Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e71e1851-a351-4595-a955-8c661db8b601.roa
File:                     e71e1851-a351-4595-a955-8c661db8b601.roa (raw, json)
Hash identifier:          KHfo3wVBlBoo6sjgETiWG3pWqez0qD8C56IXNpEouhs=
Subject key identifier:   0A:95:56:2C:DC:03:7E:71:B2:3E:7B:F6:9A:B1:77:48:E2:3F:BE:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2818F98CCFF4E1BE5F4594D79C8218B62CFD0C04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e71e1851-a351-4595-a955-8c661db8b601.roa
Signing time:             Tue 14 Oct 2025 18:21:12 +0000
ROA not before:           Tue 14 Oct 2025 18:21:12 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:18:f9:8c:cf:f4:e1:be:5f:45:94:d7:9c:82:18:b6:2c:fd:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:21:12 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=452c970f8bc1ea966b264b946cbd4a41408f30c6f022b66d142ec6bee5487676, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:12:e5:57:68:cf:fa:fa:a5:fb:0c:5a:7f:da:
                    a1:f9:1d:2d:46:ab:5c:65:84:04:ea:15:72:b2:7f:
                    db:1b:0e:27:ab:fa:c6:25:44:74:76:e8:6f:17:48:
                    1c:a4:f6:05:c2:cf:a5:55:f9:09:b6:a6:e8:04:51:
                    02:f8:c4:43:5f:6f:e2:fc:60:d2:ec:31:eb:de:cf:
                    fd:72:49:d1:5a:e7:41:66:6e:0f:89:ae:0d:86:93:
                    f4:3e:ad:f3:b3:17:8d:89:31:e1:90:dd:d1:25:01:
                    eb:e5:a2:1b:d8:e6:f6:75:6e:8e:df:e6:4e:9b:0f:
                    bf:79:de:9e:8d:73:20:3d:b9:ab:8d:30:d0:dc:30:
                    df:5b:d3:c4:c6:1d:3e:da:9b:1a:a5:54:91:90:5d:
                    fd:29:da:0c:ea:3d:f1:b1:62:9a:b6:83:48:3d:05:
                    a2:11:71:61:87:58:fb:18:0f:dc:f9:18:df:37:e4:
                    d0:c7:4e:dc:42:55:03:8f:e7:ab:7a:68:52:53:94:
                    b3:2d:9b:d2:f3:b4:22:0d:25:0e:4d:a3:57:94:db:
                    2a:86:09:de:03:3d:eb:84:56:59:5d:fc:48:f4:13:
                    66:82:ba:47:95:ab:76:88:3b:15:f0:91:85:70:f9:
                    3b:39:95:d9:6e:91:8c:d6:2e:2c:74:70:18:63:5a:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:56:2C:DC:03:7E:71:B2:3E:7B:F6:9A:B1:77:48:E2:3F:BE:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e71e1851-a351-4595-a955-8c661db8b601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:63:cd:fd:3b:37:5b:65:11:f2:ee:68:0a:58:44:d1:85:c3:
         49:9c:c4:4c:40:f3:29:f9:87:f2:cc:52:e2:84:86:5a:bf:04:
         1b:18:9b:99:25:16:b4:23:93:40:ed:48:a4:e2:5e:ca:98:f6:
         4c:1c:7a:d1:74:17:bc:cf:e5:e4:f9:69:0c:e1:51:90:d0:8e:
         c8:c7:db:dd:e1:91:fe:81:60:6c:a1:ad:aa:0f:07:90:65:7b:
         27:21:de:01:b8:09:71:db:fc:07:64:f2:ec:86:6d:e0:4d:11:
         53:37:ab:d5:22:71:1a:c0:df:06:27:af:78:da:75:6a:69:e3:
         84:f5:fc:2c:98:84:7f:72:b0:92:e2:da:70:59:56:38:3a:da:
         80:b3:ff:4c:4b:d6:ef:66:0d:ad:03:1d:90:8d:1b:ac:31:5c:
         76:e6:5b:92:9c:57:df:14:26:17:42:cd:05:d8:05:96:c0:eb:
         8c:1d:75:98:4d:8f:38:85:f9:35:6d:a7:4f:6e:0b:6f:10:e6:
         aa:3c:b1:d8:60:dd:d2:bc:06:c9:0e:6f:d4:db:62:99:78:b7:
         0f:b6:2a:4b:67:ce:e6:8a:61:35:c9:92:79:2e:16:72:07:f9:
         35:f2:38:fe:6a:3e:ed:e9:9b:cf:cd:11:20:7c:72:fc:8a:8a:
         9d:28:ae:b0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKBj5jM/04b5fRZTXnIIYtiz9DAQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTgyMTEyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NTJjOTcwZjhiYzFlYTk2NmIyNjRiOTQ2Y2JkNGE0MTQw
OGYzMGM2ZjAyMmI2NmQxNDJlYzZiZWU1NDg3Njc2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrEuVXaM/6+qX7DFp/2qH5HS1Gq1xlhATqFXKyf9sbDier
+sYlRHR26G8XSByk9gXCz6VV+Qm2pugEUQL4xENfb+L8YNLsMevez/1ySdFa50Fm
bg+Jrg2Gk/Q+rfOzF42JMeGQ3dElAevlohvY5vZ1bo7f5k6bD7953p6NcyA9uauN
MNDcMN9b08TGHT7amxqlVJGQXf0p2gzqPfGxYpq2g0g9BaIRcWGHWPsYD9z5GN83
5NDHTtxCVQOP56t6aFJTlLMtm9LztCINJQ5No1eU2yqGCd4DPeuEVlld/Ej0E2aC
ukeVq3aIOxXwkYVw+Ts5ldlukYzWLix0cBhjWtv7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCpVWLNwDfnGyPnv2mrF3SOI/vnIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U3MWUxODUxLWEzNTEtNDU5NS1hOTU1LThjNjYxZGI4YjYwMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVBIwDQYJKoZIhvcNAQELBQADggEBAINjzf07N1tlEfLuaApYRNGFw0mc
xExA8yn5h/LMUuKEhlq/BBsYm5klFrQjk0DtSKTiXsqY9kwcetF0F7zP5eT5aQzh
UZDQjsjH293hkf6BYGyhraoPB5Bleych3gG4CXHb/Adk8uyGbeBNEVM3q9UicRrA
3wYnr3jadWpp44T1/CyYhH9ysJLi2nBZVjg62oCz/0xL1u9mDa0DHZCNG6wxXHbm
W5KcV98UJhdCzQXYBZbA64wddZhNjziF+TVtp09uC28Q5qo8sdhg3dK8BskOb9Tb
Ypl4tw+2KktnzuaKYTXJknkuFnIH+TXyOP5qPu3pm8/NESB8cvyKip0orrA=
-----END CERTIFICATE-----