Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ecbe207-53eb-49cb-b4db-59de33e14ee3.roa
File:                     8ecbe207-53eb-49cb-b4db-59de33e14ee3.roa (raw, json)
Hash identifier:          HNRmavmbcZBY+AVTXK8Em4+8TUPPJHCaEIFGv6qAzNU=
Subject key identifier:   46:C0:A4:8E:87:AF:9C:4A:5A:64:08:C0:9D:A1:84:CD:26:CF:DA:A3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2B673A65772FE38E61CE65D397DFCBBF27C08410
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ecbe207-53eb-49cb-b4db-59de33e14ee3.roa
Signing time:             Wed 15 Oct 2025 17:12:19 +0000
ROA not before:           Wed 15 Oct 2025 17:12:19 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:67:3a:65:77:2f:e3:8e:61:ce:65:d3:97:df:cb:bf:27:c0:84:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:12:19 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=e30319460a8d9996a99df79d2a2ff96ffc966f04f188a7bdd0a3551db0586934, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:d5:f5:a3:a3:0e:a2:62:d3:2e:2b:b7:34:
                    0f:10:50:db:be:e3:f2:1d:c6:2f:3c:53:9e:19:f2:
                    d7:ae:34:0e:71:d2:00:59:f7:09:41:c7:db:37:73:
                    f0:8f:41:4a:6d:ee:76:5a:b4:60:9f:29:88:35:29:
                    4d:52:a9:e4:23:78:6d:c0:44:f5:e8:40:1b:b9:1e:
                    89:02:bd:ae:5d:18:36:e1:b8:7f:3f:81:74:86:da:
                    d5:e9:6c:f5:0d:ba:61:d5:d0:76:36:00:22:ee:3d:
                    dd:f6:1e:b8:c8:42:99:f7:b9:8d:3c:68:b1:e2:c9:
                    9e:a2:56:6c:f3:63:12:80:7a:b4:d3:aa:ff:7b:92:
                    21:1c:13:af:78:f9:41:01:b5:d3:54:83:83:00:e8:
                    01:17:b1:28:76:6b:0e:a5:dc:dc:4a:06:03:e3:57:
                    ed:54:97:77:49:c1:98:ef:ff:8a:42:d0:8b:8d:dc:
                    c5:02:33:fd:26:47:d0:e6:66:cc:1b:3f:c0:35:fb:
                    93:86:7d:04:bb:9a:a1:2c:79:9e:49:0e:34:fa:a6:
                    3d:d0:e5:61:86:38:db:41:16:28:67:5b:61:60:09:
                    bb:00:61:84:b8:5f:41:ea:4a:77:29:11:0e:c2:87:
                    fe:85:b5:9f:50:5c:38:87:8f:66:c9:de:ed:4a:1d:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C0:A4:8E:87:AF:9C:4A:5A:64:08:C0:9D:A1:84:CD:26:CF:DA:A3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ecbe207-53eb-49cb-b4db-59de33e14ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:6f:77:26:ee:e1:e9:fd:6e:c2:fc:98:e4:05:29:90:4b:6e:
         3a:55:79:0f:fb:86:e2:6f:c8:ca:a6:f6:d7:f0:5f:e1:5c:4d:
         81:cb:9b:0f:a0:52:a9:98:8f:e9:b5:a2:95:ee:c4:04:ec:d1:
         63:cf:8f:3d:0f:9b:f0:b0:15:3e:a6:65:f8:be:3c:28:2d:42:
         d3:43:51:e6:c6:a0:40:c7:a4:c3:fd:a1:0a:da:e4:98:93:ca:
         75:b2:0a:a6:ca:42:13:fa:f6:e4:c1:ce:b4:98:d4:1e:d5:99:
         d5:40:df:84:1f:74:0e:81:61:81:07:c1:9d:99:db:bd:62:2d:
         88:b5:01:76:dd:9f:1e:2a:74:8f:2b:05:d3:60:f6:1b:35:ad:
         a4:bb:9e:a3:a5:c3:a9:20:65:0f:d6:e2:ce:c5:a1:bf:56:c9:
         34:92:fd:74:f9:f0:a0:51:94:14:fd:1a:9b:93:37:ea:59:cd:
         2f:b9:3d:05:54:ec:79:b2:9d:73:8e:8e:fb:6d:e3:b0:88:c3:
         d0:0b:ee:36:1b:5f:81:02:1c:a0:87:a2:34:72:36:b2:ff:26:
         4c:0e:50:84:de:19:3d:4a:8b:b4:05:dd:e3:12:36:df:a4:1c:
         8c:62:df:2e:c4:14:ab:8b:26:ab:7a:fd:68:4c:52:64:3b:9a:
         f0:9c:bb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----