Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad467c4-cdb6-4b0e-a89d-121816a1421c.roa
File:                     dad467c4-cdb6-4b0e-a89d-121816a1421c.roa (raw, json)
Hash identifier:          1dVw4lq14bc5K8GfjfK1wVAXyYl5Hj2VQhgrSh/yifA=
Subject key identifier:   C4:0B:DE:C1:F6:BE:BF:FB:F6:A2:13:A2:7B:F9:F7:A4:8A:A7:33:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       418C39BD6EB60921E85A6A919B55049AED246AA7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad467c4-cdb6-4b0e-a89d-121816a1421c.roa
Signing time:             Fri 24 Oct 2025 00:12:14 +0000
ROA not before:           Fri 24 Oct 2025 00:12:14 +0000
ROA not after:            Fri 28 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.143.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8c:39:bd:6e:b6:09:21:e8:5a:6a:91:9b:55:04:9a:ed:24:6a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:12:14 2025 GMT
            Not After : Nov 28 23:59:59 2025 GMT
        Subject: serialNumber=71c3ebebffb97c623e24ec49d59d203e721d3e49bfdfb7dce1429038d80dbc99, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:5a:fd:cc:2a:99:00:a0:62:30:72:34:d0:
                    10:66:4e:cb:09:a2:b4:3b:ee:df:05:27:9b:da:46:
                    81:f0:8c:d3:11:9d:15:e8:f6:68:a6:19:8a:89:80:
                    3b:ab:5f:00:5e:17:bc:1c:70:b5:0a:37:4f:42:fd:
                    ad:24:5d:4a:80:8c:2b:5f:9b:d2:b1:eb:bc:c7:1c:
                    5a:32:a3:94:c6:33:79:09:1d:78:05:4c:62:eb:d2:
                    40:09:4b:7b:b6:dd:66:e8:49:e3:cc:8e:f9:81:c3:
                    f5:92:9f:a7:03:e8:c6:9a:dd:ec:8d:1f:c8:d7:e1:
                    16:8f:0b:5d:01:bc:b0:be:49:2a:e1:b1:4a:66:57:
                    48:d3:1d:a8:13:f8:99:fb:4b:42:1c:96:03:25:85:
                    f7:4c:78:2c:07:25:de:a8:a4:55:e8:5e:e0:d6:4c:
                    2c:60:40:e4:1a:a9:82:c9:fe:e2:d2:f3:1d:6b:1b:
                    4d:6e:ac:5f:21:3a:79:56:8e:f4:20:57:2a:68:9f:
                    7b:cb:4b:32:3f:f3:29:d1:b3:50:86:fe:7c:63:bc:
                    03:e6:c8:00:84:8d:cf:a8:bf:93:fb:ee:93:ac:92:
                    8c:a5:3d:61:79:60:7e:51:c5:6f:68:af:7d:6b:ed:
                    16:65:0b:be:4a:2b:1a:b1:a7:3e:b1:b5:22:01:fb:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:DE:C1:F6:BE:BF:FB:F6:A2:13:A2:7B:F9:F7:A4:8A:A7:33:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dad467c4-cdb6-4b0e-a89d-121816a1421c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.143.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:83:f2:61:34:b0:aa:fe:f1:74:9f:63:11:9a:76:1d:b4:
         9c:5a:0d:db:e0:45:b8:af:f8:9f:dd:0e:85:19:69:18:92:4b:
         2b:b0:df:b0:41:07:8d:82:4f:0c:f0:1a:38:9b:3b:60:c3:53:
         e9:7c:34:ac:e9:33:8e:bf:75:06:1f:fc:63:4c:cb:8c:7f:d4:
         a3:68:e5:f1:70:09:81:bd:2d:f0:4d:df:34:84:58:72:4e:e4:
         4e:45:cd:18:eb:7f:29:1a:60:52:0b:b2:3d:cd:3a:df:1f:a8:
         6f:8c:71:6a:26:cd:a3:06:5c:3f:c8:41:1a:41:3d:dc:cb:a0:
         c3:34:42:2c:f3:f0:27:a2:06:a0:cf:96:8c:cf:4f:b6:ee:af:
         6e:b6:a3:8a:5f:ea:78:c1:b4:cf:af:2a:1c:5a:75:f8:4b:0d:
         3f:bb:bc:c7:30:e3:3a:0d:5c:7a:63:87:7e:41:36:95:d0:01:
         cc:c4:b9:24:5d:a2:b5:3d:ef:2a:96:ee:88:a3:6a:16:97:2a:
         4e:16:0b:64:63:88:7c:40:c4:b6:de:23:44:34:e8:c5:9d:60:
         29:4b:33:c5:1e:07:f7:55:3f:65:97:43:bf:80:55:71:50:43:
         7c:5d:20:19:a3:0c:5b:7c:53:25:13:b0:8f:f5:ca:30:9d:d4:
         51:5c:da:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----