Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8ca7ffd-9de6-4dbb-83b9-f57f7cd656d8.roa
File:                     f8ca7ffd-9de6-4dbb-83b9-f57f7cd656d8.roa (raw, json)
Hash identifier:          zuK1bFscfkNo45soQFGdCsKlNByzAgUgjBunDr/J3VA=
Subject key identifier:   C8:E2:82:E8:33:BC:8B:6F:D9:27:7D:CF:F5:F8:AC:CA:B3:37:B8:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       545AFC32E79F68137DD194500A2C601EEDC0D810
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8ca7ffd-9de6-4dbb-83b9-f57f7cd656d8.roa
Signing time:             Wed 15 Oct 2025 17:51:59 +0000
ROA not before:           Wed 15 Oct 2025 17:51:59 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5a:fc:32:e7:9f:68:13:7d:d1:94:50:0a:2c:60:1e:ed:c0:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:51:59 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=3c02bef21a9da2f0d4bf0b60e722ed2b1ffbb5f2d72ac285632d33296c700686, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f1:78:76:9c:62:7c:f6:cd:c3:49:81:c5:a4:
                    9f:62:ab:7d:f1:11:1d:2f:03:b9:8c:7d:ad:31:7a:
                    c4:5f:6a:50:db:41:4f:97:d3:7e:47:8a:4f:bd:63:
                    af:55:a2:05:53:fb:e5:3d:3c:4f:f8:1c:a7:21:3c:
                    4e:ec:ec:2d:36:df:f8:51:68:78:dd:01:06:1c:91:
                    19:4a:0b:fc:6e:c2:91:47:26:f3:23:9a:1a:9a:8c:
                    b3:4a:54:24:4d:b8:fc:d9:57:e6:7f:c9:5b:12:2c:
                    36:a9:87:60:50:c7:d4:5a:09:01:64:b8:7a:c4:49:
                    86:86:aa:7e:6b:87:6c:0b:d0:37:ca:1f:6c:98:d4:
                    3f:55:fd:12:22:9e:ca:8c:b1:ec:d4:5b:69:42:67:
                    bf:44:a9:42:11:15:03:a2:05:e1:d8:20:3d:08:ce:
                    0c:80:bc:2a:b6:33:07:7e:13:c3:50:26:f2:5d:4c:
                    8b:7d:ac:83:84:aa:70:d7:8b:58:93:e3:fd:eb:27:
                    df:f9:41:a6:87:13:cc:26:b4:ba:d8:dd:b1:9b:a4:
                    56:67:9e:c9:f1:0a:65:e2:d5:f4:7a:d6:6f:91:fa:
                    28:5d:94:70:02:9b:b0:b8:2d:85:a1:59:38:df:6a:
                    e3:94:96:d9:f3:78:76:81:e8:69:85:71:8b:4a:df:
                    ae:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E2:82:E8:33:BC:8B:6F:D9:27:7D:CF:F5:F8:AC:CA:B3:37:B8:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8ca7ffd-9de6-4dbb-83b9-f57f7cd656d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:55:8d:2e:21:25:6b:6f:c5:76:e7:63:04:12:32:1f:5b:
         cb:77:0f:00:90:ab:83:55:f6:bc:ec:58:5b:4e:ed:86:52:5a:
         0f:1e:bb:ce:8c:86:23:1c:6a:3f:a0:9c:da:94:d7:9d:a9:f2:
         72:ad:6a:a7:49:41:5e:f2:ec:ee:33:c7:80:f9:68:86:33:7b:
         a9:46:7a:b6:7c:e0:7b:a9:91:82:a9:1b:dc:77:ae:14:4e:b1:
         8e:3b:54:b6:80:d3:22:3c:72:58:ad:22:ac:ab:c2:29:f4:fb:
         23:e1:29:74:2b:87:30:4e:3f:9f:65:5c:bf:71:7b:3c:70:61:
         8a:a7:57:92:45:bb:92:89:98:ff:1a:82:44:70:1e:9b:ab:e6:
         2f:4d:cc:a4:c9:d8:62:8e:af:07:c5:f5:c3:39:70:71:7a:a5:
         a1:1f:26:50:1a:9a:8e:ea:a5:7b:da:ae:58:09:0d:c1:13:b1:
         81:e6:8c:11:ec:8b:91:c6:84:0f:94:00:52:91:37:66:48:44:
         bd:e6:4c:f3:f8:0e:91:6c:a6:40:fd:ff:37:c4:f1:20:2d:3a:
         68:25:fd:16:9a:0c:77:fd:f1:19:0d:aa:23:d7:ca:6d:0b:9a:
         3a:02:76:44:a2:ed:6e:3a:e3:0a:b6:6c:01:6a:69:f7:27:53:
         94:1b:54:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----