Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/867eb5da-89f6-4a94-9f4c-6f973377b1e9.roa
File:                     867eb5da-89f6-4a94-9f4c-6f973377b1e9.roa (raw, json)
Hash identifier:          gKSGrda5dqWNcQbFNhdazYVsU5VzFn5XXffGKSquU/I=
Subject key identifier:   F0:EC:F6:72:65:05:F8:9B:84:35:66:44:7E:20:98:EE:24:22:3D:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1E703239CEA46F8038E23AF238333378D7EA7CD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/867eb5da-89f6-4a94-9f4c-6f973377b1e9.roa
Signing time:             Tue 14 Oct 2025 22:40:22 +0000
ROA not before:           Tue 14 Oct 2025 22:40:22 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:70:32:39:ce:a4:6f:80:38:e2:3a:f2:38:33:33:78:d7:ea:7c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:40:22 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=3a987cc8d9c1aaf7c2b77a671cd52b6858acbbfe2431fd0cd07bf2409ae15d33, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:83:a0:eb:2f:9c:aa:39:46:36:77:86:57:
                    8b:31:63:54:1a:62:e7:45:14:c6:c0:65:3a:b9:98:
                    1c:7c:7a:8b:22:ca:36:47:9e:f9:3f:f6:78:41:f8:
                    f9:ab:83:2d:66:0c:17:3a:f3:b7:ec:9d:f2:22:bc:
                    8a:7f:d9:a0:0f:b3:40:6b:11:0e:b5:81:2c:be:9a:
                    ce:02:65:9c:2a:2d:d3:de:e4:fc:c7:d9:01:88:7a:
                    a7:bb:3f:1d:ae:37:dd:64:fe:07:3b:7f:3f:ed:3d:
                    16:14:93:ff:2f:eb:d9:ee:12:33:05:e0:ed:43:3b:
                    38:8e:b1:ff:d0:fd:1d:dc:7b:64:71:8f:26:51:49:
                    cc:f2:76:ce:8e:d4:77:cb:b7:74:04:60:db:92:53:
                    5e:af:00:3d:e1:08:37:39:14:03:e8:ed:fa:b9:8f:
                    da:73:d9:8b:f5:78:dc:02:e4:74:f4:47:7a:d5:7f:
                    e8:6e:89:4f:66:96:25:25:9d:30:ed:a7:00:c0:e3:
                    c2:d2:77:ee:b3:62:1f:7d:77:85:6a:d5:71:ea:dd:
                    c4:01:3d:2c:d3:13:7e:2d:c3:ce:fa:6c:61:e1:a6:
                    08:d6:43:57:5d:12:e1:e6:00:f2:02:fc:f7:f8:56:
                    6e:38:f6:a2:98:b3:39:a6:c9:26:73:6b:2e:3b:b5:
                    b0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EC:F6:72:65:05:F8:9B:84:35:66:44:7E:20:98:EE:24:22:3D:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/867eb5da-89f6-4a94-9f4c-6f973377b1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:db:22:c2:17:00:91:22:78:ee:ca:26:81:6f:6b:d0:60:
         80:a9:85:54:1b:a6:24:f7:1a:16:d1:91:72:57:db:11:02:3f:
         38:5d:17:58:fc:b2:ee:7e:3d:68:0d:4a:a3:a4:20:8c:55:1f:
         19:3d:56:23:38:db:52:17:63:ba:be:6d:12:42:f0:e9:cd:29:
         67:3b:15:a9:df:86:fc:2b:75:75:0e:fe:13:f2:ae:67:62:2e:
         d5:5b:11:bc:4f:29:90:4c:74:9e:99:57:a5:81:d6:fc:88:44:
         bd:5a:53:bf:bf:2d:e7:f5:eb:d3:08:27:b1:31:ea:df:76:50:
         03:1f:0b:69:6c:b5:d0:a6:83:44:03:51:db:2d:90:e8:7a:39:
         09:7f:3e:69:4f:b7:86:cd:5b:4a:af:30:0e:0f:17:16:07:37:
         59:eb:a6:ee:a7:34:b9:33:82:d5:1a:cd:b9:53:54:e6:9f:ea:
         47:c6:61:4d:44:59:93:d7:b0:38:c8:52:1f:30:44:eb:3c:d3:
         e8:0b:1f:08:e9:5f:00:fd:0f:5c:d5:b5:99:a1:94:4a:49:16:
         21:9a:cc:94:da:f3:88:fa:86:39:e0:35:dc:be:5c:68:60:ab:
         b3:3f:ab:13:f2:b3:c9:2c:18:09:fd:1a:b9:8b:51:4b:18:e4:
         ca:c6:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----