Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f9be4c3-a146-4289-bade-72ca2dd5ce15.roa
File:                     8f9be4c3-a146-4289-bade-72ca2dd5ce15.roa (raw, json)
Hash identifier:          zxazMv1pgwv2T95X+c+N/iezJ8wMMv6Hh4uJArw1fwU=
Subject key identifier:   41:FF:82:54:56:78:C4:55:8B:98:2A:EF:8D:C9:30:CB:28:11:B0:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       53BEDCBBB72D71184CA0ACCBC32CB0392B643F97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f9be4c3-a146-4289-bade-72ca2dd5ce15.roa
Signing time:             Tue 14 Oct 2025 22:42:40 +0000
ROA not before:           Tue 14 Oct 2025 22:42:40 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:dc:bb:b7:2d:71:18:4c:a0:ac:cb:c3:2c:b0:39:2b:64:3f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:42:40 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=9700c95b9240107c79c50da6148336f2469a3b6fd128fe74651bedb1fe171efa, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:33:56:f5:81:66:d3:cc:02:39:9e:23:0e:
                    81:1a:89:1d:70:cb:9d:1d:d7:e4:a6:61:eb:52:b9:
                    43:24:9c:a6:b8:ca:4f:fa:43:ac:7e:e4:d7:eb:10:
                    4c:0f:94:51:f0:95:ed:e5:d7:79:e6:85:6f:c2:28:
                    83:13:3c:9e:9d:72:ad:06:60:60:2a:0a:20:a9:47:
                    9f:b9:ce:de:83:34:c0:fb:c8:4f:34:5c:ce:a9:9d:
                    21:ce:31:e4:95:2b:7c:4f:e6:e3:ca:c5:ff:1c:27:
                    c9:63:4a:4e:2f:b4:45:04:a2:a1:b3:f8:21:d9:3b:
                    8e:1e:2a:bc:7b:d0:a9:02:a8:86:6e:c7:d3:c4:cd:
                    07:7b:c6:45:b1:ff:b1:b8:76:07:d6:d8:04:12:35:
                    a7:67:0b:b6:90:8b:24:d2:ca:4b:59:fe:ee:81:bf:
                    d1:75:6d:24:2d:73:ea:6c:b0:39:da:6b:05:31:79:
                    7b:27:f9:dd:64:5a:12:27:76:1c:1e:e3:44:0a:ff:
                    41:1c:2a:bc:30:c8:dd:ea:cd:fa:34:6c:bb:55:60:
                    db:1a:c0:99:41:ae:67:c0:60:53:c9:a8:28:db:82:
                    75:6d:63:35:10:83:63:ab:8f:7a:7c:f6:cd:6f:9a:
                    ca:42:b0:9b:57:00:ea:ca:ad:8d:06:b5:31:4f:0d:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FF:82:54:56:78:C4:55:8B:98:2A:EF:8D:C9:30:CB:28:11:B0:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f9be4c3-a146-4289-bade-72ca2dd5ce15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:30:57:7b:55:2d:2e:8e:18:1b:0b:07:85:f4:d0:c3:62:
         d1:16:81:c1:fd:1c:ee:2c:79:57:87:a1:f3:38:b5:4f:46:11:
         11:3b:58:06:a5:f1:fe:a8:e8:e5:8c:88:48:9b:46:89:07:a3:
         6b:b5:91:d7:12:14:25:cd:87:74:1d:77:63:63:ab:54:e0:83:
         fa:7e:07:d3:c5:7c:97:ee:7b:90:7d:06:15:bf:c7:dd:7a:a2:
         5a:98:29:25:4b:0f:01:0c:8b:3f:a3:f4:12:76:a3:c9:81:6e:
         ee:e3:df:45:47:da:73:40:4e:c9:48:4c:b6:36:90:7a:f5:66:
         fc:35:70:73:3c:9a:06:ec:70:e0:be:c9:e7:e0:3c:9d:66:5a:
         34:bc:84:f7:21:08:09:45:43:4a:f9:4c:9f:9f:e3:de:5f:c8:
         44:d9:22:5e:76:ec:b5:fc:f0:1f:46:13:cf:99:ae:05:5c:0a:
         b9:d5:b0:d1:3d:e1:e7:23:2c:21:07:74:2a:45:83:f1:16:25:
         89:c4:05:2d:80:ee:31:0a:e3:ab:02:c1:fc:1e:e7:53:89:d9:
         b0:56:ed:32:87:93:e9:98:21:6b:c9:09:2e:d9:48:f2:6f:81:
         6f:84:28:c8:4e:8a:88:41:31:db:1c:fb:0e:1c:fd:f9:ad:a0:
         a9:37:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----