Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa
File:                     f1333b09-ab13-4cea-a083-8bb75228384e.roa (raw, json)
Hash identifier:          mbUll1R1gsAUQGd6Pebqwl8VjVJF/67BgmP9AJj73Fc=
Subject key identifier:   2B:25:50:0F:24:9A:E2:51:FA:79:43:10:BC:50:90:FE:A5:9F:D0:44
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CEE10939EA83774948DC1D478849A84827A30A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa
Signing time:             Wed 08 Oct 2025 00:51:24 +0000
ROA not before:           Wed 08 Oct 2025 00:51:24 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ee:10:93:9e:a8:37:74:94:8d:c1:d4:78:84:9a:84:82:7a:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:51:24 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=700b9c24ba8f0fddb907a47e23b12afbd7b710662544995d7ee56568a652ba43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:30:b4:c8:e3:9e:7c:2e:c5:ec:17:cd:d0:
                    e2:5a:bb:d5:fc:35:ce:e1:36:be:92:88:8a:bd:47:
                    e3:97:0a:3a:83:b9:d8:e2:c9:99:66:3b:dc:90:b3:
                    3b:e9:38:2b:b2:59:69:91:ef:df:20:92:ab:4c:90:
                    42:42:45:1c:b9:05:d8:54:b9:b8:88:6d:ac:c7:82:
                    32:8d:64:42:40:96:c8:98:45:b8:bb:b2:55:7c:bf:
                    31:03:3f:1b:14:c2:95:fe:ba:5c:81:f3:10:df:17:
                    5c:5e:ff:a6:77:50:89:7d:2e:9f:35:e8:cc:8f:6a:
                    0c:a7:65:37:eb:54:b1:07:fe:2b:f1:38:47:03:bd:
                    c8:4d:dd:e9:f3:f1:39:19:09:d9:f9:c6:89:eb:4f:
                    de:f9:5f:30:a9:a0:98:a4:11:cf:b9:64:ff:d8:a0:
                    de:a5:44:f9:7c:00:d7:1a:81:a2:a8:bf:40:26:9d:
                    16:fc:c2:41:ec:65:c5:a3:a2:85:fc:53:3e:06:f6:
                    ab:96:bf:b4:41:66:0e:ae:68:2b:9c:58:6e:e4:07:
                    6c:f8:6c:9a:3b:68:5a:04:f1:fb:c6:2e:1b:3c:4a:
                    f7:ea:a9:6f:25:71:0b:a3:02:3f:30:fb:96:f9:b8:
                    84:69:15:73:c4:cc:96:11:b3:85:ab:9f:c4:72:b8:
                    bb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:25:50:0F:24:9A:E2:51:FA:79:43:10:BC:50:90:FE:A5:9F:D0:44
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1333b09-ab13-4cea-a083-8bb75228384e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:d5:61:1a:5f:a6:de:ba:22:79:ee:24:28:c3:ab:cf:0f:
         12:67:83:94:a1:62:65:bb:60:19:ca:e8:74:ea:cb:7f:f6:bc:
         5e:e8:57:b9:e1:45:bc:5a:73:23:38:9d:e2:bf:04:c5:e5:a7:
         c3:dc:b5:6e:a1:36:03:0b:28:93:ec:de:51:89:17:66:99:e9:
         d2:c2:62:6b:d6:52:74:9f:01:43:f1:dc:41:c3:af:b7:66:3a:
         44:89:03:46:e5:34:4a:3f:76:15:ee:ae:c3:39:0c:d2:17:73:
         24:04:a2:f3:ad:38:b5:4a:9a:59:4b:da:1d:39:56:d4:a8:a3:
         c4:28:15:05:11:a3:9c:69:12:c7:05:ec:96:72:89:60:0e:b9:
         e0:da:ad:5c:40:55:29:c2:70:54:f8:9f:f7:37:fe:4e:04:85:
         d9:e7:c3:25:b2:04:10:5e:71:0b:0e:cc:93:0b:31:af:95:09:
         41:ec:44:4b:a1:a5:13:ab:49:e4:ff:5f:87:61:8b:b6:0f:a6:
         96:7f:f8:7a:06:a1:fe:bf:0e:f5:a6:c9:d0:39:ee:bd:2c:c3:
         8c:45:6a:c8:8f:1e:3f:f0:74:f5:b8:da:ef:45:ef:43:3c:09:
         11:fe:3f:13:df:92:42:32:e8:26:42:66:16:8a:da:73:83:ef:
         18:b9:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----