Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de5b62ba-0878-4dd4-8444-5f6cb583d079.roa
File:                     de5b62ba-0878-4dd4-8444-5f6cb583d079.roa (raw, json)
Hash identifier:          6enfAoF1uW0RCdaHx3SJlxT3FwOdV4fMUMaHcbcjE0I=
Subject key identifier:   BF:19:7A:58:8D:1D:BB:23:07:23:37:73:4C:D1:58:54:41:A1:8E:87
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B1104BA2403C07B9BF146FC8D97493E7A7BEBF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de5b62ba-0878-4dd4-8444-5f6cb583d079.roa
Signing time:             Tue 14 Oct 2025 22:39:04 +0000
ROA not before:           Tue 14 Oct 2025 22:39:04 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.32.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:04:ba:24:03:c0:7b:9b:f1:46:fc:8d:97:49:3e:7a:7b:eb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 22:39:04 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=f3ea897aad930a3fb8963048125d86738c87cce304c4885fd4e6599aaac25061, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:4e:da:53:ed:85:ec:31:82:c1:9e:10:94:
                    f3:9b:29:c1:a8:a9:d6:07:3f:a7:cb:74:1a:6d:bd:
                    eb:67:58:4d:a9:80:01:66:5f:13:11:b5:17:af:cf:
                    6f:61:d0:3f:f1:a5:77:03:5b:57:d2:19:f1:38:74:
                    c3:0b:c4:7e:6d:8a:57:95:c7:3c:77:3b:b8:8b:ff:
                    7d:4d:4c:d1:d1:01:b7:22:7b:e1:19:44:77:41:b7:
                    4e:e2:d9:b7:66:5b:8f:56:35:b8:a8:8c:87:a9:ed:
                    36:35:55:e7:24:d9:25:15:9b:0f:e2:85:aa:da:71:
                    f6:55:70:b8:86:c7:9a:99:33:dd:e1:46:8a:79:8f:
                    85:e6:58:e2:54:3d:04:32:eb:06:54:65:84:10:67:
                    60:7f:b1:9f:b7:e2:38:59:98:ef:3c:2d:93:56:9d:
                    b9:73:37:86:8d:df:4b:f9:04:7c:17:87:4a:bc:9e:
                    5a:ee:64:af:fa:53:5f:7a:08:a2:10:b4:73:c0:a2:
                    02:21:74:1a:a5:c3:59:12:d4:43:72:0c:5f:68:2b:
                    18:19:37:08:96:96:fb:38:b8:a6:ae:31:24:8b:2b:
                    4f:e2:2a:2e:29:04:3c:cc:d6:13:3f:cd:6d:44:07:
                    47:40:45:ba:1b:9f:fc:b2:0a:39:ee:ba:90:e3:42:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:19:7A:58:8D:1D:BB:23:07:23:37:73:4C:D1:58:54:41:A1:8E:87
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de5b62ba-0878-4dd4-8444-5f6cb583d079.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ae:8f:ad:be:b6:e3:11:c6:b0:30:ef:e9:17:0e:5d:12:bf:
         bb:34:d3:7a:36:6d:d5:f3:e6:b0:37:f9:63:b5:f0:3b:2a:d2:
         7a:d2:2c:31:ed:51:32:0f:a7:1b:8e:6a:54:7a:85:cc:31:8c:
         cc:86:e9:31:c8:b6:96:f9:0e:25:3f:be:98:28:fb:dc:6e:ce:
         13:39:0a:d0:e5:da:a3:24:44:c8:86:89:be:c3:da:51:0c:f8:
         23:5b:36:17:d8:ac:50:07:23:08:ff:86:40:16:8d:50:00:62:
         fa:aa:56:e1:ed:fc:37:56:75:ad:e0:b6:fb:60:38:25:0b:7b:
         89:cd:cc:f7:96:ea:cb:0b:f2:3b:57:59:4c:8d:1e:b9:ff:ea:
         a8:e7:6c:82:da:26:96:73:e9:fb:d7:84:11:d3:94:6b:ce:04:
         37:3d:3d:86:59:2b:fd:1d:6e:7e:7d:32:c7:d2:59:fc:c8:46:
         4a:da:57:66:4b:c1:0d:72:c8:14:2f:43:15:d0:eb:7e:c2:ab:
         d5:5d:c8:36:20:f4:8b:53:34:af:fb:da:2a:e5:9e:c5:d7:0b:
         ee:2c:99:0b:1e:12:72:4a:cb:b1:ea:9c:f8:ed:62:6c:b6:d2:
         5d:70:68:4d:95:31:fb:d0:43:9a:9a:ff:10:f1:ef:97:e0:1f:
         eb:fc:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----