Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1fa80a4-faa5-4669-9b8a-c308f31577b1.roa
File:                     b1fa80a4-faa5-4669-9b8a-c308f31577b1.roa (raw, json)
Hash identifier:          iyrxGLrLdqIemBlyy/NzXAWCU4KFCj0fQGPCN7fYG7Y=
Subject key identifier:   30:68:4C:BA:06:66:83:40:6D:45:CD:5B:12:44:01:F3:2C:18:6E:0B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F42470853CF6476623BF692EEB30053FCEBA6C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1fa80a4-faa5-4669-9b8a-c308f31577b1.roa
Signing time:             Wed 15 Oct 2025 17:01:19 +0000
ROA not before:           Wed 15 Oct 2025 17:01:19 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.236.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:42:47:08:53:cf:64:76:62:3b:f6:92:ee:b3:00:53:fc:eb:a6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 17:01:19 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=3795d331cd553d31b29600da33b22dd4bb97fdadf7f0dd6653c35830aa1e1186, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:d5:86:40:ff:23:7b:ad:0a:20:d5:ae:b2:
                    5c:b1:eb:09:ef:18:50:5a:09:09:21:a6:df:97:58:
                    16:a3:e1:89:54:8d:af:4b:f5:33:6f:d8:d9:16:39:
                    58:21:08:df:6c:cc:36:05:3f:fc:ee:51:ba:4f:84:
                    a8:72:57:9f:d6:12:7b:be:f7:d6:09:a5:bf:2f:1b:
                    56:03:0d:7d:97:34:a5:b1:7b:7b:a4:4f:5b:ef:5c:
                    43:13:eb:c9:33:3d:d2:cb:66:bd:b1:4c:83:88:3c:
                    37:e4:46:e7:3d:bc:ff:21:91:8f:8a:36:cf:39:9b:
                    1c:18:ad:62:64:36:b3:75:46:d5:b0:ae:74:b3:17:
                    52:eb:6d:ea:6c:24:82:dc:84:3e:5c:99:f8:1d:31:
                    b0:c4:8f:c7:12:ea:3c:b8:71:41:38:1e:19:c9:e1:
                    d2:83:17:8b:23:eb:f6:00:1d:85:b6:bb:2b:73:75:
                    bc:bd:70:7c:15:c3:8d:de:18:d6:06:83:87:0e:69:
                    95:8b:ea:b9:63:69:2d:a6:91:5d:db:79:02:b5:39:
                    ce:da:33:58:d1:a4:2e:af:16:fd:44:ae:55:fe:d8:
                    38:07:ff:ec:70:7e:2e:36:df:6c:7e:3c:69:5a:10:
                    45:93:6c:03:81:a0:85:19:e4:89:f5:15:09:b9:ab:
                    82:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:4C:BA:06:66:83:40:6D:45:CD:5B:12:44:01:F3:2C:18:6E:0B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1fa80a4-faa5-4669-9b8a-c308f31577b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:96:4c:7f:7f:2f:62:0a:db:07:b3:97:f9:23:24:de:10:cf:
         ca:4f:92:ed:1f:f4:de:80:89:64:44:83:e3:19:6a:aa:a6:00:
         a3:3f:98:c9:0d:cc:ef:e0:8f:af:84:8e:8d:7a:49:f5:83:1a:
         41:c8:38:30:13:80:48:e7:c3:8d:99:7f:0b:bc:40:6c:07:12:
         cb:11:86:76:b2:0f:d0:ad:33:d9:43:38:c6:e9:b1:76:6b:d5:
         15:58:f1:6e:30:26:a4:6b:87:ff:db:4a:f2:7b:78:9e:d1:0e:
         01:e2:7f:5c:69:54:31:d9:28:64:e0:8b:12:60:64:65:60:e6:
         11:21:fe:c5:97:c9:88:69:43:ef:53:1c:c2:7b:b0:1a:1e:42:
         1c:ba:68:43:bb:c0:85:74:61:16:50:d1:aa:36:40:95:27:d0:
         b0:c1:b8:60:8a:7c:c8:aa:84:14:a4:22:43:b0:d0:82:ba:0b:
         f4:d3:9e:22:c4:5f:64:31:54:af:6b:f3:ee:46:48:ec:ea:46:
         3a:2f:0d:86:20:46:1c:fb:49:92:cd:57:fc:61:8f:d7:3e:ca:
         ae:c0:20:65:90:09:aa:01:73:c4:b6:0a:c0:48:b9:81:f4:9f:
         82:ef:5c:35:82:d0:52:b7:49:bb:45:a6:86:f0:98:4f:d6:73:
         94:66:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----