Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb209db-5308-4154-9c60-386efe44cdd9.roa
File:                     4eb209db-5308-4154-9c60-386efe44cdd9.roa (raw, json)
Hash identifier:          Jpb8ktrr6WMl1aOp/5Mb4QWRQQeB17SfPkZoaN30D30=
Subject key identifier:   D7:32:CE:74:6C:D4:72:A0:1B:09:DC:DD:15:92:1A:99:58:43:16:24
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0426117C6FF31A7EC4731065664E388851DA3875
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb209db-5308-4154-9c60-386efe44cdd9.roa
Signing time:             Wed 15 Oct 2025 17:51:08 +0000
ROA not before:           Wed 15 Oct 2025 17:51:08 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:26:11:7c:6f:f3:1a:7e:c4:73:10:65:66:4e:38:88:51:da:38:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:51:08 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=0b2309b3cfe8d858614a28c13ee6cae70ef673c441245bf025bcb7b3ae0165eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b9:e8:5e:8a:16:77:42:13:81:ee:f2:f2:7e:
                    52:19:b6:3c:94:2b:19:33:b5:2d:7a:a4:98:40:52:
                    d6:4a:a5:c6:aa:9e:33:ca:7f:10:5e:df:e6:25:dc:
                    da:db:7b:25:61:e3:9c:cc:f9:ed:28:60:3e:66:6a:
                    96:c2:fb:5a:fb:6b:db:84:1b:a4:e5:5e:f7:6a:fe:
                    16:56:a6:37:3c:18:e8:97:69:47:28:95:cc:a5:53:
                    ba:06:a6:f4:23:fe:80:0f:69:bf:35:45:7e:b3:a6:
                    44:ca:9b:8d:10:23:c4:00:b8:f9:8c:7c:e8:b2:a3:
                    d4:1b:c6:cc:c3:42:8b:c3:04:5f:a6:74:ca:c4:bb:
                    b6:45:e1:df:47:17:53:59:02:4d:28:f0:82:86:c9:
                    f5:ce:8a:fd:f1:32:8d:1b:cf:f6:6a:7c:3b:34:da:
                    58:98:f8:e7:f4:ea:7a:b1:d2:91:2a:e7:02:1d:76:
                    18:20:c6:b2:9a:cd:72:c6:c0:27:44:e1:4c:33:1e:
                    13:00:52:8f:40:01:88:17:07:87:b6:34:cf:87:5e:
                    10:b5:81:f6:bf:30:31:b4:61:cc:4f:2c:0a:47:ca:
                    7e:8d:a5:99:81:d0:46:cc:98:20:7e:95:f9:ba:06:
                    98:1d:80:e3:00:a3:9c:33:d1:cd:62:5f:8e:a1:0d:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:32:CE:74:6C:D4:72:A0:1B:09:DC:DD:15:92:1A:99:58:43:16:24
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eb209db-5308-4154-9c60-386efe44cdd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:2f:b3:fe:3c:0a:e5:ab:c2:95:f7:ef:e8:72:28:bd:4f:
         3a:9d:fc:a4:3a:64:a5:7d:b0:d9:1d:f5:c1:da:d9:84:35:30:
         af:99:ec:2e:24:47:35:36:15:39:15:d4:d5:2f:7e:a2:e0:45:
         da:16:d2:39:c0:ae:ec:a4:41:ba:61:9d:62:86:a6:b5:17:b3:
         e2:af:cd:4f:15:01:14:4b:6b:4a:4e:ff:d7:65:20:2d:0f:d5:
         79:d4:7f:3b:18:25:fa:3c:ce:e4:59:21:32:c5:3e:d7:b5:3c:
         ba:57:5e:d8:f8:5b:87:d7:d9:1d:6e:b5:88:c7:7b:b3:48:25:
         13:a8:cd:93:dd:d8:24:20:12:a3:56:3a:f6:41:f2:69:d7:cf:
         04:7f:bd:fe:a8:cf:92:c8:8b:64:14:4d:66:e0:2e:95:a0:ac:
         69:23:0f:c7:8b:16:79:57:aa:dc:33:78:a3:47:9d:33:6d:de:
         c6:52:d7:30:39:d0:79:cd:9f:64:ca:f2:ec:b6:1e:01:29:9e:
         06:40:11:64:77:45:98:3a:61:07:6c:73:e8:82:15:9e:55:5e:
         00:79:86:3a:6a:57:b9:37:3b:a5:ff:16:de:c2:67:ac:9d:05:
         e4:e8:57:23:82:32:c2:39:99:78:da:d7:f3:74:2a:a4:59:af:
         cf:17:26:fb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBCYRfG/zGn7EcxBlZk44iFHaOHUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTc1MTA4WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYjIzMDliM2NmZThkODU4NjE0YTI4YzEzZWU2Y2FlNzBl
ZjY3M2M0NDEyNDViZjAyNWJjYjdiM2FlMDE2NWViMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvueheihZ3QhOB7vLyflIZtjyUKxkztS16pJhAUtZKpcaq
njPKfxBe3+Yl3NrbeyVh45zM+e0oYD5mapbC+1r7a9uEG6TlXvdq/hZWpjc8GOiX
aUcolcylU7oGpvQj/oAPab81RX6zpkTKm40QI8QAuPmMfOiyo9QbxszDQovDBF+m
dMrEu7ZF4d9HF1NZAk0o8IKGyfXOiv3xMo0bz/ZqfDs02liY+Of06nqx0pEq5wId
dhggxrKazXLGwCdE4UwzHhMAUo9AAYgXB4e2NM+HXhC1gfa/MDG0YcxPLApHyn6N
pZmB0EbMmCB+lfm6BpgdgOMAo5wz0c1iX46hDTq5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1zLOdGzUcqAbCdzdFZIamVhDFiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRlYjIwOWRiLTUzMDgtNDE1NC05YzYwLTM4NmVmZTQ0Y2RkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVgQwDQYJKoZIhvcNAQELBQADggEBAKc5L7P+PArlq8KV9+/ocii9Tzqd
/KQ6ZKV9sNkd9cHa2YQ1MK+Z7C4kRzU2FTkV1NUvfqLgRdoW0jnAruykQbphnWKG
prUXs+KvzU8VARRLa0pO/9dlIC0P1XnUfzsYJfo8zuRZITLFPte1PLpXXtj4W4fX
2R1utYjHe7NIJROozZPd2CQgEqNWOvZB8mnXzwR/vf6oz5LIi2QUTWbgLpWgrGkj
D8eLFnlXqtwzeKNHnTNt3sZS1zA50HnNn2TK8uy2HgEpngZAEWR3RZg6YQdsc+iC
FZ5VXgB5hjpqV7k3O6X/Ft7CZ6ydBeToVyOCMsI5mXja1/N0KqRZr88XJvs=
-----END CERTIFICATE-----