Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f380f48b-0871-40e1-b3e6-cb1d97c1c973.roa
File:                     f380f48b-0871-40e1-b3e6-cb1d97c1c973.roa (raw, json)
Hash identifier:          wX2QDD6Aq/WPIPgXCjEHB9S+QpL27AfY77Y1TxlEj1U=
Subject key identifier:   D6:B0:DF:7C:A1:CD:F2:19:D6:6C:B4:11:0D:E6:20:35:D4:1C:17:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D98BC4E1657F68BE98E2F5BFEDBC834880B2504
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f380f48b-0871-40e1-b3e6-cb1d97c1c973.roa
Signing time:             Sat 27 Sep 2025 00:42:27 +0000
ROA not before:           Sat 27 Sep 2025 00:42:27 +0000
ROA not after:            Sat 01 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.10.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:bc:4e:16:57:f6:8b:e9:8e:2f:5b:fe:db:c8:34:88:0b:25:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep 27 00:42:27 2025 GMT
            Not After : Nov  1 23:59:59 2025 GMT
        Subject: serialNumber=bc15be616479c5941488f69e1c48ef1e42a39565f08601c5256872b7c821ab14, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:db:a8:c6:88:c0:d1:ab:6d:5b:b7:88:d5:
                    62:90:6a:13:bd:17:e0:a5:29:b1:80:2f:35:70:f8:
                    a6:c3:8c:05:f9:cc:81:0e:3d:fb:cd:1a:2f:b7:2c:
                    b3:ea:46:de:2a:c7:50:2b:a1:77:1d:b2:12:30:c1:
                    3c:a0:f2:6e:a4:ff:48:b3:0d:ba:ce:b5:8a:d4:f9:
                    67:31:01:a5:20:fd:11:cf:c7:7f:d2:91:ef:45:ac:
                    e9:14:62:1c:b9:c2:12:ec:1e:46:09:1b:7b:40:6c:
                    87:e1:f7:79:aa:31:09:8f:13:06:f9:ad:21:bc:45:
                    a7:82:a5:6e:8d:72:19:7c:69:6c:7d:6a:fd:22:2f:
                    0e:65:3d:af:fd:bd:93:79:99:0e:4e:ec:bf:96:1a:
                    1e:80:f3:fd:a7:50:2e:48:18:34:17:fa:2a:f2:bf:
                    1e:4a:66:5a:ba:b6:04:9c:8a:ec:12:52:58:b2:0c:
                    de:1f:9d:ca:b6:54:fe:25:8a:0a:e9:9f:ad:83:b7:
                    bd:f2:c1:d8:d8:0f:51:1e:c4:ac:69:16:67:10:3b:
                    7d:54:ee:03:5a:86:25:33:81:6e:98:4f:1e:a1:ce:
                    51:f1:a7:8b:02:5d:68:73:77:08:95:6f:41:69:92:
                    ff:95:37:6f:43:22:2a:4c:35:27:61:69:c3:22:83:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B0:DF:7C:A1:CD:F2:19:D6:6C:B4:11:0D:E6:20:35:D4:1C:17:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f380f48b-0871-40e1-b3e6-cb1d97c1c973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.10.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:41:91:98:66:2b:1c:62:ff:8b:de:0f:0f:d5:ad:f4:d5:
         6b:5e:05:ed:9a:37:03:5f:44:b0:91:f7:d2:f3:ce:46:89:bc:
         8a:7e:59:65:e8:53:40:d7:3b:d0:56:29:82:df:98:55:d5:c0:
         cc:ba:7e:10:df:e7:39:4d:3c:17:e7:37:e9:13:62:a2:29:65:
         27:49:cd:70:ba:1f:43:c3:04:9b:33:ca:ac:7f:3c:8b:69:e6:
         91:ff:e9:e4:08:e1:49:d7:64:e2:96:8f:c9:02:1a:22:1d:76:
         07:81:f9:d6:a0:8a:e1:d2:6d:06:f4:74:9f:b7:ad:93:bc:cc:
         54:4a:57:9c:2d:1a:72:c4:ad:cb:e6:0c:1a:db:51:3f:94:48:
         eb:74:32:38:bf:24:f5:02:cb:1d:21:94:82:24:1b:29:5c:fb:
         75:19:83:81:58:d9:14:6e:a2:4e:f8:3f:4b:db:81:01:b6:c4:
         e2:c4:e2:0c:d0:3e:ea:6b:a0:f6:91:80:19:b3:f7:aa:f2:af:
         07:f9:3b:fe:19:fe:3e:0f:a5:55:fa:06:91:c4:44:61:9b:d1:
         3f:2b:7c:a5:de:4a:be:ed:ad:16:13:e4:85:1e:ab:91:42:68:
         26:6d:84:87:fd:b1:ed:78:7e:42:90:22:c8:6d:06:38:f8:bf:
         af:c5:05:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----