Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74e8b0a0-729d-499e-94bd-70c929ef4168.roa
File:                     74e8b0a0-729d-499e-94bd-70c929ef4168.roa (raw, json)
Hash identifier:          7NrQR8jOweNDW1medi0lPu8GLlY1pafOB8X3JATAhNU=
Subject key identifier:   03:54:76:61:B4:52:C8:30:F0:FB:65:49:EC:EA:1D:C4:80:A4:0B:94
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2E037D160FB5053EA12D7E93E85C1474C9835F49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74e8b0a0-729d-499e-94bd-70c929ef4168.roa
Signing time:             Tue 14 Oct 2025 19:01:15 +0000
ROA not before:           Tue 14 Oct 2025 19:01:15 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:03:7d:16:0f:b5:05:3e:a1:2d:7e:93:e8:5c:14:74:c9:83:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 19:01:15 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=fb00e76ced5ea304e52067957123159901d61011db12dfb5c08618474ce6f9fb, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:b9:d0:a3:d4:ec:d0:6e:8a:42:26:7f:46:
                    7e:91:b2:78:86:2c:0a:b2:1a:be:a2:59:e2:c5:03:
                    a8:66:33:0e:2b:2c:f1:23:b7:0b:b8:ea:24:f4:fe:
                    bf:a7:ca:d1:01:da:28:0e:9a:ba:eb:7d:01:04:49:
                    20:60:dc:e6:ec:db:15:c4:47:58:65:75:d4:af:d9:
                    a3:08:2c:a8:f2:17:51:7c:4d:eb:39:7d:1c:3d:7a:
                    25:92:35:57:5f:a7:3f:31:a2:b9:d0:d8:73:21:d9:
                    17:6d:14:15:b7:94:a3:6e:36:3b:a0:64:ff:e3:1a:
                    77:0a:86:f3:3d:5a:7d:e0:63:aa:05:6f:c8:34:5a:
                    26:fc:ff:e1:da:38:a9:0b:c1:1a:0f:6c:be:46:f1:
                    80:b7:f4:5b:06:65:e0:8d:25:de:2b:0f:f6:73:f6:
                    dc:35:c8:c3:6e:0b:38:dd:9b:29:82:8e:4b:c7:96:
                    9d:b0:29:4f:54:23:5d:ee:c6:d6:4a:bd:19:3d:63:
                    95:2f:f1:9b:86:08:71:4e:21:6b:6b:0c:0c:94:f1:
                    a3:81:36:5d:18:2e:e8:d6:63:11:e5:9a:88:4d:b2:
                    c2:b6:13:6b:06:77:8b:af:31:73:7b:40:bd:2a:09:
                    8c:95:41:f9:aa:51:51:90:68:51:51:5e:39:1b:db:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:54:76:61:B4:52:C8:30:F0:FB:65:49:EC:EA:1D:C4:80:A4:0B:94
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74e8b0a0-729d-499e-94bd-70c929ef4168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:35:6c:37:e7:1f:cb:27:bb:7b:02:85:f7:bb:16:0e:06:
         26:ba:51:2e:6f:ec:8f:f8:5a:14:25:53:66:a7:0a:8f:60:48:
         d5:8f:5d:72:68:79:47:6f:69:5d:40:4f:de:40:93:b3:f3:a6:
         0f:0c:50:4d:9f:73:73:e8:61:7e:4b:fb:f0:a9:9d:bd:46:e5:
         22:72:b4:3e:1c:71:30:e5:85:12:5a:c2:89:46:ee:0b:ca:43:
         f8:00:9f:9f:47:e4:db:19:a6:ba:f1:fe:4e:6f:54:7b:f6:01:
         ef:48:33:02:76:ad:24:e6:68:20:63:3c:28:3a:fb:39:01:fb:
         fd:d5:d9:ed:5d:98:bb:4c:2b:3c:68:be:e9:74:42:cb:04:d1:
         4f:5e:e0:24:e2:bb:ec:37:4c:c3:b3:45:ca:1e:df:e3:fd:fa:
         ee:2d:93:ae:f8:7c:e9:3e:3a:3b:f0:9f:b6:b3:e0:83:7d:fd:
         c0:54:a4:0c:2c:04:77:2d:e7:b8:9c:ab:4c:5e:b2:86:70:e2:
         ed:81:04:bc:28:39:e1:3e:15:6a:78:fd:81:07:81:94:6d:af:
         56:fd:19:fa:6a:f2:a0:f4:5b:54:a8:08:cd:6e:2d:30:5c:d2:
         22:05:fd:bc:82:ed:ab:b0:59:9f:60:4d:b3:f7:d4:ca:e9:f3:
         51:0a:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----