Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b891b16c-61b5-4eed-a910-9f536c75520d.roa
File:                     b891b16c-61b5-4eed-a910-9f536c75520d.roa (raw, json)
Hash identifier:          n46C/hrbbTDIAAT1yVCZ5bRMrh+8F5s+MUAldSo/7AA=
Subject key identifier:   4E:3C:F4:AC:D7:CF:68:DD:3B:97:4D:1C:20:E9:30:9B:F1:93:84:A8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6DFCD02AF0E9134D072A2EDD7CD9240D294DE99D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b891b16c-61b5-4eed-a910-9f536c75520d.roa
Signing time:             Wed 15 Oct 2025 16:02:39 +0000
ROA not before:           Wed 15 Oct 2025 16:02:39 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fc:d0:2a:f0:e9:13:4d:07:2a:2e:dd:7c:d9:24:0d:29:4d:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:02:39 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=f1683656a8ce95ebfa52b14e8067651ffaf153293f9c30c7bd9d25d7b5cf6656, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:50:b0:3e:f7:d1:13:23:7d:4a:7b:8d:a6:
                    54:84:33:5b:10:f8:fb:03:b7:ec:94:40:e1:31:b8:
                    7c:1f:34:ab:64:2e:66:6c:4a:0c:2c:20:2f:d7:dc:
                    33:3c:28:a4:a9:bc:3f:f0:39:ac:ee:d3:ab:bd:ec:
                    58:ee:36:4e:f4:56:b8:da:4c:50:f2:53:86:bc:98:
                    7f:7a:31:82:39:86:2c:a5:29:83:54:5e:ff:07:f5:
                    b6:04:14:cb:4e:f1:4f:38:3e:94:75:f7:5a:64:ea:
                    ae:be:1c:89:00:e7:c7:4c:99:1d:48:6c:b0:49:05:
                    e6:35:43:79:59:6f:f9:3c:0e:46:5e:0e:1d:b6:b0:
                    08:49:06:be:5e:8c:a8:06:5f:62:9b:94:d6:2e:a1:
                    23:df:9a:21:5b:7f:74:88:46:1d:fc:5d:64:86:b1:
                    4f:69:74:73:ff:c4:5a:ab:b4:f5:d0:49:99:61:46:
                    42:aa:be:b2:6e:93:de:f6:ab:a4:12:81:c8:c5:44:
                    20:03:41:6e:45:e7:a4:41:ca:ad:c2:a5:8d:27:65:
                    22:a4:96:db:ef:82:19:4a:72:96:97:c0:c6:08:42:
                    c4:c4:3c:3f:c4:96:1e:3b:4c:77:80:73:0f:d6:fd:
                    b5:5d:93:dc:2a:64:cf:07:72:ec:58:e3:a8:38:54:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:F4:AC:D7:CF:68:DD:3B:97:4D:1C:20:E9:30:9B:F1:93:84:A8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b891b16c-61b5-4eed-a910-9f536c75520d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:59:85:c1:39:8e:40:77:d1:d2:d3:f3:12:bc:ef:db:f3:99:
         6e:a5:09:a7:bb:89:19:08:71:64:ff:94:35:af:a5:32:3f:ce:
         31:87:a9:3b:a6:8e:4e:4f:51:8d:39:5c:25:91:22:28:08:5b:
         b9:0e:4e:bc:51:6b:0a:66:76:7a:99:94:3f:12:bb:32:bb:1c:
         c7:9d:b7:43:3f:3c:00:f1:34:4b:35:2c:bb:de:bc:b4:35:31:
         cf:6c:ca:48:41:e2:f5:c7:a1:97:46:19:8d:f8:8e:0d:33:af:
         72:8a:3b:1d:ad:a0:70:17:4c:12:31:5f:d4:bd:d6:92:2b:9f:
         a5:d9:80:45:fd:97:3b:d9:c3:4c:2d:01:e4:b3:e1:1b:af:29:
         be:1f:73:99:a8:64:75:23:3f:fc:26:07:6e:97:a1:de:01:b3:
         b2:c4:a7:2c:c6:12:d1:51:b7:21:7d:8f:6b:44:cc:6c:2d:84:
         75:a6:75:28:f0:4d:fe:1d:26:e8:ad:94:b4:ef:88:80:16:08:
         36:ab:71:4c:66:f0:7c:10:80:9c:09:38:56:a4:99:a4:19:aa:
         fe:cf:90:2a:e0:00:65:1a:f0:f0:10:6a:97:4b:40:c6:bb:f2:
         2a:21:43:58:7e:5c:d5:65:db:6b:cc:10:73:36:0d:6f:c9:00:
         5f:12:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----