Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80978a6-ae0e-4a39-809d-b6920bbe90f1.roa
File:                     e80978a6-ae0e-4a39-809d-b6920bbe90f1.roa (raw, json)
Hash identifier:          6Gk+LiXDPe6kq9U0vOLRqDUC3yaRHXMKs9TSEWoHiCE=
Subject key identifier:   71:23:D5:92:E6:35:BB:C2:48:9A:5F:11:4C:A6:C4:15:B1:AB:B4:AD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       48807C1E64EB46840582736376EB46CDF3AC0BA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80978a6-ae0e-4a39-809d-b6920bbe90f1.roa
Signing time:             Tue 14 Oct 2025 19:52:46 +0000
ROA not before:           Tue 14 Oct 2025 19:52:46 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:7c:1e:64:eb:46:84:05:82:73:63:76:eb:46:cd:f3:ac:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 19:52:46 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=a6e85fb8e78daa4f87d2881841f03fbcaa377ee9b5cc247337be0d0fb614a0ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:29:90:39:16:a4:5a:6f:8f:c6:7b:cb:ea:
                    88:4a:82:53:ba:92:a2:62:2f:93:41:97:ea:9c:4c:
                    84:d1:ab:ac:4d:8a:9f:1e:10:85:af:99:9c:2f:a0:
                    43:06:14:30:f5:5a:c3:12:2a:f9:54:88:a3:76:c3:
                    69:89:5b:92:08:f0:e2:07:99:b5:ff:5c:b6:d0:97:
                    22:b2:73:dd:02:f7:2b:cc:00:d4:c3:29:b2:01:2c:
                    a4:8f:52:99:0c:65:12:86:c5:6e:5c:49:a4:52:df:
                    e0:49:da:30:5b:36:22:a3:7e:73:b9:91:19:cb:20:
                    53:79:aa:f5:fa:49:71:89:10:7c:a2:a2:1a:0e:8b:
                    07:83:ad:88:28:b3:b0:54:f0:ce:69:91:6c:3d:3f:
                    9e:61:4b:03:2b:10:da:5b:6f:3c:57:8e:47:c7:bf:
                    43:7a:74:a6:d6:49:8b:f1:9d:6e:c5:1d:0a:50:55:
                    5d:16:79:84:3e:e0:92:45:71:62:c7:7e:d8:a4:aa:
                    bd:f0:77:88:9d:3c:d8:15:5a:17:28:68:8b:d3:d8:
                    8e:0f:a8:c3:ab:88:53:8b:17:68:7e:8f:a1:4b:0f:
                    a3:4b:c9:4f:50:df:23:ef:4c:d5:3a:9c:1c:ad:3d:
                    57:5e:ab:ae:8b:77:ed:cc:9b:a1:e7:07:91:fc:90:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:D5:92:E6:35:BB:C2:48:9A:5F:11:4C:A6:C4:15:B1:AB:B4:AD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e80978a6-ae0e-4a39-809d-b6920bbe90f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:38:0b:9b:0f:06:67:6d:3c:37:cc:c6:93:93:02:53:97:c3:
         21:e1:b3:a8:4a:81:9c:0d:bb:d5:66:13:91:66:8c:ae:19:32:
         c7:6b:0b:fa:74:d2:1d:9d:f3:ba:89:dc:02:8b:36:67:d6:de:
         c9:7f:84:b5:f8:cd:8a:46:ff:a3:83:dc:d6:ec:a8:0b:8e:17:
         1f:72:89:c4:83:8d:9b:14:f3:f3:24:61:e6:c2:73:f2:fd:c1:
         cf:d1:00:89:a8:67:3f:2e:77:22:ab:fe:77:2f:b8:ab:c0:49:
         92:dd:1d:a3:c6:05:df:de:e4:e3:c7:3c:16:8f:ae:51:72:54:
         fd:31:ab:f1:a9:4a:8d:e3:d3:e3:9a:d2:15:a0:c2:3c:a8:2c:
         10:64:9e:5a:ce:bd:ff:2e:96:84:1c:f2:83:05:6e:0c:b9:57:
         6a:e9:0a:60:f2:ec:83:e6:d3:2d:5f:30:96:8e:d4:81:56:e1:
         5f:93:5d:0d:e8:c2:50:8a:9c:e0:c2:36:a1:46:07:18:97:41:
         59:18:e7:00:5c:3c:55:73:87:63:9e:1e:4e:64:72:3d:38:45:
         61:41:cb:d3:dc:5d:cc:92:5a:64:85:2d:83:e7:6a:3d:08:45:
         59:5e:ee:df:82:e7:ab:47:d1:02:ff:1d:ac:fc:64:77:f4:b6:
         f7:50:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----