Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
File:                     da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa (raw, json)
Hash identifier:          V8+T06o1hNfmw36Qojec2PymsO8f9YQ6jJtrf5CWYp0=
Subject key identifier:   DF:0C:2E:E1:59:89:45:C2:78:C5:09:5E:0B:1D:FD:8D:50:26:D3:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       336A9DAD754700ED69EDC923F45923F686420261
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
Signing time:             Fri 03 Oct 2025 15:01:06 +0000
ROA not before:           Fri 03 Oct 2025 15:01:06 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.82.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:6a:9d:ad:75:47:00:ed:69:ed:c9:23:f4:59:23:f6:86:42:02:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  3 15:01:06 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=4932293b533cfb59250bdbea6070d397efe5d736eb10ca90864c6bbc7fad2244, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:c1:b9:3b:51:40:b2:6a:ae:88:25:94:b3:
                    40:0e:ec:f7:a6:35:6e:0f:07:dc:05:4e:5e:ac:ee:
                    a3:3b:b5:bb:0b:0d:61:ca:d9:4c:35:42:61:ed:32:
                    9f:8b:3f:73:ca:a0:5b:fc:64:08:39:a3:e4:e1:08:
                    66:9f:35:4a:80:3e:f1:d7:16:b9:0c:4b:dc:ee:2b:
                    5f:b6:28:e0:7c:0a:07:e5:65:5c:f0:9d:e8:55:f0:
                    82:8d:11:f8:b7:a2:54:76:01:28:db:5d:9c:0b:e7:
                    b5:cf:1f:2d:73:a2:b7:22:ad:ec:ca:7f:67:92:d8:
                    45:b4:0a:29:bb:f3:dc:99:f7:b9:cd:9e:1d:27:6b:
                    3f:64:c5:da:00:00:d1:dc:ef:b4:27:f9:34:54:dc:
                    74:6d:75:1f:09:62:48:d9:3a:67:c8:da:a6:c7:34:
                    05:b2:9b:99:d0:4b:ee:88:ad:35:2f:d8:80:e2:02:
                    0c:a2:84:a2:99:11:e3:48:73:fa:26:58:8c:e8:9d:
                    0f:42:f8:e7:25:54:ff:06:16:2b:36:a9:63:c0:78:
                    31:0c:5a:f6:6b:a5:18:83:40:dd:9d:5c:5a:57:a2:
                    89:ea:ba:b7:5f:f4:69:31:0b:c2:d3:64:9b:c0:43:
                    35:21:44:e6:a7:d6:fc:27:e5:29:da:62:8e:cc:d1:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0C:2E:E1:59:89:45:C2:78:C5:09:5E:0B:1D:FD:8D:50:26:D3:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:03:b2:b9:94:38:18:1a:ac:f7:16:92:89:48:bc:97:ba:00:
         eb:db:0b:e3:e3:b1:9a:a3:59:8b:91:2c:91:f8:dc:40:9d:64:
         3b:88:0f:6e:95:d6:40:f6:d3:f0:d1:51:fb:55:af:f3:3f:58:
         ab:89:f0:11:a8:a7:f3:f8:65:f5:80:53:44:34:87:79:2b:e0:
         84:e9:2b:d5:cb:86:1b:af:8c:24:4d:7e:c1:ee:f6:f3:4a:be:
         13:0c:bc:96:68:c8:23:dd:eb:d6:92:51:e4:43:84:44:87:45:
         36:90:12:77:20:ec:9e:a8:c6:c0:3a:b7:90:40:09:f5:ad:1b:
         74:5a:12:f7:ff:06:16:15:10:d8:db:e4:d2:0e:f8:39:a9:6e:
         9a:c7:c4:2d:06:30:a3:5d:c2:d5:be:3f:ef:e9:6b:c2:56:68:
         b3:9d:ec:4a:cb:33:15:8f:a5:c9:2f:99:79:87:41:89:cb:a8:
         9c:15:b6:e7:f0:71:de:78:b0:6e:e3:a4:67:74:55:8c:cb:69:
         81:ac:d5:c1:03:d9:81:94:d4:e1:51:58:46:4c:e1:8d:e4:9d:
         08:43:c6:2e:e2:1f:7a:7a:e5:fa:c7:c1:c0:38:d0:a9:4f:47:
         60:e0:7a:44:cb:7b:7b:44:98:bd:10:6c:dd:b0:ae:b9:e3:22:
         3f:b0:9c:65
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM2qdrXVHAO1p7ckj9Fkj9oZCAmEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMTUwMTA2WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A0OTMyMjkzYjUzM2NmYjU5MjUwYmRiZWE2MDcwZDM5N2Vm
ZTVkNzM2ZWIxMGNhOTA4NjRjNmJiYzdmYWQyMjQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrtcG5O1FAsmquiCWUs0AO7PemNW4PB9wFTl6s7qM7tbsL
DWHK2Uw1QmHtMp+LP3PKoFv8ZAg5o+ThCGafNUqAPvHXFrkMS9zuK1+2KOB8Cgfl
ZVzwnehV8IKNEfi3olR2ASjbXZwL57XPHy1zorcirezKf2eS2EW0Cim789yZ97nN
nh0naz9kxdoAANHc77Qn+TRU3HRtdR8JYkjZOmfI2qbHNAWym5nQS+6IrTUv2IDi
AgyihKKZEeNIc/omWIzonQ9C+OclVP8GFis2qWPAeDEMWvZrpRiDQN2dXFpXoonq
urdf9GkxC8LTZJvAQzUhROan1vwn5SnaYo7M0WQ7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3wwu4VmJRcJ4xQleCx39jVAm03IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RhNWM4NGQ5LThkZDYtNDBhNS04MWYyLTYzNjFlZjk3YjE2My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjUrwwDQYJKoZIhvcNAQELBQADggEBAMwDsrmUOBgarPcWkolIvJe6AOvb
C+PjsZqjWYuRLJH43ECdZDuID26V1kD20/DRUftVr/M/WKuJ8BGop/P4ZfWAU0Q0
h3kr4ITpK9XLhhuvjCRNfsHu9vNKvhMMvJZoyCPd69aSUeRDhESHRTaQEncg7J6o
xsA6t5BACfWtG3RaEvf/BhYVENjb5NIO+DmpbprHxC0GMKNdwtW+P+/pa8JWaLOd
7ErLMxWPpckvmXmHQYnLqJwVtufwcd54sG7jpGd0VYzLaYGs1cED2YGU1OFRWEZM
4Y3knQhDxi7iH3p65frHwcA40KlPR2DgekTLe3tEmL0QbN2wrrnjIj+wnGU=
-----END CERTIFICATE-----