Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa
File:                     2790fa50-7a71-46ac-a374-b39800d22bbd.roa (raw, json)
Hash identifier:          PGi2dRPuOg4qe3CEYB9DCWTlGFEPjPO6e41HHV79Dio=
Subject key identifier:   44:20:AD:D2:53:23:68:93:48:46:61:81:7E:0D:67:E5:A2:1F:15:F8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35DB4191CD3177F9C2982153600037C0EADABA19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa
Signing time:             Wed 29 Oct 2025 21:08:34 +0000
ROA not before:           Wed 29 Oct 2025 21:08:34 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.151.184.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:db:41:91:cd:31:77:f9:c2:98:21:53:60:00:37:c0:ea:da:ba:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 21:08:34 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=b93ce946fdb24d6547f2935f0721c88f68399998dc8d86c646e97180d9480575, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:47:94:c0:d9:a4:85:50:bf:d4:6d:11:12:
                    8c:7e:2f:ca:bd:1d:af:09:53:25:2c:dc:a8:c1:60:
                    13:fd:bb:02:ce:df:41:dc:53:32:f0:ae:43:06:b6:
                    24:a7:7d:70:2d:a5:95:1f:76:d3:34:b6:a7:24:21:
                    9d:e4:c3:41:65:88:ca:f1:bd:b7:19:12:e6:b3:67:
                    fa:5d:45:fb:b4:fa:a6:49:dd:8e:28:6c:32:cd:11:
                    64:d9:18:78:53:f1:79:0b:1c:89:62:02:36:45:b4:
                    dc:5a:71:26:f8:0c:4d:83:ef:79:e7:b9:af:5d:72:
                    46:27:74:04:be:f2:63:b4:f7:51:d7:55:1e:31:39:
                    7a:c2:4d:b4:cf:ff:e4:98:12:37:72:b1:e5:ff:f4:
                    45:e8:b3:0a:ae:07:f0:ee:73:1f:f8:02:40:94:9b:
                    f7:6e:18:10:43:80:37:60:0f:17:90:be:cb:58:f8:
                    83:2e:52:e4:13:c2:b8:37:1c:f6:70:0e:9d:78:c1:
                    ae:50:54:0a:d0:7e:64:8b:74:82:6b:f3:73:bb:64:
                    c9:d6:97:2a:47:2a:5b:fd:5d:dc:70:da:1b:65:f2:
                    a2:5b:3f:60:fa:eb:eb:ad:b9:19:90:f6:1d:da:81:
                    1d:92:b7:d2:76:d3:89:09:86:71:ed:2b:c9:a1:c1:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:20:AD:D2:53:23:68:93:48:46:61:81:7E:0D:67:E5:A2:1F:15:F8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:59:eb:d6:bf:66:b4:6d:3b:07:23:4b:fa:76:23:82:bd:9d:
         56:0c:23:13:5f:37:f9:70:c5:dc:c9:e3:29:9b:24:76:9f:af:
         de:f1:56:2b:2b:89:42:1e:e0:2a:82:93:b7:98:7d:bd:ce:88:
         17:fc:da:8c:fe:df:63:33:3b:91:cb:f6:53:8c:f4:43:92:8d:
         06:dc:4d:c4:84:55:7b:0f:13:b6:53:cf:36:50:32:81:d9:90:
         a2:ad:c9:21:b3:86:05:bb:f7:66:e1:35:2f:0b:03:b5:60:87:
         c1:a2:f5:35:16:6a:a8:89:0e:5e:7c:d7:ee:52:5e:66:08:ff:
         4a:3d:d7:c4:cd:d3:23:67:e9:72:e8:a0:ee:1f:83:21:c4:86:
         a7:69:35:94:e6:69:8a:f0:8a:57:b5:97:5e:0f:62:ad:c0:26:
         6a:d1:75:71:18:08:65:37:bd:e0:7f:b3:66:2f:b9:1c:98:2e:
         0c:00:9e:27:a3:eb:c4:bb:84:89:8d:68:d7:99:64:aa:a2:2b:
         40:0b:97:c8:13:8e:6b:0e:9e:67:a5:78:4a:1f:b3:04:a7:8e:
         eb:61:6f:b5:a7:fc:49:9b:fc:90:21:cb:ab:a7:d0:6e:dd:71:
         15:67:fb:c9:a6:45:7f:7a:5c:f1:61:78:5e:3f:d2:fc:f3:ca:
         5a:3e:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----