Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e799812-b14b-468c-aca7-d4e022e9af58.roa
File:                     0e799812-b14b-468c-aca7-d4e022e9af58.roa (raw, json)
Hash identifier:          pJXZzmwR7rMZ6IYTmQUgIs+kK34fpRZ3zPFSGXHbyAo=
Subject key identifier:   E9:F3:60:17:50:20:51:53:55:9D:BB:82:B9:1A:3C:F7:1D:18:C8:E5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5B0B6094E7F6E9FE9B8EE90B767D922FD3611E70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e799812-b14b-468c-aca7-d4e022e9af58.roa
Signing time:             Tue 14 Oct 2025 15:12:03 +0000
ROA not before:           Tue 14 Oct 2025 15:12:03 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0b:60:94:e7:f6:e9:fe:9b:8e:e9:0b:76:7d:92:2f:d3:61:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:12:03 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=d7f4cda2c323ef00c7133d40d3e62fe22dfc58df172deea604e7ba2051b6db0a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:e7:93:e8:b3:58:df:ae:36:75:98:f2:c6:
                    e6:30:63:e5:7a:25:5d:b7:64:13:fb:31:dc:5d:ae:
                    cb:6f:86:fd:e8:9b:fa:7d:15:30:7b:74:d9:a1:10:
                    09:ab:0d:b4:49:4f:37:10:3a:22:42:ef:85:34:7b:
                    6a:e7:d8:61:f7:b0:77:0a:c9:8b:2b:be:c3:61:9f:
                    a3:2c:c5:db:4e:0c:8a:16:1c:ec:e9:94:c1:75:75:
                    8e:65:ea:29:f3:95:b1:d6:36:67:3d:f0:49:56:aa:
                    d3:5a:1e:04:15:bd:ed:6f:b9:ec:5d:ca:47:c4:6f:
                    5c:7c:cc:f5:0d:1f:16:52:d4:b0:c6:8f:cf:fb:a3:
                    9b:cd:fb:fe:b7:cb:ef:49:c9:92:dd:b6:4b:0b:27:
                    e0:7c:cd:98:ab:0d:8c:9f:5e:75:7b:b5:a7:1e:00:
                    4c:2f:3a:0e:08:d6:c0:0b:95:6e:32:92:56:d6:47:
                    6f:c9:d2:8e:19:c6:aa:9d:17:6b:02:d5:ad:05:7d:
                    3f:15:a6:98:e7:19:98:f3:1f:37:db:ab:37:53:fc:
                    41:99:09:20:01:c0:c8:89:a5:89:11:d8:9e:1a:83:
                    e3:ed:63:04:8a:59:f1:9f:e0:23:8a:8b:0f:88:d1:
                    63:7e:66:63:bb:08:55:cc:01:e9:8f:50:cd:3a:11:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:60:17:50:20:51:53:55:9D:BB:82:B9:1A:3C:F7:1D:18:C8:E5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e799812-b14b-468c-aca7-d4e022e9af58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:43:56:a3:ac:38:a7:1f:4c:74:6d:91:a7:54:43:20:79:22:
         95:53:6a:51:ab:22:97:80:1a:7d:80:3c:21:e8:f9:89:7d:7d:
         05:14:41:b9:23:fa:92:83:16:a0:25:05:cb:90:a6:d5:79:bf:
         4b:03:50:78:92:d3:ae:0c:65:ed:61:69:6d:e1:4a:b5:a4:93:
         12:05:9e:d6:28:7f:1d:a8:67:76:7b:7d:c3:29:06:b4:1c:a6:
         83:f6:3b:ea:9c:0e:ca:8e:c6:a1:3d:2d:a5:49:a2:0f:78:b0:
         c7:d2:13:f7:31:3a:8f:35:e7:fa:fe:1d:b3:80:8d:76:95:be:
         9f:19:41:62:a0:b9:ff:91:3e:87:7b:18:d2:2a:16:78:ff:42:
         15:e7:bf:2c:c1:b3:1f:45:a9:ae:58:f6:0e:4c:ed:62:4b:90:
         9f:bd:e9:63:d6:e7:6b:39:b0:9a:89:01:ba:5f:b5:e7:2f:00:
         2c:71:8a:2a:54:2b:b2:ef:f4:f7:a7:32:41:9b:b7:31:15:af:
         ca:d5:19:7a:14:be:91:b2:d2:34:e8:d4:9b:8a:c7:a1:4d:4d:
         94:64:25:53:ad:b2:4d:0a:51:ab:e4:df:2f:13:63:3f:01:df:
         e0:b3:20:7f:69:09:b5:4b:f6:1b:b5:24:10:18:a5:ae:74:ce:
         68:d0:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----