Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cff7b-8d0a-4581-8011-be949bb61187.roa
File:                     e26cff7b-8d0a-4581-8011-be949bb61187.roa (raw, json)
Hash identifier:          AV+agWtosFjC+1kOS9flKHqg7xSNc2n9Wh/C2XYKAIw=
Subject key identifier:   A9:55:4B:54:9A:8C:6E:55:9A:B7:08:31:56:6F:C0:4C:8B:E4:95:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       59E99341F8DF2D756DCE80D854B17E16F1D8199C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cff7b-8d0a-4581-8011-be949bb61187.roa
Signing time:             Wed 15 Oct 2025 15:39:58 +0000
ROA not before:           Wed 15 Oct 2025 15:39:58 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e9:93:41:f8:df:2d:75:6d:ce:80:d8:54:b1:7e:16:f1:d8:19:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:39:58 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=3bb69b04041bcb44133291feca74c7b5591c4b49a63ff0bb8bee6b8a73c527a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:49:e5:31:80:eb:36:b7:1d:1d:04:89:26:
                    85:0c:e3:fd:9a:5d:9d:66:20:c2:db:31:cd:da:a5:
                    34:64:99:ef:b8:f4:e2:fd:83:ea:b0:4d:8e:e6:95:
                    3d:54:98:4e:97:0c:be:8a:0a:bc:28:7e:56:e9:bd:
                    71:ec:61:c1:11:1e:23:16:15:d1:7a:de:04:f0:88:
                    c6:93:17:df:bb:ef:0a:60:de:b2:49:41:f7:48:d3:
                    33:a5:8a:91:13:4a:de:82:41:9e:0a:ac:04:e3:65:
                    9b:b4:40:e6:cc:bf:80:0c:17:bf:ee:78:a2:c8:74:
                    8b:21:c6:e6:c1:03:18:25:8e:1c:a4:7d:8a:61:a5:
                    6e:74:ec:6b:40:73:20:d8:21:ad:ff:a6:0b:2a:71:
                    5e:d3:2c:c8:49:ba:1e:0b:e1:5d:21:54:c7:e5:20:
                    23:ed:57:f8:8c:d4:96:e4:88:e1:67:96:c4:4e:38:
                    63:19:2e:99:dd:c6:52:d3:1a:db:18:91:7f:bc:1f:
                    0d:90:52:c7:c2:6d:37:57:3e:c8:c7:5d:2c:f9:44:
                    46:68:89:64:6f:4c:00:7b:d2:54:bf:17:8f:69:ab:
                    41:c8:e2:62:50:66:74:e8:34:60:3b:d9:f3:8a:c3:
                    32:a5:b6:95:f1:a9:ac:ba:9b:8f:f1:1c:14:25:98:
                    62:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:4B:54:9A:8C:6E:55:9A:B7:08:31:56:6F:C0:4C:8B:E4:95:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e26cff7b-8d0a-4581-8011-be949bb61187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:38:ac:34:b3:27:a0:4a:a0:31:1a:8e:95:1d:95:48:e5:ce:
         06:61:53:20:a6:31:3f:91:8e:61:53:75:e5:02:66:a6:b9:a2:
         91:e6:c8:f7:77:d6:40:5d:57:8f:2c:44:af:54:fb:53:a8:8f:
         21:22:00:b2:8a:16:49:6d:6e:77:64:64:f8:ef:31:f2:fa:49:
         c3:e6:89:f7:2c:e2:15:85:23:27:60:8a:67:05:50:74:82:c4:
         3b:f9:55:4a:08:47:ed:6b:8c:12:37:0a:6b:f5:3b:fd:4d:46:
         65:3d:a1:b8:51:07:55:4f:e2:5d:4f:f7:20:36:55:81:ac:38:
         f1:2f:34:ec:70:38:fe:ca:cb:10:b2:9b:5a:cf:98:14:ff:87:
         9e:0b:87:4e:4f:4a:64:95:3f:96:e9:5f:97:a1:5f:46:f9:b1:
         3b:cf:48:e6:c6:21:c4:b2:a7:ec:a6:00:60:9a:81:9d:59:75:
         8d:27:13:ab:2a:4c:92:dd:a1:5d:9d:9d:b3:75:b8:8c:8e:66:
         f9:9a:77:60:2b:a3:60:0c:fa:b8:0a:51:49:41:bd:b1:85:97:
         8b:da:a7:f0:46:59:ba:25:5f:2c:c3:70:c5:91:30:de:14:bc:
         81:b6:8e:fb:76:9f:82:44:24:43:dc:2a:c6:52:7d:ce:3e:e3:
         6d:17:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----