Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa
File:                     7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa (raw, json)
Hash identifier:          K7aaum9YBcbaIKoFngrJD2yxsj8cLrhJCXeJ1bUEti4=
Subject key identifier:   3C:39:AF:ED:A7:96:62:2F:83:BE:31:A1:53:38:74:66:5A:4C:FC:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       016E842EC44C655DFD3722CE8708C50AEF82B1CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa
Signing time:             Sun 02 Nov 2025 00:20:08 +0000
ROA not before:           Sun 02 Nov 2025 00:20:08 +0000
ROA not after:            Sun 07 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.0.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6e:84:2e:c4:4c:65:5d:fd:37:22:ce:87:08:c5:0a:ef:82:b1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  2 00:20:08 2025 GMT
            Not After : Dec  7 23:59:59 2025 GMT
        Subject: serialNumber=7ad571855e1444da832f6cdf7f4161d8860fa873c1a46021fce3053a057e32dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ce:f8:75:cf:40:0e:63:44:26:5b:1a:b0:3f:
                    ca:2a:75:68:1a:d4:86:3d:66:50:c6:75:c3:40:80:
                    6a:4f:f5:17:b0:d7:61:b3:d3:0d:6a:5d:fe:9b:8e:
                    ab:7a:ad:6f:5e:2a:df:12:d4:c6:8d:ef:18:61:0f:
                    88:fc:4f:31:33:03:80:b5:29:40:4e:f7:06:3a:88:
                    4a:01:0b:62:50:d4:d8:29:df:41:fc:de:eb:30:a9:
                    41:37:05:72:73:53:c5:bb:20:8b:12:98:fc:eb:43:
                    e5:9e:a5:83:7f:92:c4:63:6d:75:39:f8:df:a2:c9:
                    89:0a:2c:5a:90:47:90:0b:a8:03:2e:70:31:0a:b5:
                    1e:0c:67:c5:ee:dc:be:c9:bb:2f:71:51:73:27:71:
                    c2:07:53:11:25:44:5b:1e:92:60:6d:e6:06:e6:d9:
                    3e:fc:50:1b:2a:cf:07:50:24:54:99:0d:06:3d:a7:
                    dd:7c:e8:48:fc:cd:04:ad:f0:ec:c1:39:4a:5d:07:
                    a3:f6:a9:1b:73:07:c2:5c:ae:a3:b0:f3:6b:35:61:
                    6b:61:3c:ca:9f:32:c6:ac:05:44:d5:fc:18:df:bf:
                    59:c3:ba:06:75:12:fe:1f:71:ae:44:e3:ca:d2:86:
                    d0:40:b0:aa:14:7a:e9:22:9a:ca:f1:ca:08:16:e1:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:AF:ED:A7:96:62:2F:83:BE:31:A1:53:38:74:66:5A:4C:FC:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:35:8d:db:e0:c4:56:f5:95:5d:8b:16:57:51:96:30:d2:
         43:cd:2e:43:9c:d5:ce:30:70:20:84:1b:29:e3:61:d2:6c:ec:
         5a:c4:ac:3f:64:74:28:ac:a9:d0:e7:cd:67:fa:9f:44:55:31:
         1c:15:b8:07:ab:91:6c:87:89:d8:68:86:11:d2:b8:cb:0b:c2:
         15:da:a5:86:fa:bb:c0:1c:67:c4:09:c6:eb:61:88:38:cc:67:
         56:a5:48:c7:69:c9:97:2f:28:6c:be:5b:e1:a3:09:95:b8:e1:
         47:c4:e3:d1:87:2d:50:8a:9c:32:74:e5:5f:98:5a:ad:71:ed:
         ac:88:6d:dd:b8:90:d2:e9:d9:ee:7e:31:9e:53:d9:c3:1c:70:
         42:a3:fb:42:ce:e8:e4:41:ed:39:e3:4d:cd:38:41:33:75:1c:
         65:e8:d9:b7:61:b7:33:47:51:f8:cd:2a:7f:a1:ec:16:8a:de:
         8a:a3:d2:97:44:3f:5b:e8:04:b6:c9:50:a7:00:ac:6f:6d:b5:
         25:90:45:05:ae:6a:2e:a6:e0:da:af:4d:df:f2:e0:73:dc:7e:
         db:ee:f3:27:55:ee:d0:88:9d:7a:f7:fb:bd:ce:30:4e:e0:00:
         c8:68:f3:38:50:9d:34:d0:6e:c0:91:fa:ff:01:0b:97:49:ae:
         f7:ce:1a:f7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAW6ELsRMZV39NyLOhwjFCu+CscwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAyMDA4WhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YWQ1NzE4NTVlMTQ0NGRhODMyZjZjZGY3ZjQxNjFkODg2
MGZhODczYzFhNDYwMjFmY2UzMDUzYTA1N2UzMmRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCezvh1z0AOY0QmWxqwP8oqdWga1IY9ZlDGdcNAgGpP9Rew
12Gz0w1qXf6bjqt6rW9eKt8S1MaN7xhhD4j8TzEzA4C1KUBO9wY6iEoBC2JQ1Ngp
30H83uswqUE3BXJzU8W7IIsSmPzrQ+WepYN/ksRjbXU5+N+iyYkKLFqQR5ALqAMu
cDEKtR4MZ8Xu3L7Juy9xUXMnccIHUxElRFsekmBt5gbm2T78UBsqzwdQJFSZDQY9
p9186Ej8zQSt8OzBOUpdB6P2qRtzB8JcrqOw82s1YWthPMqfMsasBUTV/Bjfv1nD
ugZ1Ev4fca5E48rShtBAsKoUeukimsrxyggW4aChAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPDmv7aeWYi+DvjGhUzh0ZlpM/HkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdkZDJkOTYwLWQyNGMtNDNmZS1iMDk3LWVlZDNiMDU4OWVhZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjlgAwDQYJKoZIhvcNAQELBQADggEBAALVNY3b4MRW9ZVdixZXUZYw0kPN
LkOc1c4wcCCEGynjYdJs7FrErD9kdCisqdDnzWf6n0RVMRwVuAerkWyHidhohhHS
uMsLwhXapYb6u8AcZ8QJxuthiDjMZ1alSMdpyZcvKGy+W+GjCZW44UfE49GHLVCK
nDJ05V+YWq1x7ayIbd24kNLp2e5+MZ5T2cMccEKj+0LO6ORB7TnjTc04QTN1HGXo
2bdhtzNHUfjNKn+h7BaK3oqj0pdEP1voBLbJUKcArG9ttSWQRQWuai6m4NqvTd/y
4HPcftvu8ydV7tCInXr3+73OME7gAMho8zhQnTTQbsCR+v8BC5dJrvfOGvc=
-----END CERTIFICATE-----