Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
File:                     259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa (raw, json)
Hash identifier:          OnohtSfN1TyCTlcpoM0R1r7TUGr68Am2yoEaXNRAaP4=
Subject key identifier:   A8:47:F9:EA:FF:AC:C3:6E:CB:F3:F4:06:F5:15:91:E8:D4:62:A8:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1163B6E3E306B703E0C1B0C0B81292B4A2A7C1C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa
Signing time:             Fri 24 Oct 2025 00:11:38 +0000
ROA not before:           Fri 24 Oct 2025 00:11:38 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        98.88.0.0/13 maxlen: 13
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:63:b6:e3:e3:06:b7:03:e0:c1:b0:c0:b8:12:92:b4:a2:a7:c1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:11:38 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=e35d52b5fd7d0707d95479d3ede931e4e5171338c0558674904de4421bfe3e05, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:97:46:79:29:9b:a1:e5:af:e9:a4:f6:1c:
                    c1:06:96:ef:ee:0f:c3:f6:64:c8:42:a3:89:81:38:
                    0a:78:e7:66:ae:88:6b:17:ed:4e:15:bc:d7:35:64:
                    f0:68:55:2f:a8:8b:58:21:46:72:d9:0a:d9:6e:a7:
                    65:72:e5:2e:06:a9:8a:b5:dc:f1:b7:ea:48:91:fb:
                    71:85:bf:ec:f6:a6:4e:e8:1d:df:d7:66:f5:91:23:
                    2e:c4:93:1b:41:8e:97:ed:71:72:87:bd:39:fd:be:
                    cf:20:79:f7:87:f6:2e:af:b8:0b:db:79:2a:b8:6f:
                    2a:64:b2:24:f0:c1:da:4b:25:ff:ed:8a:cc:11:dd:
                    b7:38:ab:25:11:47:93:ef:a2:c1:ae:a6:50:db:2c:
                    67:0e:2c:3a:43:99:7a:62:6d:f2:27:06:d8:38:3a:
                    9b:dc:95:dc:c5:f0:17:91:86:55:5e:b6:6f:4a:7a:
                    2c:a0:9d:c7:04:07:54:38:ca:ac:4c:70:25:3c:3c:
                    8a:bc:0c:8e:6e:67:7e:22:6a:99:10:08:bf:5f:f8:
                    83:2f:cc:fb:6b:37:15:fd:db:a0:7c:66:b9:53:57:
                    50:00:fd:55:05:38:26:85:46:bc:67:ca:a1:2d:16:
                    17:89:ff:30:78:63:28:c9:d3:6b:dc:2a:ee:fb:a1:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:47:F9:EA:FF:AC:C3:6E:CB:F3:F4:06:F5:15:91:E8:D4:62:A8:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/259d77c8-b072-4d7a-bc33-ac5ef1fadfeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         08:fa:99:a7:cf:2e:63:f7:5c:05:cc:ee:2c:1d:fc:4c:b8:17:
         15:43:98:02:5f:c4:54:d8:67:4c:4a:29:ff:7d:a6:64:77:49:
         88:40:21:b7:39:66:b0:45:14:98:da:e2:8f:2f:c3:16:c5:a0:
         26:8b:65:2b:14:20:7c:a6:f0:37:32:2e:a9:2e:fb:0c:94:04:
         d8:8a:60:a3:18:4c:1c:2c:86:71:a6:a3:52:2b:f4:25:d1:d2:
         c9:5c:48:33:f8:06:6d:bc:4d:fd:49:d4:e0:4b:d9:65:2f:75:
         f1:99:53:1f:01:0c:d8:f9:e2:c6:4c:d2:0c:ac:1f:3d:21:c6:
         f8:3b:67:20:94:ae:b9:19:19:22:fd:84:3c:4b:ad:43:31:00:
         ff:65:f9:b5:c2:ab:88:44:27:53:a0:87:68:3e:e3:22:ee:68:
         fa:10:19:93:4f:8f:74:67:39:54:78:78:69:1a:82:3b:91:67:
         2b:95:fa:ba:41:c9:59:84:12:c4:5d:d3:65:21:fb:66:df:1f:
         df:dc:b6:d7:8e:c9:22:06:b1:9d:7d:04:a2:a9:cc:74:a9:ec:
         63:80:a9:a0:fe:4f:b4:8e:65:b8:ef:96:23:2b:05:97:66:8e:
         71:c0:37:e9:5a:ff:05:c5:43:d7:ef:fb:ed:40:c7:5c:d9:a6:
         40:39:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----