Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed8dbdb1-f837-49b9-8814-cc5114e67c30.roa
File:                     ed8dbdb1-f837-49b9-8814-cc5114e67c30.roa (raw, json)
Hash identifier:          ODxWhaNs5cQ1v+kkSopXD7Aq0HHF5BShngJaK3ZmkkQ=
Subject key identifier:   11:C4:ED:0F:81:82:5F:CA:39:FA:23:D9:A6:DA:76:A9:D0:80:F6:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25C89CB34FDCE67A95FBF2297F834326902650BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed8dbdb1-f837-49b9-8814-cc5114e67c30.roa
Signing time:             Wed 15 Oct 2025 18:02:06 +0000
ROA not before:           Wed 15 Oct 2025 18:02:06 +0000
ROA not after:            Wed 19 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.86.64.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c8:9c:b3:4f:dc:e6:7a:95:fb:f2:29:7f:83:43:26:90:26:50:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 15 18:02:06 2025 GMT
            Not After : Nov 19 23:59:59 2025 GMT
        Subject: serialNumber=1af8d37c98460786811d03e791902ea59f8897246a335eecd9f00e759de2132b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8a:37:c0:bc:6e:e3:0f:d5:17:26:fb:bf:5b:
                    83:5a:32:98:c3:33:55:3f:76:31:7b:0a:7c:90:ee:
                    11:20:c8:a6:64:28:bc:59:61:6a:ce:5d:db:c4:60:
                    5a:88:61:37:15:ab:03:47:28:7a:68:7b:7f:71:9f:
                    ea:cd:7a:ce:21:59:82:cc:d3:fc:bc:8f:d5:fd:16:
                    f1:08:27:35:39:30:61:28:5a:af:db:3b:a7:96:61:
                    ea:92:27:e6:f1:a9:8a:79:f6:cc:04:b8:19:15:5f:
                    7b:40:f5:4c:13:1d:0d:0e:fe:74:5d:35:21:ff:e3:
                    09:1a:8b:9f:2c:e9:2e:79:66:ad:97:83:25:16:0f:
                    57:13:3a:66:04:df:51:15:e8:b0:37:ba:de:7c:8f:
                    95:13:93:8c:ea:c0:c3:bc:f2:4a:96:84:6e:27:af:
                    a0:36:cb:56:c2:09:15:ef:2b:08:0c:23:a3:e4:c0:
                    32:4b:e1:c5:49:88:9f:73:1e:bd:42:d4:ee:ae:e5:
                    fa:7e:5e:4d:85:77:71:3d:6d:ba:f6:ed:76:a1:1c:
                    57:07:f6:c8:2f:3b:12:8d:bc:12:e4:e5:37:e7:a1:
                    e7:6d:64:7c:af:11:ce:81:32:74:5a:6b:85:95:7a:
                    64:53:b8:98:82:1d:8d:e8:3b:43:41:21:84:b6:ef:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:ED:0F:81:82:5F:CA:39:FA:23:D9:A6:DA:76:A9:D0:80:F6:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed8dbdb1-f837-49b9-8814-cc5114e67c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.86.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:92:ba:64:29:a0:dd:b2:dd:93:07:3b:28:31:c4:19:5a:
         97:09:35:9b:95:9c:3d:de:76:12:d8:70:66:f5:e9:90:74:f7:
         ba:d3:24:a5:65:ec:f6:3f:9c:f0:ed:ec:ed:de:9c:6a:12:0a:
         39:0a:5e:a7:79:d4:a2:b4:3a:12:69:7a:dc:55:22:42:c1:c9:
         f9:fb:e9:46:34:df:db:95:f1:7e:a9:05:94:6d:31:72:69:34:
         e3:bd:fc:9b:6b:2d:ba:e4:e0:f8:cb:6f:39:1b:57:34:51:7a:
         64:23:4d:34:0b:fe:dc:63:7b:f5:67:90:ed:bd:2d:f6:26:b9:
         cc:66:77:93:36:74:88:65:68:24:94:2a:4d:71:8d:e8:e4:46:
         84:95:c5:aa:64:35:0d:97:f8:53:af:c9:32:4d:45:95:8f:bb:
         9c:30:eb:62:e1:7a:72:e9:94:38:84:e5:dd:72:8b:2c:d6:90:
         0b:81:c0:e0:b8:e7:fc:f6:5e:7f:5c:d5:44:d7:09:5e:ac:e5:
         2f:63:fd:6d:6e:99:9f:88:72:f4:aa:f4:b8:03:21:f0:d3:32:
         4e:4b:3c:98:6f:d1:5d:34:28:e5:46:3e:cf:a6:53:a6:fa:cd:
         93:21:8c:28:a0:ed:b9:4b:94:47:ce:82:c6:d2:bb:f2:46:23:
         a3:ff:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----