Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79591619-1749-4215-a9c6-d0f272d004a0.roa
File:                     79591619-1749-4215-a9c6-d0f272d004a0.roa (raw, json)
Hash identifier:          UWYKnzcgabw2a1Tbr74oXAbWbeGMGCg545ohhTiuB4g=
Subject key identifier:   DB:F2:77:1F:16:26:5F:A0:42:5C:01:85:E6:CE:63:D6:72:85:70:65
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       504343A0CDBE022451BE8E1A4F0ED72451DA6E34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79591619-1749-4215-a9c6-d0f272d004a0.roa
Signing time:             Tue 14 Oct 2025 20:38:33 +0000
ROA not before:           Tue 14 Oct 2025 20:38:33 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:43:43:a0:cd:be:02:24:51:be:8e:1a:4f:0e:d7:24:51:da:6e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 20:38:33 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=762aa2cd5eb7d2e10c4fd914a55e92fefa85d0dff5c4be587a3689ef60e2b283, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:ff:60:9e:9f:b2:0a:75:5b:ac:4c:5e:6b:
                    c3:90:71:c9:5c:96:0e:7e:26:86:ee:01:ed:43:21:
                    75:b9:64:5d:14:10:d5:97:32:3a:6d:5e:56:4c:31:
                    3d:16:e5:11:77:e4:55:02:6a:78:4f:73:c2:bd:7e:
                    c3:6b:c1:4b:c2:8a:1d:38:a8:90:9f:9b:09:68:8b:
                    9e:47:45:c2:ec:6d:b7:3f:7b:58:74:66:cc:5d:db:
                    58:c2:38:0b:33:b6:12:f3:e6:c9:81:ad:50:1a:70:
                    ca:a7:e3:f5:a9:20:29:33:cc:4a:a0:3c:76:d1:21:
                    ac:a9:b7:c5:d7:41:25:6d:2a:9a:b5:d0:7b:e3:c7:
                    0a:38:5e:18:2d:0d:5a:92:4e:93:3b:40:28:8b:ec:
                    16:b7:ff:52:95:9d:ab:fe:fa:ee:da:04:c3:b4:4e:
                    07:ef:a8:8b:f1:30:69:1a:58:ce:e6:28:5e:6d:52:
                    78:29:b1:97:cf:52:bd:c7:52:49:de:1d:05:e9:d3:
                    bd:30:cb:04:12:18:41:c9:3e:df:3f:05:72:48:3a:
                    39:62:f9:b8:e6:af:2b:9a:52:6a:b8:b8:c2:66:26:
                    c5:c4:4e:18:bf:09:09:bf:9d:65:f1:a1:85:96:2d:
                    f1:54:73:5d:cc:56:ed:49:b8:7f:ff:49:f6:a7:b9:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F2:77:1F:16:26:5F:A0:42:5C:01:85:E6:CE:63:D6:72:85:70:65
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79591619-1749-4215-a9c6-d0f272d004a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:c2:63:4f:d4:c3:55:87:c3:5b:35:0a:2e:b4:a4:af:ec:
         85:74:c1:e7:5d:32:8b:1e:3b:fd:4a:7d:26:49:b4:22:c4:64:
         8d:c2:00:2c:5f:5e:7c:f9:63:f4:a7:31:c1:bb:63:45:d1:54:
         b8:34:85:ec:97:8e:eb:22:7d:62:2a:20:bb:09:26:b4:3a:c9:
         b7:a8:ce:2a:28:e6:2e:fb:df:b0:05:27:7e:28:d0:59:c2:03:
         e2:00:53:02:8c:c6:3d:c1:3d:a7:00:a6:fd:ab:13:1e:d7:a3:
         1e:57:15:49:a8:84:e1:55:aa:8f:7f:64:e5:73:aa:d4:20:10:
         b0:61:aa:74:80:23:45:b9:49:a6:6c:b6:38:b1:e3:cb:12:07:
         8a:31:88:fd:a4:75:16:78:95:07:ac:fa:e2:3b:6d:b1:b0:f8:
         8e:09:85:62:fa:39:21:79:15:e9:5c:ee:fd:69:8b:c5:a9:c0:
         cb:73:42:5d:c1:bb:3e:17:07:b3:2f:bd:cf:9f:b2:e5:be:54:
         bd:66:b6:b7:84:ce:4c:7a:0e:2b:a4:2c:10:6c:65:d3:cd:97:
         35:e9:ee:f7:ae:48:3b:2c:8e:13:f6:e2:cd:25:ec:77:d8:7b:
         fc:0b:2e:61:3c:1c:41:a9:58:bb:7c:02:c2:fb:d7:43:e9:79:
         26:8a:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----