Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa
File:                     06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa (raw, json)
Hash identifier:          SaRuE41kVOqtYMYbqTOyvgNNDUIICVH6CoucP4avipY=
Subject key identifier:   98:D4:23:68:1A:FB:60:A6:67:78:EF:F5:6C:25:D1:AD:A2:98:B6:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       674D48FF163C1D9BC88BADE7DE4F391D2DDA9777
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa
Signing time:             Tue 28 Oct 2025 00:40:49 +0000
ROA not before:           Tue 28 Oct 2025 00:40:49 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4d:48:ff:16:3c:1d:9b:c8:8b:ad:e7:de:4f:39:1d:2d:da:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 28 00:40:49 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=f6593016ebde90048b1a9c509bdf3efc65ca1bef159d26274c410b1399669297, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:13:ab:8e:36:ea:03:a2:bd:28:31:9f:89:
                    3f:62:d9:fc:f2:95:4c:18:36:0f:88:3e:d2:bf:d7:
                    47:87:bc:58:68:50:ca:6d:94:60:fa:81:95:8a:5f:
                    0a:13:2b:a3:05:14:9b:50:f3:30:5b:a4:cb:53:69:
                    da:c9:40:cb:bf:1a:73:f3:5b:67:b1:fd:cb:b1:2d:
                    ef:28:d6:e0:bf:48:ad:bd:83:be:28:4d:5e:e2:71:
                    8d:ea:97:16:b7:66:0a:79:1d:b2:99:32:7d:63:a4:
                    52:58:8c:09:94:bc:b5:74:47:72:7f:61:a1:b8:ba:
                    04:cf:87:cf:13:3e:09:b0:5b:8c:b2:7f:d2:0a:de:
                    96:4e:26:bf:20:48:37:fb:18:b2:4e:32:28:06:f4:
                    de:ed:e8:6b:cd:8b:82:ab:70:bb:79:3c:cd:4f:9f:
                    f9:1d:a2:cf:e2:ea:dd:28:d4:55:a0:d2:4a:0f:f4:
                    2e:03:f2:ef:75:23:a8:09:f4:6f:d5:c8:56:34:0b:
                    58:07:f9:dc:76:b3:82:91:8d:b4:d2:a1:b6:d6:6c:
                    90:12:6b:67:dc:87:02:17:0b:0e:92:11:7a:bf:9b:
                    42:a3:91:52:a3:64:1b:f4:a7:8c:a8:a1:fb:c5:56:
                    37:48:c1:b7:5a:b0:dd:2d:4c:b9:80:3b:e5:2a:e6:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D4:23:68:1A:FB:60:A6:67:78:EF:F5:6C:25:D1:AD:A2:98:B6:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:88:74:a5:4f:0a:89:c0:c0:22:c4:2a:6a:3e:03:c3:6b:02:
         4b:ff:60:12:08:3c:e4:cb:de:c8:dd:b8:33:20:55:55:f2:98:
         54:1b:b7:93:0f:24:28:4c:67:11:0d:6b:42:de:0a:54:3f:4a:
         23:a1:ab:55:74:69:e6:1b:8d:51:3c:70:68:48:db:d0:dc:6a:
         68:b2:53:74:8f:43:0e:da:3c:f8:17:65:31:fc:41:f3:35:e8:
         49:91:31:ea:9a:c9:71:a8:0d:6f:4b:ce:07:d3:d3:32:bf:5b:
         27:79:c1:d1:12:12:98:e4:c1:ab:ea:ea:56:db:dd:91:d0:ee:
         28:27:1b:71:22:b5:b5:36:97:1d:67:c3:a6:8e:0e:89:be:c9:
         50:a4:c5:08:d3:2a:a5:10:7c:ea:c4:aa:aa:7c:d7:6b:47:8f:
         13:da:43:30:80:31:5c:bf:82:b5:3f:2b:c7:c4:53:ce:ff:31:
         59:c3:9b:d2:f0:ae:2d:d8:47:82:5a:53:e5:2b:a3:d8:25:b7:
         09:77:92:44:be:a6:7c:5e:34:80:d7:a0:1b:b8:81:85:b4:20:
         a5:c7:43:17:2b:16:0d:1e:ff:e6:c3:48:49:f2:3d:ce:56:ee:
         85:ff:b7:f5:04:a6:2b:8e:f8:1a:b5:10:98:cd:3f:f1:53:00:
         0c:15:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----