Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ebbc6c0-f8f9-4565-b8cf-99185420e026.roa
File:                     6ebbc6c0-f8f9-4565-b8cf-99185420e026.roa (raw, json)
Hash identifier:          4PXwwlluvYB/4j0i/1Gb64W+TAEGXFHetNChXk2LmuM=
Subject key identifier:   66:EF:27:EB:3A:C3:E5:64:4A:6C:4E:3B:2C:F1:BE:2E:CE:1F:62:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2A5B7FFCE88CA5209480F6267612FB3DEB3DDD3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ebbc6c0-f8f9-4565-b8cf-99185420e026.roa
Signing time:             Wed 15 Oct 2025 16:52:46 +0000
ROA not before:           Wed 15 Oct 2025 16:52:46 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.108.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:5b:7f:fc:e8:8c:a5:20:94:80:f6:26:76:12:fb:3d:eb:3d:dd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:52:46 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=abef01d56c195232c935cb56f78b4ab8e8e58922c648d5d5534d6240f7c61ac3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:92:78:47:e5:c0:3c:25:76:7b:75:22:ca:
                    07:7e:6b:71:fa:79:90:e6:b4:b7:f2:ae:4c:7d:24:
                    c8:73:c9:f8:87:96:bb:20:f7:34:a7:d7:22:87:22:
                    84:c2:85:9c:8e:b1:04:36:5a:db:49:40:b2:01:7d:
                    72:43:83:f4:08:16:c6:93:87:ce:64:84:41:f8:f9:
                    41:c4:2a:0f:02:ea:d0:65:8b:af:8b:1e:7e:85:dd:
                    63:11:2e:f4:e0:7d:7a:d3:6a:01:c1:51:53:c4:b7:
                    b9:cf:ac:4c:63:73:25:6a:74:5b:4c:f4:49:1b:b8:
                    60:ff:5e:d3:73:f2:3b:fd:73:6f:f7:2d:8a:5e:e0:
                    fe:e5:79:93:b4:6c:0c:3c:f3:5d:7c:4e:85:b0:4b:
                    99:9b:f3:66:b1:71:de:3d:19:88:90:25:c1:e9:33:
                    ca:68:78:cf:0b:73:5c:f3:a4:95:c5:d8:40:de:8c:
                    42:32:87:be:74:97:8c:90:20:27:75:f0:30:dd:a7:
                    33:0f:eb:d7:d3:9c:e1:72:43:52:49:4b:29:80:f6:
                    ad:b5:e7:6b:2a:aa:78:33:74:02:d5:ad:d4:29:a4:
                    ee:13:32:33:6b:65:17:1d:39:8e:de:1a:33:81:5f:
                    6e:b0:ef:0d:52:31:aa:c3:2c:da:c0:0a:a9:78:fc:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EF:27:EB:3A:C3:E5:64:4A:6C:4E:3B:2C:F1:BE:2E:CE:1F:62:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ebbc6c0-f8f9-4565-b8cf-99185420e026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:83:58:41:15:38:5f:27:6f:d0:90:bf:40:b7:21:8a:30:
         cf:ec:53:0b:3a:4e:fd:ab:e4:fc:86:22:de:35:8a:7a:b5:7e:
         85:22:b1:8c:9a:9d:6b:81:d2:8e:7a:29:8c:87:c3:ab:62:c1:
         51:79:eb:fa:13:17:0d:c9:e2:3f:a8:8f:e9:20:1b:15:f8:51:
         2c:61:e3:53:92:76:b7:dd:b3:ce:c3:c2:bd:0f:3d:24:f8:8c:
         56:b4:81:b3:3a:dd:31:77:04:e1:08:1d:35:93:2d:cd:27:e9:
         32:e7:5d:3f:2a:f4:2f:39:e4:02:e1:de:50:04:f7:f0:e1:af:
         23:98:c1:59:9b:d0:da:74:6a:9c:e4:21:bb:7c:a8:a3:9b:6c:
         c6:b8:53:ac:b8:3b:e9:7c:33:d6:e4:65:ac:49:35:bc:fb:f1:
         b1:6e:2e:9a:0a:4c:1a:53:34:d6:98:87:54:19:91:8f:d0:87:
         97:28:b7:0a:1c:ba:33:27:50:f4:1c:ae:0b:24:db:5a:4f:5e:
         ed:51:a4:13:62:d8:28:1f:43:23:ec:5c:6b:f2:21:28:58:1e:
         59:da:46:15:b2:89:c2:09:e4:2b:ad:21:31:6a:d3:1e:bf:40:
         f5:89:c3:4b:09:f9:16:f4:9d:1c:91:43:ad:30:0c:9d:03:e0:
         33:2e:de:39
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKlt//OiMpSCUgPYmdhL7Pes93TswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTY1MjQ2WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYmVmMDFkNTZjMTk1MjMyYzkzNWNiNTZmNzhiNGFiOGU4
ZTU4OTIyYzY0OGQ1ZDU1MzRkNjI0MGY3YzYxYWMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSe5J4R+XAPCV2e3Uiygd+a3H6eZDmtLfyrkx9JMhzyfiH
lrsg9zSn1yKHIoTChZyOsQQ2WttJQLIBfXJDg/QIFsaTh85khEH4+UHEKg8C6tBl
i6+LHn6F3WMRLvTgfXrTagHBUVPEt7nPrExjcyVqdFtM9EkbuGD/XtNz8jv9c2/3
LYpe4P7leZO0bAw88118ToWwS5mb82axcd49GYiQJcHpM8poeM8Lc1zzpJXF2EDe
jEIyh750l4yQICd18DDdpzMP69fTnOFyQ1JJSymA9q2152sqqngzdALVrdQppO4T
MjNrZRcdOY7eGjOBX26w7w1SMarDLNrACql4/LfdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZu8n6zrD5WRKbE47LPG+Ls4fYs0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlYmJjNmMwLWY4ZjktNDU2NS1iOGNmLTk5MTg1NDIwZTAyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVmwwDQYJKoZIhvcNAQELBQADggEBAHLrg1hBFThfJ2/QkL9AtyGKMM/s
Uws6Tv2r5PyGIt41inq1foUisYyanWuB0o56KYyHw6tiwVF56/oTFw3J4j+oj+kg
GxX4USxh41OSdrfds87Dwr0PPST4jFa0gbM63TF3BOEIHTWTLc0n6TLnXT8q9C85
5ALh3lAE9/DhryOYwVmb0Np0apzkIbt8qKObbMa4U6y4O+l8M9bkZaxJNbz78bFu
LpoKTBpTNNaYh1QZkY/Qh5cotwocujMnUPQcrgsk21pPXu1RpBNi2CgfQyPsXGvy
IShYHlnaRhWyicIJ5CutITFq0x6/QPWJw0sJ+Rb0nRyRQ60wDJ0D4DMu3jk=
-----END CERTIFICATE-----