Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c299244b-8ab5-4726-8d27-58a8e03da7be.roa
File:                     c299244b-8ab5-4726-8d27-58a8e03da7be.roa (raw, json)
Hash identifier:          +iVct9WHJ244W3j0nWAB/cWLv7o4tiz3OcIdhMIa9MU=
Subject key identifier:   5F:27:BA:54:A1:E3:C3:19:D8:FD:9E:73:00:2D:7C:86:E4:26:67:1D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42FB4FF6ACC8E34CFF4AC12F97B0B3597D9FA479
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c299244b-8ab5-4726-8d27-58a8e03da7be.roa
Signing time:             Tue 14 Oct 2025 22:21:21 +0000
ROA not before:           Tue 14 Oct 2025 22:21:21 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fb:4f:f6:ac:c8:e3:4c:ff:4a:c1:2f:97:b0:b3:59:7d:9f:a4:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:21:21 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=0f8d42ca7971a9e9fad2c4f95dbb7bf79db8f28fd5ba9d10b39bdba1851c09a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:ac:bb:cc:65:6b:be:c5:d3:7e:89:a0:29:
                    76:50:2e:69:3f:30:81:58:29:64:8b:09:ed:db:0d:
                    0e:c7:8c:cd:f7:a1:09:26:e8:d0:da:9d:d0:ca:d5:
                    e0:b6:42:80:fe:f8:f6:f5:58:4a:e5:8e:00:d9:9c:
                    60:81:86:51:8a:bc:62:e5:71:b4:7b:6d:15:e1:6f:
                    b6:94:70:f0:66:fd:7b:16:11:a6:a7:80:26:4d:d2:
                    12:e9:38:d8:21:76:f6:5a:1a:23:33:ad:b7:45:bb:
                    c2:79:e5:d6:ef:94:f6:51:a0:27:13:51:fc:70:ba:
                    44:1b:98:9e:1f:c7:e9:7b:26:e7:0e:96:a1:4e:a3:
                    95:8a:73:7b:0c:c0:7c:96:9d:eb:7f:38:19:71:24:
                    27:fb:c7:72:d8:b0:ed:99:95:2c:fa:2d:51:72:17:
                    70:8b:cb:e4:57:3f:2e:6c:61:8a:43:c5:8b:2a:d6:
                    96:7d:a2:38:10:c2:f7:6e:eb:70:06:d4:38:3d:e1:
                    6b:3a:4e:65:89:08:38:b6:cf:4a:58:fa:f0:4a:42:
                    9b:cc:53:7e:8d:ee:2e:12:cb:5a:7e:c1:b0:ac:68:
                    9b:d9:d7:8a:89:23:c1:f6:ff:8b:13:86:a9:26:a1:
                    6a:d7:f4:a3:5e:40:17:20:c2:88:c7:1a:61:70:1b:
                    55:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:BA:54:A1:E3:C3:19:D8:FD:9E:73:00:2D:7C:86:E4:26:67:1D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c299244b-8ab5-4726-8d27-58a8e03da7be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:b6:e8:d9:30:b9:4b:f9:6e:af:b7:4e:4f:c1:c2:5b:7e:
         7c:76:2d:c1:6f:83:fe:7a:5c:a3:5f:b2:5b:9f:e2:39:ad:29:
         f1:c6:ee:b3:2e:5a:53:09:db:8f:4b:ba:04:42:a7:7f:30:40:
         b6:31:58:ef:9b:71:98:2b:0e:c8:7c:62:3f:31:91:5a:d4:46:
         fa:15:6c:9b:1f:78:ba:c9:89:c2:ea:3c:26:46:53:f9:b1:25:
         40:7a:4d:2e:0f:a0:79:13:03:0a:d1:07:c9:b0:2a:e2:48:24:
         30:59:99:25:03:b3:e4:ec:da:56:70:3a:bf:fa:b4:47:1f:5c:
         dc:46:30:0b:a6:af:ed:5e:22:e1:a8:0d:aa:70:d0:3c:df:47:
         86:54:51:d2:ec:09:19:7a:65:ca:c7:3f:b1:2d:4b:c1:1b:09:
         d4:0e:68:c3:60:24:7e:18:47:55:36:08:1c:65:d0:97:2a:3b:
         92:9f:e0:17:a2:09:b3:e9:48:d8:4f:2e:b1:e6:98:69:46:f5:
         72:7a:fc:ec:99:6c:ca:06:65:58:a8:e1:67:d1:d0:9d:8a:67:
         4d:82:e8:4b:66:d8:f4:2e:48:db:44:a3:39:e0:e3:b3:de:90:
         e4:7c:2e:92:95:6e:ba:20:5a:f0:e6:05:68:34:72:9e:d7:40:
         c1:39:fc:b9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQvtP9qzI40z/SsEvl7CzWX2fpHkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIyMTIxWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwZjhkNDJjYTc5NzFhOWU5ZmFkMmM0Zjk1ZGJiN2JmNzlk
YjhmMjhmZDViYTlkMTBiMzliZGJhMTg1MWMwOWE2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMSqy7zGVrvsXTfomgKXZQLmk/MIFYKWSLCe3bDQ7HjM33
oQkm6NDandDK1eC2QoD++Pb1WErljgDZnGCBhlGKvGLlcbR7bRXhb7aUcPBm/XsW
EaangCZN0hLpONghdvZaGiMzrbdFu8J55dbvlPZRoCcTUfxwukQbmJ4fx+l7JucO
lqFOo5WKc3sMwHyWnet/OBlxJCf7x3LYsO2ZlSz6LVFyF3CLy+RXPy5sYYpDxYsq
1pZ9ojgQwvdu63AG1Dg94Ws6TmWJCDi2z0pY+vBKQpvMU36N7i4Sy1p+wbCsaJvZ
14qJI8H2/4sThqkmoWrX9KNeQBcgwojHGmFwG1W5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXye6VKHjwxnY/Z5zAC18huQmZx0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MyOTkyNDRiLThhYjUtNDcyNi04ZDI3LTU4YThlMDNkYTdiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjVLgwDQYJKoZIhvcNAQELBQADggEBAB1StujZMLlL+W6vt05PwcJbfnx2
LcFvg/56XKNfsluf4jmtKfHG7rMuWlMJ249LugRCp38wQLYxWO+bcZgrDsh8Yj8x
kVrURvoVbJsfeLrJicLqPCZGU/mxJUB6TS4PoHkTAwrRB8mwKuJIJDBZmSUDs+Ts
2lZwOr/6tEcfXNxGMAumr+1eIuGoDapw0DzfR4ZUUdLsCRl6ZcrHP7EtS8EbCdQO
aMNgJH4YR1U2CBxl0JcqO5Kf4BeiCbPpSNhPLrHmmGlG9XJ6/OyZbMoGZVio4WfR
0J2KZ02C6Etm2PQuSNtEozng47PekOR8LpKVbrogWvDmBWg0cp7XQME5/Lk=
-----END CERTIFICATE-----