Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa
File:                     d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa (raw, json)
Hash identifier:          WSs9iRRBvkFF62jWS9D0YsCp1EHNiklQAzRyisP5C54=
Subject key identifier:   C1:66:6B:83:62:0B:64:27:4B:22:43:5B:ED:DE:6E:9A:07:5C:C4:2F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D3544389693CCF35BD67744F06022F2FECA88A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa
Signing time:             Fri 26 Sep 2025 00:41:31 +0000
ROA not before:           Fri 26 Sep 2025 00:41:31 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.144.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:35:44:38:96:93:cc:f3:5b:d6:77:44:f0:60:22:f2:fe:ca:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 26 00:41:31 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=9d893f96dc99841e920fea5b320ddb0584a6a646ea0fd1bdd5692570defa6d25, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:03:ef:a6:b2:57:13:8e:98:0f:26:e6:17:
                    70:7e:16:88:b4:8c:de:8b:74:a5:13:74:cc:0a:99:
                    95:2a:e4:6b:28:9d:1a:a4:d9:7c:0c:6e:95:89:bc:
                    1a:46:4d:ba:8d:29:1b:09:db:bc:35:ff:d0:b7:e7:
                    60:4c:0b:9a:43:c8:13:e3:00:5e:e7:67:a0:75:82:
                    e0:ff:b0:bd:19:6b:88:62:4d:95:2e:a4:39:1e:91:
                    b7:b0:28:74:dc:d5:e6:bc:a8:24:0f:de:84:39:55:
                    97:52:ee:64:e5:ec:d7:3d:1d:29:fd:5e:a9:2d:d6:
                    7b:8c:6c:64:e2:50:4a:ee:bd:23:2e:57:21:9a:93:
                    ff:d5:c7:79:3f:06:d5:62:43:7a:2e:61:ce:08:3d:
                    fb:23:01:24:34:0e:f2:36:7c:42:a0:80:71:65:f3:
                    af:b5:b8:a1:7e:65:08:c2:92:5d:fc:28:e7:e9:55:
                    3c:27:68:40:f3:9b:23:fd:72:16:f1:16:99:47:7c:
                    75:7d:ec:b1:a8:f1:6f:46:19:f0:30:51:2c:8a:5d:
                    6f:a9:91:41:50:72:50:92:12:2d:ba:da:4c:db:4a:
                    82:30:cc:d9:4b:50:56:32:d0:cc:53:97:9c:0f:19:
                    13:86:89:24:26:d9:54:fa:61:64:72:82:3f:c3:55:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:6B:83:62:0B:64:27:4B:22:43:5B:ED:DE:6E:9A:07:5C:C4:2F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0c88a40-44cb-4ee0-a0f5-5f6d559b9c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.144.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:be:3e:dd:57:6f:69:d0:4e:03:2f:0c:e9:52:86:f4:be:
         be:fa:22:5e:c1:41:39:01:4b:f1:67:2f:1e:63:58:2f:90:0a:
         8e:ef:b1:1b:6d:2c:c0:5c:31:e3:65:0d:bf:8e:08:19:2b:58:
         a3:05:fc:ca:22:fd:ce:90:4b:b6:fb:7b:33:7d:04:97:aa:d9:
         0c:95:fa:6b:d5:e8:8d:ca:5e:21:55:f2:8f:f7:7c:6e:23:39:
         07:d0:08:12:8d:0b:b6:13:5c:13:cf:00:3d:4d:f5:d0:55:60:
         00:d9:e0:22:98:ba:39:31:23:18:d4:d0:31:20:0c:34:75:dd:
         27:8b:df:ba:17:03:99:16:82:18:ab:39:7e:48:b1:bc:5b:0d:
         8c:6c:f7:03:27:d0:3f:76:71:2a:2e:17:59:75:52:9f:fc:68:
         89:f7:12:d6:0a:a3:97:07:e8:2b:07:c0:b5:2a:dd:94:8b:fe:
         99:84:3a:7b:3c:5e:13:f5:28:2c:78:c5:07:ad:d4:93:77:67:
         f0:c4:80:00:58:b9:46:59:ae:be:84:a0:8c:df:cd:5b:3f:10:
         40:07:9a:0b:b1:93:3b:03:da:46:f3:1f:e9:99:c1:1c:c0:f5:
         f3:26:aa:a0:e1:90:68:6c:46:cf:31:af:24:37:5a:4f:b5:e6:
         bd:9d:1c:41
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfTVEOJaTzPNb1ndE8GAi8v7KiKIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI2MDA0MTMxWhcNMjUxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZDg5M2Y5NmRjOTk4NDFlOTIwZmVhNWIzMjBkZGIwNTg0
YTZhNjQ2ZWEwZmQxYmRkNTY5MjU3MGRlZmE2ZDI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+KwPvprJXE46YDybmF3B+Foi0jN6LdKUTdMwKmZUq5Gso
nRqk2XwMbpWJvBpGTbqNKRsJ27w1/9C352BMC5pDyBPjAF7nZ6B1guD/sL0Za4hi
TZUupDkekbewKHTc1ea8qCQP3oQ5VZdS7mTl7Nc9HSn9Xqkt1nuMbGTiUEruvSMu
VyGak//Vx3k/BtViQ3ouYc4IPfsjASQ0DvI2fEKggHFl86+1uKF+ZQjCkl38KOfp
VTwnaEDzmyP9chbxFplHfHV97LGo8W9GGfAwUSyKXW+pkUFQclCSEi262kzbSoIw
zNlLUFYy0MxTl5wPGROGiSQm2VT6YWRygj/DVS3DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwWZrg2ILZCdLIkNb7d5umgdcxC8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QwYzg4YTQwLTQ0Y2ItNGVlMC1hMGY1LTVmNmQ1NTliOWM2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZjkMAwDQYJKoZIhvcNAQELBQADggEBAKtbvj7dV29p0E4DLwzpUob0vr76
Il7BQTkBS/FnLx5jWC+QCo7vsRttLMBcMeNlDb+OCBkrWKMF/Moi/c6QS7b7ezN9
BJeq2QyV+mvV6I3KXiFV8o/3fG4jOQfQCBKNC7YTXBPPAD1N9dBVYADZ4CKYujkx
IxjU0DEgDDR13SeL37oXA5kWghirOX5IsbxbDYxs9wMn0D92cSouF1l1Up/8aIn3
EtYKo5cH6CsHwLUq3ZSL/pmEOns8XhP1KCx4xQet1JN3Z/DEgABYuUZZrr6EoIzf
zVs/EEAHmguxkzsD2kbzH+mZwRzA9fMmqqDhkGhsRs8xryQ3Wk+15r2dHEE=
-----END CERTIFICATE-----