Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178ac3bb-c559-4f48-9f12-aaf377e291d8.roa
File:                     178ac3bb-c559-4f48-9f12-aaf377e291d8.roa (raw, json)
Hash identifier:          T8lqmYdgvXeFATJb3PLDK0GQniRyDzKi8hdr+SH+iOQ=
Subject key identifier:   65:81:B5:9E:B0:22:B4:67:41:86:42:67:99:50:7B:B8:E7:8C:14:70
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3C8F8678A6621028E20EB4F39314476FB66AEB07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178ac3bb-c559-4f48-9f12-aaf377e291d8.roa
Signing time:             Wed 15 Oct 2025 18:12:47 +0000
ROA not before:           Wed 15 Oct 2025 18:12:47 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8f:86:78:a6:62:10:28:e2:0e:b4:f3:93:14:47:6f:b6:6a:eb:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:12:47 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=e028dadfc3aca713bbf08a02a1725b572f9e7af0ffff03a8c321ec3f70840f2e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:d7:33:a0:71:f8:a2:d7:7e:d9:33:43:f3:
                    4b:0c:71:18:41:b4:44:b5:ed:94:00:68:29:43:4f:
                    3b:2e:0e:f4:41:9b:b3:90:c3:ba:d0:f9:c5:05:3e:
                    52:7d:f9:06:82:38:2a:bd:a6:6f:fd:f7:8e:78:c1:
                    8b:c0:b8:93:df:16:0a:cb:e2:59:e9:a7:36:44:26:
                    2b:5e:33:49:60:52:53:79:9e:f9:37:92:4d:5a:dc:
                    41:22:56:17:ae:a3:db:c7:89:2c:c8:e3:8e:43:a9:
                    ec:b2:bd:f1:13:cd:32:96:73:e3:82:d3:27:01:fd:
                    ca:ae:79:3a:cf:51:65:8e:ff:9f:c5:3f:d7:89:83:
                    84:dd:2e:1f:aa:a4:a1:72:b8:84:ad:e1:fe:07:b0:
                    cb:05:cf:6c:18:ac:fd:fb:e7:a3:0b:d7:8c:2c:c9:
                    9c:88:b2:8e:31:21:64:d2:f5:70:d1:94:84:3f:34:
                    9a:e8:44:21:cc:00:0b:b7:ad:1c:a9:04:75:ef:d1:
                    fc:65:9e:f5:1f:e1:41:2d:9e:fb:22:cd:44:29:1b:
                    25:a6:1f:1f:91:f9:46:81:07:32:44:3e:8c:97:57:
                    f7:99:7f:8f:5a:8b:2e:e3:de:ba:35:c7:cc:50:93:
                    e6:51:b0:18:2b:61:81:5d:8d:dd:7b:c5:43:62:26:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:B5:9E:B0:22:B4:67:41:86:42:67:99:50:7B:B8:E7:8C:14:70
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/178ac3bb-c559-4f48-9f12-aaf377e291d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:4b:4f:d2:fd:41:31:fe:f1:83:d3:6f:7d:0d:cc:f5:9d:57:
         40:9f:56:d6:21:f0:58:ca:35:bd:41:57:e8:d4:41:91:cc:68:
         a9:25:cb:8d:72:7f:9a:c0:a2:ac:bc:8a:22:4c:cb:28:9e:a8:
         e9:e9:b7:37:05:2a:23:a7:00:2e:dc:05:b2:70:43:18:00:8c:
         66:23:e8:ea:00:22:87:70:79:ce:da:76:7e:83:0f:7d:48:aa:
         d9:f4:47:8a:87:1f:af:59:b8:d9:11:6f:05:e9:89:ed:95:64:
         45:60:ec:51:96:7a:1e:0a:3b:d9:a7:f9:bc:05:15:36:c1:8f:
         0a:7f:82:b9:f4:8c:78:38:7c:ee:e4:91:1e:25:c9:38:3f:55:
         d1:c3:b1:f2:a3:57:af:d9:2c:88:1e:7c:7b:a1:4e:40:7b:d6:
         26:ca:5d:8c:06:86:b4:be:ee:22:1f:a5:b5:7e:eb:21:b2:2f:
         d9:0d:0b:e6:c9:31:b4:a0:a5:c0:2f:78:ca:76:44:4f:4e:ff:
         2e:32:a2:f3:45:19:2b:b3:31:a6:2f:7e:74:f9:64:59:25:f2:
         f5:22:84:5d:0a:02:ac:ec:eb:71:b6:de:e7:18:7a:5c:5a:4a:
         a4:44:63:82:a3:fc:7d:e8:ba:f7:83:f8:65:15:78:ae:b8:90:
         3e:d5:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----