Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e33a2bd1-80fa-4d09-b7f6-a50da08f0f0a.roa
File:                     e33a2bd1-80fa-4d09-b7f6-a50da08f0f0a.roa (raw, json)
Hash identifier:          pT164SBwx3hHvSqF/pmziOEsgYPrICSU/oEgmqj3qsE=
Subject key identifier:   1C:14:60:F7:66:E9:83:AA:D5:BD:C2:B4:3F:49:14:CC:B8:BC:56:8D
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5AF34C8D455FE82F75D17FE61119437C2D972AA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e33a2bd1-80fa-4d09-b7f6-a50da08f0f0a.roa
Signing time:             Thu 23 Oct 2025 01:53:22 +0000
ROA not before:           Thu 23 Oct 2025 01:53:22 +0000
ROA not after:            Thu 27 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f3:4c:8d:45:5f:e8:2f:75:d1:7f:e6:11:19:43:7c:2d:97:2a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:53:22 2025 GMT
            Not After : Nov 27 23:59:59 2025 GMT
        Subject: serialNumber=b76296cf01fc1fde37e9f4e60910191393db19320f94bc8faac367276bd5cf10, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:8f:fa:8d:ea:01:06:8f:d2:61:4b:1f:4c:
                    c1:b6:29:b3:3c:39:95:18:48:91:35:33:1c:53:07:
                    b5:a8:5b:b9:68:ee:b7:e4:6f:22:64:21:9c:e0:d1:
                    6e:2d:33:d8:6d:a3:b5:73:29:5b:09:fe:4b:db:23:
                    7c:6d:84:63:6f:fb:48:21:b4:3a:2a:fe:e9:75:f5:
                    d0:e7:f1:6b:ca:53:48:b1:10:62:88:76:c2:30:c3:
                    33:07:e7:55:b1:3a:15:49:70:bd:f4:5a:3c:07:24:
                    9f:ce:12:a0:5c:92:e4:2e:bd:1b:4b:13:69:52:74:
                    08:4c:e2:b4:91:64:86:04:96:83:64:9e:84:c6:c3:
                    44:ad:dd:a5:ce:1b:ad:5a:2a:41:83:75:44:02:68:
                    52:17:88:f4:5a:db:d7:2d:9f:34:6a:86:a7:02:ce:
                    02:97:8b:7b:e7:40:7e:ce:0d:c5:4a:10:da:ed:e5:
                    19:6d:da:be:70:0e:c3:b5:57:f6:fc:7f:66:ed:6e:
                    02:ed:8a:7a:3f:c8:46:59:c2:9c:e7:41:18:30:54:
                    9c:43:c6:09:11:9d:5c:a7:de:eb:c1:1f:1d:7f:f1:
                    90:be:8d:23:9e:12:32:a4:f2:c7:41:4d:5a:85:97:
                    0d:ee:21:5d:72:d7:c4:a9:15:b7:80:0c:db:37:68:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:14:60:F7:66:E9:83:AA:D5:BD:C2:B4:3F:49:14:CC:B8:BC:56:8D
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e33a2bd1-80fa-4d09-b7f6-a50da08f0f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:bb:c0:ca:33:cb:b3:61:87:15:cb:30:fc:45:a4:9e:8f:
         a8:b6:57:51:d8:f7:7d:b8:c0:52:1f:5f:a8:74:6a:b5:ce:12:
         86:7d:8b:c8:f3:66:09:53:a5:e7:95:20:f2:f9:fe:2b:10:ce:
         95:b4:e0:ba:8b:03:e7:db:bc:54:fc:79:a2:39:5f:86:db:33:
         6c:92:6c:70:93:27:7c:ad:45:c8:20:3d:21:9f:26:e9:51:bb:
         6e:a9:4e:f2:e6:de:1e:bf:5c:e8:b4:00:ad:1b:5f:ac:47:a7:
         f2:9b:40:ff:89:25:a1:eb:72:05:4a:37:1a:db:71:33:94:99:
         ab:a5:8b:99:a2:3b:63:f4:3b:27:76:96:bc:09:98:7d:24:36:
         36:ed:2f:4b:19:e1:2c:8a:9f:fc:fc:e0:da:43:af:8f:68:a5:
         4c:0f:05:68:2d:4d:03:8e:1e:b7:5d:de:b6:34:8a:97:c5:69:
         c7:38:7a:8b:13:8e:bb:b0:cc:5d:74:54:88:89:8b:3b:a0:f5:
         79:59:3e:9d:a2:6e:0b:dd:18:e0:d2:ec:1e:bf:b5:b8:f9:33:
         58:0b:e4:08:3b:36:8c:f4:84:f7:f9:eb:46:93:04:ae:f8:58:
         33:75:10:63:8f:4c:c8:7c:0b:f2:a1:cc:30:c0:07:c8:09:e6:
         f8:20:81:3f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUWvNMjUVf6C910X/mERlDfC2XKqUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIzMDE1MzIyWhcNMjUxMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzYyOTZjZjAxZmMxZmRlMzdlOWY0ZTYwOTEwMTkxMzkz
ZGIxOTMyMGY5NGJjOGZhYWMzNjcyNzZiZDVjZjEwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsxo/6jeoBBo/SYUsfTMG2KbM8OZUYSJE1MxxTB7WoW7lo
7rfkbyJkIZzg0W4tM9hto7VzKVsJ/kvbI3xthGNv+0ghtDoq/ul19dDn8WvKU0ix
EGKIdsIwwzMH51WxOhVJcL30WjwHJJ/OEqBckuQuvRtLE2lSdAhM4rSRZIYEloNk
noTGw0St3aXOG61aKkGDdUQCaFIXiPRa29ctnzRqhqcCzgKXi3vnQH7ODcVKENrt
5Rlt2r5wDsO1V/b8f2btbgLtino/yEZZwpznQRgwVJxDxgkRnVyn3uvBHx1/8ZC+
jSOeEjKk8sdBTVqFlw3uIV1y18SpFbeADNs3aKanAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUHBRg92bpg6rVvcK0P0kUzLi8Vo0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UzM2EyYmQxLTgwZmEtNGQwOS1iN2Y2LWE1MGRhMDhmMGYwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBjVDANBgkqhkiG9w0BAQsFAAOCAQEAF9C7wMozy7NhhxXLMPxFpJ6PqLZX
Udj3fbjAUh9fqHRqtc4Shn2LyPNmCVOl55Ug8vn+KxDOlbTguosD59u8VPx5ojlf
htszbJJscJMnfK1FyCA9IZ8m6VG7bqlO8ubeHr9c6LQArRtfrEen8ptA/4kloety
BUo3GttxM5SZq6WLmaI7Y/Q7J3aWvAmYfSQ2Nu0vSxnhLIqf/Pzg2kOvj2ilTA8F
aC1NA44et13etjSKl8Vpxzh6ixOOu7DMXXRUiImLO6D1eVk+naJuC90Y4NLsHr+1
uPkzWAvkCDs2jPSE9/nrRpMErvhYM3UQY49MyHwL8qHMMMAHyAnm+CCBPw==
-----END CERTIFICATE-----