Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e4b7dd-645f-4a01-8cf1-5946569ba634.roa
File:                     64e4b7dd-645f-4a01-8cf1-5946569ba634.roa (raw, json)
Hash identifier:          AnA01I64wEjBoPjUlj43b5upSiRIMZYGfKyPkt5nn40=
Subject key identifier:   2F:C4:D3:1D:02:25:48:55:4D:3E:2D:AE:E7:37:BC:93:D3:F4:57:2D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       377782CD05A900D58E51107A0D2A7D39C5F53525
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e4b7dd-645f-4a01-8cf1-5946569ba634.roa
Signing time:             Wed 15 Oct 2025 17:22:40 +0000
ROA not before:           Wed 15 Oct 2025 17:22:40 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:82:cd:05:a9:00:d5:8e:51:10:7a:0d:2a:7d:39:c5:f5:35:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:22:40 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=c60817abe5bd96d2e86095a25b7cf8614380c944244187a6a8ea83cd0de1207a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:25:7a:03:ed:a0:a6:21:59:9f:5f:c0:42:
                    ec:28:a0:67:b9:64:e7:92:46:12:1c:e3:9b:d9:33:
                    b6:2a:67:b9:45:e5:9c:65:bd:db:f5:18:28:4b:cb:
                    e1:31:4e:0f:8c:4a:c9:fc:c2:83:bd:04:f7:96:0a:
                    9e:ae:c9:af:f7:18:bb:7e:85:1a:fd:b6:ce:b9:4f:
                    d2:e3:2f:20:3e:49:c2:a1:67:a9:73:12:5e:71:54:
                    fb:60:d9:7e:d2:89:35:aa:ae:c6:43:5c:3e:08:74:
                    66:4e:a6:fc:6e:a1:ca:2f:f9:86:1f:30:f1:d5:e1:
                    15:0c:ec:e2:fb:9a:df:d1:61:ef:a0:8b:26:3d:0b:
                    f3:4d:ad:3c:05:94:04:31:3b:69:d6:92:cd:14:26:
                    d8:b8:17:c7:1b:5d:b3:7b:65:e3:70:db:19:04:58:
                    fd:c9:f8:fb:cd:6a:8a:b8:c3:9c:3f:56:be:48:61:
                    02:d3:25:32:90:d1:97:38:d6:cd:97:16:5d:dc:8e:
                    71:fd:23:0d:cb:b7:73:ec:84:54:8f:d8:98:ea:20:
                    64:5b:00:96:87:2a:e9:a0:39:43:70:0a:f9:60:76:
                    3d:ce:85:56:97:47:66:77:d0:19:10:e8:62:87:b4:
                    df:16:24:8b:8d:de:0a:93:be:89:c4:a5:7b:a6:a1:
                    1c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:D3:1D:02:25:48:55:4D:3E:2D:AE:E7:37:BC:93:D3:F4:57:2D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64e4b7dd-645f-4a01-8cf1-5946569ba634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9c:0e:38:6d:bb:7a:4f:fc:c2:b4:9d:a7:8f:b4:ab:9a:fc:
         7b:b5:61:5c:2e:59:cb:1c:97:37:f9:07:1c:b5:2a:3d:0f:a4:
         01:eb:28:11:6a:12:c1:72:e3:ea:a2:44:39:99:cc:2a:49:96:
         cd:71:00:40:a4:4f:98:7e:7b:51:49:f2:32:4e:fb:a4:52:7d:
         9c:91:c1:69:4a:53:af:2b:66:a4:d7:ac:2c:59:a8:dc:a8:36:
         32:1a:4a:1d:3c:3d:11:91:d4:78:b4:df:03:90:2f:e9:c0:16:
         a0:cb:71:24:65:7e:8f:2d:ad:e0:c1:1b:ff:09:bd:9e:93:8f:
         a9:b3:8d:56:ae:92:64:eb:c9:0b:39:12:cf:d6:7e:dc:8f:70:
         fc:0d:ae:cc:d9:39:c0:3d:49:cf:2d:81:4d:1c:09:2b:f1:23:
         02:0f:9f:bf:14:79:1f:91:3e:00:ae:77:51:12:36:0b:7f:2c:
         61:c1:20:08:6b:2a:ef:4c:f7:69:74:e5:09:fd:db:ee:c7:94:
         88:32:67:7c:4b:6d:bb:55:cf:d2:24:23:3a:68:db:46:ba:78:
         11:ab:54:a2:e7:70:19:39:f1:94:4a:9e:c3:36:ee:e8:68:10:
         d6:b7:9c:9d:b3:43:55:a6:97:dd:82:1f:cd:a8:5e:2d:56:10:
         47:a4:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----