Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e801cb2f-2873-4dc8-b26e-7fd8e0d7c4c1.roa
File:                     e801cb2f-2873-4dc8-b26e-7fd8e0d7c4c1.roa (raw, json)
Hash identifier:          dtBWSuuOuOr3C/5eSrADAHV9YOEXExLaysMDZp6gLFY=
Subject key identifier:   64:CB:E0:D7:C8:A7:C9:86:15:AC:7B:2F:99:B0:01:CB:4C:5B:3B:C3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4FC2D4D3CF248204DF722049FA77C53AE23266DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e801cb2f-2873-4dc8-b26e-7fd8e0d7c4c1.roa
Signing time:             Wed 15 Oct 2025 15:42:15 +0000
ROA not before:           Wed 15 Oct 2025 15:42:15 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.122.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c2:d4:d3:cf:24:82:04:df:72:20:49:fa:77:c5:3a:e2:32:66:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 15:42:15 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=f2cf538783f9573f1b33d3f0a9798cd1f96c3cab7a430109aceed09d49d4a7e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5c:1f:8a:3c:f4:b2:46:97:cc:38:3e:44:51:
                    69:c9:36:d3:bc:ac:5f:70:6c:98:1b:f9:ba:5f:c3:
                    30:6b:56:b1:85:cb:d4:e5:77:91:59:dd:a3:d5:65:
                    ae:cc:a2:92:f8:b8:52:cd:33:87:14:27:c2:84:6c:
                    61:dc:d9:ae:cf:e1:b1:85:60:9a:98:e4:5c:25:4b:
                    17:0c:86:ff:ec:ed:37:a0:34:1e:7b:a7:1f:48:e6:
                    97:fb:19:3a:0e:b9:02:b7:8c:20:ca:3a:42:b5:fa:
                    0f:e1:6b:e4:8e:f7:1b:83:3b:f8:4c:0e:5f:55:2c:
                    48:c0:7f:db:c6:5c:3e:69:3d:d1:34:38:33:4a:17:
                    81:5a:81:90:10:1a:67:63:cd:73:f7:68:9d:99:ae:
                    c0:ae:fa:42:71:ee:07:bf:f6:71:a1:df:90:cd:1f:
                    40:b3:ea:b4:62:c7:e9:15:db:fd:ac:b2:9d:a3:f2:
                    16:0f:1b:d9:d8:09:40:70:6e:31:32:ff:02:3e:78:
                    e5:e2:a4:23:63:7b:8b:10:44:7d:a2:10:5c:96:3b:
                    89:7d:9b:3f:d0:f7:4d:50:dc:bc:e7:4d:74:01:a7:
                    d8:80:5c:bd:a5:d9:9b:3d:82:8d:a0:1f:a0:ef:26:
                    66:1f:4d:3b:0b:24:e0:8d:39:4b:03:fa:c9:91:22:
                    c7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CB:E0:D7:C8:A7:C9:86:15:AC:7B:2F:99:B0:01:CB:4C:5B:3B:C3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e801cb2f-2873-4dc8-b26e-7fd8e0d7c4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:0b:b4:eb:ac:d5:b9:dc:f4:90:51:9e:ef:7a:b5:57:b3:b7:
         d7:2c:eb:4c:72:33:1e:82:35:14:ea:e0:8e:af:15:76:e3:a2:
         ac:cb:61:aa:73:fe:7a:3f:42:1b:ce:8f:3c:cc:1f:39:f4:2b:
         a3:5a:33:be:6f:6f:61:6b:a2:0e:13:00:c8:3e:0c:68:43:b0:
         ff:db:f8:b0:ce:70:83:dd:ea:16:d2:62:1e:07:11:1f:c7:26:
         6c:7b:ae:de:3e:bc:7b:5b:45:f1:d6:a5:58:ad:68:34:73:aa:
         c8:47:d2:81:dc:8f:6e:cd:4e:0b:dc:90:43:15:25:71:2d:d0:
         97:c5:e9:9e:4d:8a:7b:8b:8e:ba:68:9a:48:31:73:39:7e:4a:
         1a:8e:00:79:85:88:bf:d5:98:d3:b8:24:11:e1:ae:9e:d6:d8:
         26:a0:fd:1a:e4:09:d6:f7:01:ea:71:96:bc:d9:b3:66:ad:0a:
         cb:a4:35:64:49:90:4a:30:30:41:67:ba:f7:b6:71:86:cc:aa:
         3c:2f:4a:b2:e2:a6:63:1d:01:8a:c8:5b:23:c8:f2:78:87:5f:
         bb:a4:ea:07:31:91:28:ef:7d:62:db:51:1a:0e:3d:29:bf:22:
         85:de:bd:ed:9e:d4:e3:66:73:bf:15:8e:9c:12:87:db:d2:c4:
         ff:0a:01:b0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT8LU088kggTfciBJ+nfFOuIyZt0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTU0MjE1WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMmNmNTM4NzgzZjk1NzNmMWIzM2QzZjBhOTc5OGNkMWY5
NmMzY2FiN2E0MzAxMDlhY2VlZDA5ZDQ5ZDRhN2UxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVXB+KPPSyRpfMOD5EUWnJNtO8rF9wbJgb+bpfwzBrVrGF
y9Tld5FZ3aPVZa7MopL4uFLNM4cUJ8KEbGHc2a7P4bGFYJqY5FwlSxcMhv/s7Teg
NB57px9I5pf7GToOuQK3jCDKOkK1+g/ha+SO9xuDO/hMDl9VLEjAf9vGXD5pPdE0
ODNKF4FagZAQGmdjzXP3aJ2ZrsCu+kJx7ge/9nGh35DNH0Cz6rRix+kV2/2ssp2j
8hYPG9nYCUBwbjEy/wI+eOXipCNje4sQRH2iEFyWO4l9mz/Q901Q3LznTXQBp9iA
XL2l2Zs9go2gH6DvJmYfTTsLJOCNOUsD+smRIsc3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZMvg18inyYYVrHsvmbABy0xbO8MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U4MDFjYjJmLTI4NzMtNGRjOC1iMjZlLTdmZDhlMGQ3YzRjMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVnowDQYJKoZIhvcNAQELBQADggEBAIsLtOus1bnc9JBRnu96tVezt9cs
60xyMx6CNRTq4I6vFXbjoqzLYapz/no/QhvOjzzMHzn0K6NaM75vb2Frog4TAMg+
DGhDsP/b+LDOcIPd6hbSYh4HER/HJmx7rt4+vHtbRfHWpVitaDRzqshH0oHcj27N
TgvckEMVJXEt0JfF6Z5NinuLjrpomkgxczl+ShqOAHmFiL/VmNO4JBHhrp7W2Cag
/RrkCdb3AepxlrzZs2atCsukNWRJkEowMEFnuve2cYbMqjwvSrLipmMdAYrIWyPI
8niHX7uk6gcxkSjvfWLbURoOPSm/IoXeve2e1ONmc78VjpwSh9vSxP8KAbA=
-----END CERTIFICATE-----