Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe39be-1f11-4b5c-9704-992fa2b34e30.roa
File:                     fabe39be-1f11-4b5c-9704-992fa2b34e30.roa (raw, json)
Hash identifier:          8csbqsSyw6ZkALhVpYp8db0PyUEaGKNpZVEBEHCX+rE=
Subject key identifier:   11:07:50:A3:99:1C:D6:B3:D1:B5:8B:65:3A:CE:47:DF:45:E7:3D:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FBA841580C071A8C6B5F520590E1166737AAD60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe39be-1f11-4b5c-9704-992fa2b34e30.roa
Signing time:             Wed 15 Oct 2025 15:01:10 +0000
ROA not before:           Wed 15 Oct 2025 15:01:10 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ba:84:15:80:c0:71:a8:c6:b5:f5:20:59:0e:11:66:73:7a:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:01:10 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=f841515536c68fd14018bd00f9a54d753c8f049eae17854f66a7a9864373b367, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:77:06:63:61:64:64:fc:00:e7:ca:57:fa:
                    c9:3a:f2:ed:fb:75:5f:37:97:3a:f4:b2:d5:8d:97:
                    5f:ae:01:61:a8:7f:5b:c7:5c:39:d5:9c:d2:f7:09:
                    e7:2b:cd:88:8b:0c:6c:62:b4:d0:f4:6f:2d:b4:b7:
                    81:45:53:12:e6:4f:6d:f9:8a:4c:cd:71:59:7f:d3:
                    26:d1:53:c4:f3:67:06:04:90:fd:6f:6c:c4:81:7f:
                    57:53:31:9a:1c:e7:0f:12:55:0f:09:cb:21:13:27:
                    dd:9d:10:3f:17:5a:f6:1b:b1:2d:80:a2:19:e4:30:
                    0a:4a:41:d4:aa:de:6d:17:dd:d3:68:e2:ac:06:5c:
                    80:38:b7:e5:07:b6:db:17:00:26:6f:7d:4b:99:80:
                    4d:ad:1d:09:65:46:a7:0a:4d:82:df:a8:99:85:9d:
                    f7:73:d4:be:93:70:c6:49:5a:a0:d7:d4:58:a2:24:
                    46:ac:22:49:9f:71:8f:6b:c9:a3:65:3e:eb:9c:1b:
                    42:c2:3e:24:4e:36:97:2c:5f:b8:9a:6c:02:09:ee:
                    2e:f5:82:36:40:b9:24:7a:54:aa:c3:24:56:ac:21:
                    fc:55:2c:cc:42:ff:1e:ff:96:42:1a:c3:f0:03:bc:
                    21:ea:4f:f2:2e:6f:37:20:76:47:dc:04:a2:84:2f:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:50:A3:99:1C:D6:B3:D1:B5:8B:65:3A:CE:47:DF:45:E7:3D:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fabe39be-1f11-4b5c-9704-992fa2b34e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:6b:e1:67:41:55:d7:de:a2:4b:c2:03:0b:d5:87:11:f0:
         4d:ae:b8:b9:5a:fb:95:f7:41:17:5c:66:67:77:a2:40:e9:1e:
         b8:25:4c:69:5b:01:0f:73:18:a7:32:1b:b1:da:ac:7f:a4:19:
         a3:a1:9c:38:b2:2f:d1:fd:2d:f4:66:db:71:83:02:39:a6:a7:
         2f:a7:37:3b:87:ce:cc:86:e5:95:85:9d:7a:1c:7b:f1:1b:ef:
         93:e7:dc:c2:a5:c7:13:83:f3:3c:04:bf:75:ae:8a:52:33:36:
         ff:ba:42:81:07:af:5b:ac:6e:da:28:54:65:61:cf:f9:cf:96:
         39:c5:2a:29:1f:2c:a5:2e:23:1f:33:1e:bf:d1:09:56:53:c0:
         d1:ae:84:94:dc:fc:95:fb:90:a2:62:57:9f:86:f8:d3:4b:5b:
         fa:56:66:65:74:4f:79:36:95:8a:1e:e3:52:03:ff:3b:61:11:
         13:b0:ad:24:a6:e0:87:1a:0c:7b:6a:2c:ed:4c:60:9d:a1:9a:
         b0:da:79:b8:b9:72:75:7b:a9:52:ef:fd:8e:65:9c:24:d5:04:
         30:f4:0a:76:b6:3e:df:bb:d8:77:a0:65:01:38:62:b9:86:bd:
         5c:61:01:ee:83:cd:1d:95:66:81:ff:88:b2:07:8a:9d:1a:ab:
         d3:7b:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----