Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f62e977-cfb7-4d48-a435-fa88f2ee54a6.roa
File:                     1f62e977-cfb7-4d48-a435-fa88f2ee54a6.roa (raw, json)
Hash identifier:          SjHxOAvaBv8Kh5ADf+w3Xj1yw6VWZ8S8Z7u9bdtA3v8=
Subject key identifier:   A0:41:D7:74:3B:4E:18:57:31:DF:9A:35:FF:3E:54:EA:AE:8E:E2:FD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       27734C1A360DED5E32F7D1E6E934EF1163348F11
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f62e977-cfb7-4d48-a435-fa88f2ee54a6.roa
Signing time:             Sun 02 Nov 2025 00:00:12 +0000
ROA not before:           Sun 02 Nov 2025 00:00:12 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        99.151.96.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:73:4c:1a:36:0d:ed:5e:32:f7:d1:e6:e9:34:ef:11:63:34:8f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:00:12 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=1eba28cb43705d40260b295991a38efea42a2067d016f76f768181a4f6e18280, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:86:3b:28:bc:e1:58:07:c6:42:8f:12:dc:
                    e1:11:d1:cf:74:fc:05:90:52:e9:fe:e4:53:c5:14:
                    4f:43:33:ab:59:3b:08:ca:d7:23:7c:94:d5:fc:af:
                    d5:75:b1:2d:a0:d5:d8:77:3c:60:e5:d6:37:ed:68:
                    67:c0:32:38:e6:e2:49:92:d5:d3:a3:54:dc:e3:68:
                    b7:10:44:59:dd:5b:c1:9b:5c:c2:a2:6f:d9:dc:e4:
                    fa:e6:4e:c0:8e:e9:fc:4e:e5:51:73:5c:c7:df:f1:
                    4f:dc:d5:6c:1c:5f:2e:07:2d:2f:35:25:c1:eb:5f:
                    96:2f:90:0b:ad:68:6d:32:50:8e:2f:ea:eb:8a:2a:
                    26:03:dc:c4:eb:86:eb:fa:e7:fd:b5:97:a9:13:8d:
                    69:0a:46:15:a6:c5:54:78:48:1d:00:36:74:96:00:
                    f9:60:66:4c:ca:be:57:c0:42:ef:72:77:93:2c:6e:
                    28:c0:c5:4d:14:6b:4d:f0:f2:5f:e2:ce:d7:51:56:
                    f6:dd:69:6d:95:52:a0:8a:f9:70:82:43:a9:87:fe:
                    26:2c:2c:ee:89:f6:cc:2c:a9:4e:50:d4:41:db:14:
                    ce:42:87:23:0a:82:39:5b:c0:81:72:9b:d0:2d:ae:
                    9c:87:d5:39:27:d0:f9:b4:f4:a7:31:8c:ce:47:3f:
                    00:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:D7:74:3B:4E:18:57:31:DF:9A:35:FF:3E:54:EA:AE:8E:E2:FD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f62e977-cfb7-4d48-a435-fa88f2ee54a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:9c:5d:5a:c9:5c:8d:b7:8f:34:81:9f:85:fb:fc:38:dc:b0:
         02:6e:e9:04:6c:70:e2:f3:d2:0b:37:80:9d:59:ed:a2:7a:8c:
         c3:69:fb:f5:96:1b:da:d6:97:c0:13:92:77:e7:cb:22:73:21:
         36:5a:e3:84:b8:74:49:36:b5:c7:47:7b:31:2e:2b:b8:a2:36:
         fc:25:c1:07:5e:4c:c3:3f:b7:8e:75:f5:34:36:88:94:a9:8e:
         00:cd:30:fb:8a:7d:4b:b5:8c:58:8b:e6:5d:a7:35:3c:f3:06:
         41:17:32:6b:7c:f2:5d:80:cf:cd:c8:d4:46:6f:d5:6b:db:f4:
         1c:80:23:b5:28:5b:ea:df:0c:d3:0d:f8:68:08:d5:ec:cc:4d:
         c4:1b:47:34:ba:36:28:f1:56:7c:d4:3c:41:1f:8b:08:0a:c6:
         1f:f6:d3:0e:58:d7:34:72:60:15:3b:4a:a2:9e:54:87:83:76:
         5c:b5:33:67:ca:5d:1b:c8:17:42:ae:09:16:3c:48:af:3b:25:
         c7:6e:3d:c1:16:72:4e:20:ce:17:7d:a7:7a:6c:04:06:a1:da:
         c3:82:e4:6a:e2:49:9f:98:ea:b3:21:09:ae:6b:0f:2e:32:78:
         68:4b:91:12:e6:67:9b:2d:a9:82:11:11:44:57:fd:25:a1:f0:
         6c:de:bf:db
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ3NMGjYN7V4y99Hm6TTvEWM0jxEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAwMDEyWhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWJhMjhjYjQzNzA1ZDQwMjYwYjI5NTk5MWEzOGVmZWE0
MmEyMDY3ZDAxNmY3NmY3NjgxODFhNGY2ZTE4MjgwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDK34Y7KLzhWAfGQo8S3OER0c90/AWQUun+5FPFFE9DM6tZ
OwjK1yN8lNX8r9V1sS2g1dh3PGDl1jftaGfAMjjm4kmS1dOjVNzjaLcQRFndW8Gb
XMKib9nc5PrmTsCO6fxO5VFzXMff8U/c1WwcXy4HLS81JcHrX5YvkAutaG0yUI4v
6uuKKiYD3MTrhuv65/21l6kTjWkKRhWmxVR4SB0ANnSWAPlgZkzKvlfAQu9yd5Ms
bijAxU0Ua03w8l/iztdRVvbdaW2VUqCK+XCCQ6mH/iYsLO6J9swsqU5Q1EHbFM5C
hyMKgjlbwIFym9AtrpyH1Tkn0Pm09KcxjM5HPwD5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoEHXdDtOGFcx35o1/z5U6q6O4v0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmNjJlOTc3LWNmYjctNGQ0OC1hNDM1LWZhODhmMmVlNTRhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjl2AwDQYJKoZIhvcNAQELBQADggEBAHacXVrJXI23jzSBn4X7/DjcsAJu
6QRscOLz0gs3gJ1Z7aJ6jMNp+/WWG9rWl8ATknfnyyJzITZa44S4dEk2tcdHezEu
K7iiNvwlwQdeTMM/t4519TQ2iJSpjgDNMPuKfUu1jFiL5l2nNTzzBkEXMmt88l2A
z83I1EZv1Wvb9ByAI7UoW+rfDNMN+GgI1ezMTcQbRzS6NijxVnzUPEEfiwgKxh/2
0w5Y1zRyYBU7SqKeVIeDdly1M2fKXRvIF0KuCRY8SK87JcduPcEWck4gzhd9p3ps
BAah2sOC5GriSZ+Y6rMhCa5rDy4yeGhLkRLmZ5stqYIREURX/SWh8Gzev9s=
-----END CERTIFICATE-----