         a0:2e:19:39:a2:9c:08:87:d0:21:92:b9:a9:e6:e7:71:f4:41:
         b3:bb:f1:4a:7f:45:89:58:c4:d2:ef:00:f3:e9:25:81:93:fb:
         1d:1b:91:e7:48:50:c8:36:83:b6:f1:b4:c4:52:90:73:67:ef:
         5d:c1:84:b7:19:1d:a2:bb:7b:55:85:95:b2:36:13:21:83:b5:
         ce:f6:91:3c:08:ad:10:ce:4e:73:7b:7d:4a:75:b9:4f:93:d3:
         58:d2:0f:12:c9:b6:a2:9c:24:3e:76:a9:77:44:63:2c:47:9c:
         94:f9:e7:de:f5:1b:33:8e:af:b6:0e:9e:a4:d1:61:95:26:a9:
         49:13:17:e0:1e:13:c3:c0:b5:a7:fa:25:32:97:e6:71:78:0b:
         5e:4d:a6:f5:b0:77:92:bc:f8:a0:8c:eb:e6:41:98:9c:c2:2c:
         35:b2:bf:b9:63:74:9b:f2:4e:93:ef:79:ca:74:38:29:ba:c2:
         ce:bf:e3:e7:88:27:a8:0e:d7:f0:38:d7:c0:f1:07:46:54:02:
         ef:ce:f1:74:4b:54:e3:8b:39:82:a0:55:cc:c5:32:09:cd:1b:
         19:db:06:0b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITR7Fe9NMH10X7/sZI5jhPCnAi+DANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMTQxODUxMTNaFw0yNTExMTgyMzU5NTla
MHoxSTBHBgNVBAUTQDE2MmNlN2RiZjBlYjExYjc1NjE1YmIyMmYwMDZiYTc1NDEy
NDQ4M2IyMjNiNmY2NWM1NGU1MDZlODBjNmJkNTUxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/HfhtTNT5ALZsTWU55uazW4hGcCmreRMEcD7YwiesU8uWm
AO+gLarHPUPbdEfUqfhYaOKGCvTFjM7MEC3wyScgKCM0N2RtivTDuteigyKvROfQ
4V0t5vUEjFloNejB2EwgO2dlPyKVSHnE0ECBA9oCzEyMMA5AHX/Dtk8zZQ4jF5/S
9QL1aFpk3dpnV/IR8H11y3xEFW/bnFR4dbZvNnBYVNK87ZY5gusrG5Tq1J1w7rQq
++JYI6vs0FCyUfeQY+NBX4QtDyc896nTYTsAZHCIPz5QAaLfjFDMMpclLNPCehoE
8RG4+GkG/4Ue2g0MZlf2W5TFOjgKuFhvBWs6/nMCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBTJieQR40Wpwxfj+T8kwHqnFXUaeDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvY2M3ZWIxNmEtYTg4OS00YTlhLTk4M2EtZjM1OGY0MjBlNzdmLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGNUyTANBgkqhkiG9w0BAQsFAAOCAQEAt5EJ3gAhxWc6zzPbka8qYNVUTQTT
bmBkxHw4cIj17spWYGNCoC4ZOaKcCIfQIZK5qebncfRBs7vxSn9FiVjE0u8A8+kl
gZP7HRuR50hQyDaDtvG0xFKQc2fvXcGEtxkdort7VYWVsjYTIYO1zvaRPAitEM5O
c3t9SnW5T5PTWNIPEsm2opwkPnapd0RjLEeclPnn3vUbM46vtg6epNFhlSapSRMX
4B4Tw8C1p/olMpfmcXgLXk2m9bB3krz4oIzr5kGYnMIsNbK/uWN0m/JOk+95ynQ4
KbrCzr/j54gnqA7X8DjXwPEHRlQC787xdEtU44s5gqBVzMUyCc0bGdsGCw==
-----END CERTIFICATE-----