Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecd67c14-a983-4a22-a35b-92042e8b356e.roa
File:                     ecd67c14-a983-4a22-a35b-92042e8b356e.roa (raw, json)
Hash identifier:          k1ZQfAuM6FCUVQ6Tbh9Ojy18zS6Ga0uWuJR7mtHgm6w=
Subject key identifier:   B9:1C:C9:21:C8:97:98:62:12:96:C8:79:4E:6E:FD:99:7C:69:72:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7933A83A8408CB0E971ECE88DC983139D82CC840
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecd67c14-a983-4a22-a35b-92042e8b356e.roa
Signing time:             Tue 14 Oct 2025 21:42:46 +0000
ROA not before:           Tue 14 Oct 2025 21:42:46 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:33:a8:3a:84:08:cb:0e:97:1e:ce:88:dc:98:31:39:d8:2c:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 21:42:46 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=1483b37d3dbb57f41fc26eb832c64a11151dfb9be51524d883304dd9eb2549e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:91:bd:55:91:c2:b5:b2:9f:ea:f2:db:a3:
                    45:c4:87:6a:83:64:24:be:ae:95:b2:e2:fb:cb:56:
                    f2:e3:98:ba:84:d9:ee:a0:a8:ea:fd:db:f2:1b:db:
                    30:2a:38:7a:d5:4b:10:01:e6:38:7f:5c:0b:39:37:
                    00:25:42:f7:66:d9:00:17:e3:39:15:c1:ad:99:d2:
                    76:20:21:74:ee:62:43:99:a0:2d:c0:be:32:23:93:
                    fc:c7:f7:c4:f6:d5:8f:2b:13:68:18:77:f6:20:e2:
                    73:ae:34:55:46:66:30:f9:42:70:32:f5:b1:49:c4:
                    9f:f7:64:f7:3c:1a:18:21:ef:70:f8:55:8d:50:5e:
                    a9:80:83:e8:5f:36:ec:7c:b6:ea:88:02:5e:c1:88:
                    2b:6d:31:29:d7:73:f1:0d:a7:88:05:1f:e0:90:0c:
                    8c:ae:74:2b:21:13:34:ee:52:81:ee:dd:8f:04:0e:
                    ff:5b:bd:2a:50:44:32:f6:cd:09:25:c6:ef:6e:b7:
                    b3:1d:f8:b1:44:d5:ce:a4:af:b3:fb:e3:02:f1:68:
                    2e:d1:12:11:09:ca:3b:93:27:ea:bf:e2:77:ae:36:
                    e3:b8:30:d1:95:a5:d6:5b:ad:20:f2:7c:d1:89:57:
                    f4:e9:c9:87:44:ca:b7:a2:d8:a9:9c:e7:f5:02:9f:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1C:C9:21:C8:97:98:62:12:96:C8:79:4E:6E:FD:99:7C:69:72:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecd67c14-a983-4a22-a35b-92042e8b356e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:78:dd:c4:e1:62:0d:2a:19:c6:36:86:1a:2c:93:70:f8:a6:
         52:c8:63:16:3c:30:5f:87:8a:73:e7:81:3d:0f:bd:10:21:c8:
         3b:4e:db:bc:3a:20:81:62:fd:81:14:88:9c:33:5e:89:92:15:
         a6:7d:a9:d3:8e:35:e5:a4:5f:8a:87:87:a1:72:fd:1b:1e:ec:
         00:b6:dc:2e:82:c1:70:c1:29:83:e6:5f:d8:fd:ad:fd:54:84:
         90:90:6d:e8:e2:df:cd:34:45:d6:6b:72:2a:00:49:e5:88:2d:
         08:5f:cb:de:ed:31:d4:63:76:1b:2a:d5:c9:30:27:e9:bd:72:
         98:0c:20:24:3c:f3:55:5b:77:42:3b:67:7b:3f:23:a7:6c:87:
         56:c9:86:98:7d:6e:ac:8f:d4:c7:28:66:9a:fd:44:11:b6:87:
         2e:94:73:c6:7a:38:1e:df:2d:83:57:75:2e:c5:4a:db:77:69:
         d9:7e:21:9a:1d:9f:e0:ab:b3:77:10:74:58:86:cd:ea:0a:5b:
         3a:8f:c3:5b:56:31:b8:59:b6:80:2a:4b:e9:6d:c5:5e:23:38:
         b0:9f:fb:07:6a:7e:07:fd:c4:de:4c:71:42:21:d3:14:12:84:
         53:41:e1:d8:5a:79:87:b0:ba:90:47:9b:88:f7:c3:88:8e:97:
         63:e2:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----