Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7782c0-774d-43e2-923e-1a07b2344445.roa
File:                     6a7782c0-774d-43e2-923e-1a07b2344445.roa (raw, json)
Hash identifier:          ZjLs3LGpxpxODhO6Bbg31v+B+uhwk8mj9lXLeKtPqSg=
Subject key identifier:   99:EA:2C:11:EC:05:98:AF:9A:3A:CA:CC:8F:44:AB:B7:86:DE:08:E7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       43531A83EACAFCFEB07FFBB33C0E16389446B262
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7782c0-774d-43e2-923e-1a07b2344445.roa
Signing time:             Tue 14 Oct 2025 20:52:54 +0000
ROA not before:           Tue 14 Oct 2025 20:52:54 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.90.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:53:1a:83:ea:ca:fc:fe:b0:7f:fb:b3:3c:0e:16:38:94:46:b2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 20:52:54 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=fc85b1b56b2173fab6c1ea39e7a79492e43e470e91a7ed615d9ab67776226d35, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:65:7e:b3:c8:bc:49:32:ec:33:e3:03:be:
                    0b:e9:b9:a7:be:39:e0:68:85:c2:bd:d4:73:5e:7b:
                    71:68:ea:fd:2e:56:e4:55:22:98:0c:a6:69:1a:07:
                    34:ec:79:60:7e:ba:5f:0a:4a:4f:6f:e1:cf:f7:bb:
                    66:01:5c:8b:bb:8b:91:88:dc:54:ea:6b:f6:be:58:
                    44:c0:66:af:02:e1:c8:48:84:3c:00:e0:9e:1a:39:
                    d6:4a:c5:65:e9:15:4a:18:e7:df:9b:f8:8b:9e:36:
                    d2:9d:47:d1:ed:c3:a8:43:56:59:be:da:07:9f:d7:
                    16:59:4a:e4:54:07:53:5a:ae:d0:c2:ca:48:9a:66:
                    de:5b:aa:5b:dc:0a:ba:83:93:5a:1c:66:a6:de:c7:
                    d8:f4:78:94:17:e3:43:8b:0f:d4:3a:2e:9c:91:30:
                    2b:63:66:6e:61:50:a9:88:33:c7:b5:c4:85:2f:7e:
                    5f:8e:7e:e1:ed:e0:f4:ea:4f:c3:cd:b2:24:6d:20:
                    ba:1e:96:88:f4:4b:be:67:52:00:3f:96:b7:83:88:
                    cb:0e:ca:aa:9a:09:1e:7b:b2:67:11:98:fa:f6:d5:
                    ef:12:7b:56:4f:b0:d2:13:b3:0a:26:3f:7c:57:35:
                    70:97:73:56:53:3e:5a:5f:7e:e8:84:1f:4f:d5:6f:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:2C:11:EC:05:98:AF:9A:3A:CA:CC:8F:44:AB:B7:86:DE:08:E7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a7782c0-774d-43e2-923e-1a07b2344445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:ca:46:12:26:0e:4f:51:02:57:88:27:62:d3:e0:84:40:75:
         40:bc:69:01:d0:68:7a:20:26:8d:cc:e7:16:ea:53:77:60:93:
         6d:7c:34:0a:c5:ee:ed:1f:09:f9:e5:0d:0d:91:9a:e5:16:2b:
         40:b4:f9:bf:6c:4d:bf:a1:8d:7a:f1:6d:3d:33:07:39:df:4c:
         71:1d:92:07:51:56:c2:0e:b0:f1:d3:c0:bf:64:9d:9c:d9:b1:
         17:a5:65:e5:8c:66:8e:ce:16:96:1e:4c:6e:68:c1:51:4e:7e:
         79:15:21:f9:88:c1:92:80:a6:5c:31:39:00:7d:5f:0f:21:7a:
         42:73:64:6c:b4:c1:6d:d6:de:4c:30:43:e8:7f:5e:e9:cc:8d:
         81:f6:e4:f0:b9:f0:76:99:fa:91:a6:8c:43:a8:e7:47:a0:7a:
         a9:65:01:a7:fd:80:5d:41:c6:2a:32:c1:bc:56:cf:14:b9:34:
         87:e3:76:b8:2a:5e:4c:5c:4c:d5:56:ab:5e:ac:e9:c9:bd:54:
         99:fb:9d:49:78:a1:d4:7f:42:22:88:ca:64:2d:7a:fd:a6:47:
         38:4f:5a:73:fa:ee:6f:4a:21:11:cc:db:2f:02:a5:d5:6e:12:
         c8:d9:36:9e:61:35:0f:d5:5f:ba:7f:8a:89:fa:93:1a:10:91:
         77:02:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----