Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78318fc-6b24-4c7f-9c4f-3bc19801691b.roa
File:                     b78318fc-6b24-4c7f-9c4f-3bc19801691b.roa (raw, json)
Hash identifier:          HIoYrVhNbuNNBTLyVc+FEPoJEsEyfQFjo1ix/XxFoVE=
Subject key identifier:   F4:AE:96:AA:B9:F5:12:07:C1:A1:19:C0:7F:EB:D3:FD:94:F7:20:95
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B0864A21DB58562D3C8D81A7E6A61F1FEFC71E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78318fc-6b24-4c7f-9c4f-3bc19801691b.roa
Signing time:             Wed 15 Oct 2025 16:01:56 +0000
ROA not before:           Wed 15 Oct 2025 16:01:56 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:08:64:a2:1d:b5:85:62:d3:c8:d8:1a:7e:6a:61:f1:fe:fc:71:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:01:56 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=7cba9e1197739ce84d5fdc421d206b322a84c83ed8d2e2860b08c38bf57299b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a2:4d:43:ed:41:76:a7:dd:fd:62:b5:15:9a:
                    d5:37:2d:c4:20:ee:c3:60:12:88:8c:50:91:fe:3f:
                    1c:5a:f1:1c:4e:48:c8:e4:67:63:ae:e1:55:f4:dd:
                    8f:12:06:62:5b:4e:d4:0a:5e:6e:02:75:5a:22:21:
                    b6:0d:44:c5:d3:b6:64:1b:ec:be:b8:f1:be:19:8c:
                    ae:4c:77:b0:40:42:4a:c8:92:6a:32:7b:00:d4:da:
                    c9:92:c0:7e:00:53:98:92:13:5e:ef:8c:79:ea:43:
                    eb:b4:ca:43:5e:89:05:77:6e:13:1f:32:9f:8f:da:
                    3f:8f:b5:c4:f3:b8:17:63:43:a4:ff:eb:b4:fb:e3:
                    41:23:a3:ec:93:1e:f6:42:ef:7b:19:f3:88:ff:75:
                    54:0e:cc:29:f1:7c:b6:ef:c5:de:26:89:31:9b:b0:
                    6f:ca:61:dd:e8:0d:01:7a:19:fb:8e:de:94:1b:f0:
                    8b:e4:e6:94:fc:08:c7:88:6d:8a:c1:a8:06:46:12:
                    f7:ac:60:e5:93:e2:aa:e4:ad:fb:3b:3f:37:84:10:
                    fa:0f:df:8d:8c:5d:b5:3f:22:d7:99:2d:a0:7a:28:
                    ff:b8:f4:1f:12:bc:48:1b:17:22:8f:0e:fc:05:89:
                    ac:86:01:70:05:bc:31:6c:b8:bd:18:32:ae:ef:db:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AE:96:AA:B9:F5:12:07:C1:A1:19:C0:7F:EB:D3:FD:94:F7:20:95
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b78318fc-6b24-4c7f-9c4f-3bc19801691b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8e:da:00:d9:7f:fd:f6:13:c8:80:be:89:f3:e9:76:42:04:
         18:af:ff:e0:a4:c5:94:63:5a:86:2f:28:4d:39:ba:b3:30:fb:
         1f:d9:55:5c:25:e7:59:c1:e1:2e:2b:3d:90:38:98:35:e8:31:
         6e:4c:bd:98:57:e3:e2:14:e6:91:c1:c0:6a:d4:b0:67:77:2a:
         f3:e4:20:c9:dd:30:cd:58:06:64:41:4b:9c:9e:fa:f8:b1:74:
         be:43:30:6b:70:39:81:69:ca:c8:9b:50:9f:9c:fe:23:a5:d5:
         9b:cf:dc:8f:5b:ff:7f:bf:e0:52:74:c8:89:52:d6:0b:f9:34:
         39:30:17:ca:ca:4e:dc:6e:04:84:50:2b:1b:19:7e:9a:18:0c:
         75:9d:4c:04:3f:65:11:3f:23:60:74:56:38:8c:86:a0:31:52:
         f3:9b:fd:2e:62:c5:1d:30:b6:f8:5a:0f:58:09:0b:90:5e:13:
         7b:30:93:48:2e:ca:c7:d8:4f:16:4b:fd:43:4f:61:d2:fd:95:
         3f:dd:43:82:ac:e2:02:20:47:42:bf:a4:04:5a:7d:f4:6b:88:
         e3:f7:6b:87:f0:67:67:6c:09:0e:26:76:91:f2:5d:1b:49:4b:
         26:61:0c:4a:45:8b:dd:1b:2b:49:5a:c6:0d:84:12:d8:bc:4f:
         54:4a:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----