Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c1564a-03d7-493a-959b-6e79233e689b.roa
File:                     f2c1564a-03d7-493a-959b-6e79233e689b.roa (raw, json)
Hash identifier:          Gz9ZRCQY2v3eObtwnHduyJLZHJKeWzTcXd2RsZtTG6g=
Subject key identifier:   9F:1B:68:4C:35:34:59:F7:B3:B1:A6:C8:81:C3:58:DC:66:26:36:67
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AA9DCF78A25FFE5F9BD2C7603519625D282751C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c1564a-03d7-493a-959b-6e79233e689b.roa
Signing time:             Wed 08 Oct 2025 00:40:52 +0000
ROA not before:           Wed 08 Oct 2025 00:40:52 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a9:dc:f7:8a:25:ff:e5:f9:bd:2c:76:03:51:96:25:d2:82:75:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:52 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=597216efebaf79534f26b600e57fbe6e83128a6758accdd99e43fd4e509bcbcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:59:4c:4b:22:02:32:e6:25:7a:4d:58:16:
                    de:11:1c:b3:45:7b:4d:24:b5:51:ab:7e:dc:4b:8a:
                    22:eb:2b:e1:46:61:92:c2:4b:a5:fa:95:35:85:48:
                    3b:06:da:17:7a:18:26:4a:7b:83:dc:50:69:7c:62:
                    98:58:be:f0:ab:04:69:9c:8f:bf:7f:f6:86:eb:60:
                    5a:e3:97:d5:0c:39:e4:0e:52:d9:5a:e1:42:6b:89:
                    80:3a:17:62:e4:26:1f:e5:78:ef:22:6d:b5:aa:50:
                    92:f7:15:89:7d:6f:bb:7c:e0:c4:89:ee:41:37:28:
                    86:33:08:c0:bf:27:96:ff:e5:f2:82:b9:db:01:1f:
                    47:31:7c:86:90:57:6c:69:5f:29:d3:84:b6:93:35:
                    fc:7b:78:cd:65:4b:6f:76:37:37:24:b1:2f:8e:5a:
                    17:b2:d1:b0:bc:fd:e1:94:a8:98:c4:66:7f:48:1c:
                    ee:5b:53:35:82:07:0a:ba:2a:66:65:c2:a5:76:5b:
                    fd:dd:f1:6b:04:c0:e0:c6:92:70:33:48:86:3a:f6:
                    7a:89:14:e6:43:e6:06:cc:b3:4e:43:4c:c8:5b:44:
                    5c:6c:c1:b2:8c:93:35:90:51:03:3f:e1:26:c7:17:
                    14:2c:f6:fa:4a:04:2f:be:96:6b:2d:cf:92:91:57:
                    37:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:68:4C:35:34:59:F7:B3:B1:A6:C8:81:C3:58:DC:66:26:36:67
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2c1564a-03d7-493a-959b-6e79233e689b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:9d:fa:23:57:85:ba:84:5c:69:7e:83:2b:4e:58:1d:7f:
         dc:9c:67:2c:6a:ae:c8:15:ff:40:7a:22:68:85:02:49:83:d2:
         7c:32:ec:f4:4b:02:cb:5f:07:dd:ea:8b:93:d6:a0:a8:bb:41:
         94:71:d4:8e:73:5c:6c:22:69:e3:e5:80:ab:e8:91:27:37:49:
         a7:bf:8c:f9:9b:78:16:33:3d:3a:20:d8:d6:9c:9e:19:7e:7f:
         3a:35:f6:d0:b0:f5:ad:14:4a:24:51:f4:97:b4:fa:fb:46:5c:
         47:06:cc:31:69:f4:fd:2b:98:68:d6:16:ee:20:3d:b1:80:d0:
         1d:40:ed:66:db:01:73:93:96:5f:fe:ce:96:b7:9f:9a:81:f5:
         9a:fd:82:37:bb:2f:92:e1:09:82:75:31:5f:cb:2b:1b:f2:6d:
         28:d9:3a:b9:ce:4a:34:9f:24:4c:a9:fc:a0:73:3c:24:fa:1d:
         1a:cc:e7:c0:29:83:95:ab:12:3d:95:83:87:f6:8c:4d:fa:88:
         07:ba:27:7e:89:ef:a4:67:da:8f:e1:93:3b:85:02:5a:8d:af:
         0f:a9:53:fd:68:f3:9c:44:96:d1:45:64:e8:70:47:5a:31:4e:
         7a:9e:ab:8a:21:73:eb:c8:1e:ac:1c:77:0c:0c:ad:be:34:11:
         a7:ea:16:9e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaqnc94ol/+X5vSx2A1GWJdKCdRwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDA0MDUyWhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTcyMTZlZmViYWY3OTUzNGYyNmI2MDBlNTdmYmU2ZTgz
MTI4YTY3NThhY2NkZDk5ZTQzZmQ0ZTUwOWJjYmNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDhL1lMSyICMuYlek1YFt4RHLNFe00ktVGrftxLiiLrK+FG
YZLCS6X6lTWFSDsG2hd6GCZKe4PcUGl8YphYvvCrBGmcj79/9obrYFrjl9UMOeQO
Utla4UJriYA6F2LkJh/leO8ibbWqUJL3FYl9b7t84MSJ7kE3KIYzCMC/J5b/5fKC
udsBH0cxfIaQV2xpXynThLaTNfx7eM1lS292NzcksS+OWhey0bC8/eGUqJjEZn9I
HO5bUzWCBwq6KmZlwqV2W/3d8WsEwODGknAzSIY69nqJFOZD5gbMs05DTMhbRFxs
wbKMkzWQUQM/4SbHFxQs9vpKBC++lmstz5KRVzdXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnxtoTDU0WfezsabIgcNY3GYmNmcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyYzE1NjRhLTAzZDctNDkzYS05NTliLTZlNzkyMzNlNjg5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjlkgwDQYJKoZIhvcNAQELBQADggEBAGoNnfojV4W6hFxpfoMrTlgdf9yc
ZyxqrsgV/0B6ImiFAkmD0nwy7PRLAstfB93qi5PWoKi7QZRx1I5zXGwiaePlgKvo
kSc3Sae/jPmbeBYzPTog2Nacnhl+fzo19tCw9a0USiRR9Je0+vtGXEcGzDFp9P0r
mGjWFu4gPbGA0B1A7WbbAXOTll/+zpa3n5qB9Zr9gje7L5LhCYJ1MV/LKxvybSjZ
OrnOSjSfJEyp/KBzPCT6HRrM58Apg5WrEj2Vg4f2jE36iAe6J36J76Rn2o/hkzuF
AlqNrw+pU/1o85xEltFFZOhwR1oxTnqeq4ohc+vIHqwcdwwMrb40EafqFp4=
-----END CERTIFICATE-----