Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f89370-4f07-4d92-9af9-1f91461d2cb6.roa
File:                     d7f89370-4f07-4d92-9af9-1f91461d2cb6.roa (raw, json)
Hash identifier:          H5xN9nbDV8zPDpdojfisbqApFRGdB9KEhVOhlSFPMyk=
Subject key identifier:   A2:2A:36:0D:31:32:A5:5D:78:06:EF:90:5F:EB:79:55:B6:5D:76:F7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E90DEC725A241D1CFBCC76EDA4D885617091BAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f89370-4f07-4d92-9af9-1f91461d2cb6.roa
Signing time:             Wed 15 Oct 2025 16:42:35 +0000
ROA not before:           Wed 15 Oct 2025 16:42:35 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:90:de:c7:25:a2:41:d1:cf:bc:c7:6e:da:4d:88:56:17:09:1b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 16:42:35 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=511a5b4768c52ca3c124b2581a5473fc641904dcc8651ff2548e6323fe337233, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:26:f4:5b:89:71:52:da:3d:c6:1e:4d:dc:
                    8e:94:d3:fe:16:fc:6d:bc:2d:0e:a9:87:37:f5:47:
                    46:96:e0:ed:73:91:aa:b3:cf:da:d8:06:2a:1a:28:
                    86:64:f7:6d:63:5e:eb:11:71:4c:6e:aa:df:aa:47:
                    f2:70:36:ca:11:ab:5b:8d:34:94:8f:18:2f:61:b6:
                    89:8e:8a:39:03:dc:b4:5c:80:af:8b:80:29:13:ae:
                    d9:f6:d3:f2:88:ed:8a:10:1e:65:d9:1c:08:74:32:
                    23:84:c9:de:49:a0:52:6b:73:d8:4f:7a:b5:8a:04:
                    30:26:8e:aa:27:40:78:8f:cc:d3:99:54:66:1e:1b:
                    50:9e:bd:6c:91:80:91:1c:cb:24:6f:c5:94:09:6b:
                    57:70:2b:f9:ef:67:24:d1:ec:d3:71:0a:e1:e3:aa:
                    46:72:a2:2b:f1:c6:93:14:e0:8d:a9:7c:bf:ef:1c:
                    3d:a5:d8:d2:9a:86:aa:b8:24:dc:e9:4d:78:13:6a:
                    1f:9e:83:73:ac:44:bf:50:0b:47:98:ff:18:f6:9f:
                    06:46:15:58:ea:b5:70:79:d1:51:5e:e1:ee:99:33:
                    bd:94:59:3a:6a:07:01:e6:68:79:00:a7:8c:83:a3:
                    b4:5b:cc:73:f9:6c:4b:da:5b:f5:b4:d4:5f:15:d4:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2A:36:0D:31:32:A5:5D:78:06:EF:90:5F:EB:79:55:B6:5D:76:F7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7f89370-4f07-4d92-9af9-1f91461d2cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:37:de:ea:8a:25:eb:92:ce:cd:e8:de:2b:53:b3:9e:69:89:
         e5:f3:3c:10:bd:df:58:b0:b5:70:14:28:32:ae:c8:9c:62:4b:
         f1:72:59:91:55:1c:a8:dc:e3:26:ad:b8:2d:76:7b:72:bb:8b:
         e5:70:1d:03:73:e6:49:27:e4:a3:2d:7c:f8:bb:27:01:08:55:
         9a:bd:b7:6c:27:b2:25:d2:bb:3f:7c:4f:7f:6c:a3:00:a7:73:
         ce:df:96:ea:4d:30:0b:da:98:90:61:e5:9d:a4:1b:a1:f4:73:
         4d:ae:71:e1:0f:5a:36:51:e5:11:79:cf:b2:d6:c4:0b:88:b5:
         c9:f8:04:50:fa:44:74:7f:9e:a4:b5:7f:4d:e7:a9:1c:b0:bf:
         2b:3b:2c:6e:38:bc:50:c2:62:2a:6c:46:aa:51:ac:a3:6a:1b:
         87:89:90:3a:66:d8:d4:78:6c:e6:00:48:78:1f:a8:79:72:34:
         e6:d3:4a:51:87:43:7b:bb:fe:20:8b:82:58:c4:b6:8d:9f:e5:
         32:0f:ce:fd:37:3d:ee:86:db:9d:c6:05:40:6e:f3:a2:6e:fa:
         11:e6:e0:d1:e4:c2:35:07:c3:6a:10:70:68:63:33:c8:ba:37:
         d7:fe:28:7c:1f:68:6d:3e:0b:e5:17:95:c8:97:de:6e:66:e5:
         6c:ea:15:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfpDexyWiQdHPvMdu2k2IVhcJG6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTY0MjM1WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MTFhNWI0NzY4YzUyY2EzYzEyNGIyNTgxYTU0NzNmYzY0
MTkwNGRjYzg2NTFmZjI1NDhlNjMyM2ZlMzM3MjMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDfrCb0W4lxUto9xh5N3I6U0/4W/G28LQ6phzf1R0aW4O1z
kaqzz9rYBioaKIZk921jXusRcUxuqt+qR/JwNsoRq1uNNJSPGC9htomOijkD3LRc
gK+LgCkTrtn20/KI7YoQHmXZHAh0MiOEyd5JoFJrc9hPerWKBDAmjqonQHiPzNOZ
VGYeG1CevWyRgJEcyyRvxZQJa1dwK/nvZyTR7NNxCuHjqkZyoivxxpMU4I2pfL/v
HD2l2NKahqq4JNzpTXgTah+eg3OsRL9QC0eY/xj2nwZGFVjqtXB50VFe4e6ZM72U
WTpqBwHmaHkAp4yDo7RbzHP5bEvaW/W01F8V1PDPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoio2DTEypV14Bu+QX+t5VbZddvcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q3Zjg5MzcwLTRmMDctNGQ5Mi05YWY5LTFmOTE0NjFkMmNiNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjVnAwDQYJKoZIhvcNAQELBQADggEBABQ33uqKJeuSzs3o3itTs55pieXz
PBC931iwtXAUKDKuyJxiS/FyWZFVHKjc4yatuC12e3K7i+VwHQNz5kkn5KMtfPi7
JwEIVZq9t2wnsiXSuz98T39sowCnc87flupNMAvamJBh5Z2kG6H0c02uceEPWjZR
5RF5z7LWxAuItcn4BFD6RHR/nqS1f03nqRywvys7LG44vFDCYipsRqpRrKNqG4eJ
kDpm2NR4bOYASHgfqHlyNObTSlGHQ3u7/iCLgljEto2f5TIPzv03Pe6G253GBUBu
86Ju+hHm4NHkwjUHw2oQcGhjM8i6N9f+KHwfaG0+C+UXlciX3m5m5WzqFUs=
-----END CERTIFICATE-----