Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
File:                     6c4df158-4435-4ebb-ac08-61aded4b3360.roa (raw, json)
Hash identifier:          GJPsfB70wnc5R42RuJmgmrIpheia62twK+XMAlhOeU0=
Subject key identifier:   10:39:87:94:8E:FF:3C:F0:29:9B:F2:C0:32:DB:E1:2D:7A:B7:4E:CA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       611E0A9EBD4253A0DA478B2B6D96BAA6771E8401
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
Signing time:             Wed 22 Oct 2025 00:00:59 +0000
ROA not before:           Wed 22 Oct 2025 00:00:59 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1e:0a:9e:bd:42:53:a0:da:47:8b:2b:6d:96:ba:a6:77:1e:84:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 22 00:00:59 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=a42fa2dcc864ebabd7d01a861f9639300814881e3a5e748656abc83b389e3028, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:60:8b:65:fd:96:f4:78:ad:18:60:3f:07:
                    f1:53:6b:f7:7c:26:21:7f:9e:b5:48:eb:f0:fd:58:
                    99:be:6c:12:6d:eb:ce:dd:4e:66:74:d0:bf:4f:d1:
                    7e:e2:19:15:87:5f:f3:32:c7:bf:a1:45:d0:0c:a1:
                    1d:7b:b6:b8:2f:f8:8d:be:0f:57:e3:30:93:72:20:
                    76:39:bc:ac:47:5e:35:c5:0d:b1:e2:ed:71:1b:a4:
                    35:32:30:4d:b5:ab:06:02:38:85:28:f9:8a:af:25:
                    b6:20:b2:a2:43:ef:90:90:14:d0:19:35:fc:3e:4b:
                    5a:c5:0a:01:33:dc:a1:d8:91:db:f1:7b:c9:df:40:
                    30:43:54:36:78:98:76:39:4c:ef:ee:59:97:b7:ed:
                    82:49:c1:ef:86:9f:dc:25:d1:09:81:c6:f4:b5:0f:
                    47:25:b7:24:97:26:6d:c8:15:6e:af:fe:10:a3:6f:
                    42:55:fd:2b:68:ba:e0:f3:05:93:22:07:db:8a:9b:
                    18:55:96:f5:8e:60:39:4c:13:9f:36:98:ed:fd:8c:
                    36:e3:6b:39:dc:67:10:be:d4:6f:bb:4a:d9:2e:81:
                    3e:89:ec:69:32:d9:8a:7f:82:a2:1c:9b:4b:88:c5:
                    d2:e3:98:5f:3a:4c:a0:9d:1a:de:ec:c9:0c:3b:93:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:39:87:94:8E:FF:3C:F0:29:9B:F2:C0:32:DB:E1:2D:7A:B7:4E:CA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ba:c3:f9:19:5c:05:6b:61:54:a0:8e:7b:86:aa:a1:92:6f:
         90:45:57:d5:a8:0e:25:46:1f:eb:f3:bf:92:56:fa:38:4e:ae:
         b1:91:25:7f:9f:e7:14:4a:e1:c0:4e:aa:4b:1f:c9:a6:95:b6:
         de:2b:fc:cf:b2:30:2a:73:6c:bc:f3:c3:f2:28:60:c8:9d:f6:
         72:7c:56:46:1d:34:5f:c4:ae:bf:6b:0a:d5:81:1a:70:6e:d8:
         6d:0b:8b:0f:1c:f3:f4:b8:1e:14:1d:f6:83:4b:d2:3b:5c:77:
         25:25:4b:0e:62:02:8a:9c:7e:5d:f4:70:25:1c:85:7c:10:0a:
         81:90:f7:12:b2:ac:21:41:0f:82:90:22:18:ad:04:d4:c8:da:
         56:0e:19:b8:6c:27:fa:32:0a:c3:e6:14:5f:31:6d:6e:89:64:
         f7:2f:6e:1f:69:a9:d0:02:96:56:01:da:a0:87:e1:6b:fa:2b:
         66:fb:30:d0:7f:bd:3c:4b:2b:60:14:b9:fc:76:b8:27:05:6d:
         e5:1b:ad:a0:15:d5:de:de:22:06:3d:ef:d0:e3:1b:e8:77:e5:
         b6:a9:9e:43:1c:92:4a:92:59:06:a1:6b:76:18:23:ab:f2:49:
         5d:79:d7:a6:a9:24:ca:a0:14:b6:83:f7:6a:18:ee:39:2a:9d:
         de:15:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----