Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8665056-6a8a-4018-86fe-e7b91043b306.roa
File:                     a8665056-6a8a-4018-86fe-e7b91043b306.roa (raw, json)
Hash identifier:          JdQuYpZLSSIUve/jx0F0l001tC7AVkcgYxZpubYlJzA=
Subject key identifier:   8D:DE:89:A3:5E:81:41:57:B4:9D:AE:C7:79:F4:37:67:F8:88:FF:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       790FBC2AF1D7F7F0411C24DC35DF99E1474A1BA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8665056-6a8a-4018-86fe-e7b91043b306.roa
Signing time:             Tue 14 Oct 2025 15:39:14 +0000
ROA not before:           Tue 14 Oct 2025 15:39:14 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0f:bc:2a:f1:d7:f7:f0:41:1c:24:dc:35:df:99:e1:47:4a:1b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:39:14 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=36ee39540ac6f071f0d528476e3c4654e9b58bce8db5a024dd12117543ce3fff, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:92:8f:db:a7:f0:67:49:d9:3f:09:fa:9e:01:
                    a9:64:80:4c:e1:f5:11:a1:58:c6:54:f8:80:ed:7b:
                    8b:b8:20:c9:94:56:3f:3f:47:4e:96:03:67:84:6f:
                    6e:6a:b9:d0:74:57:01:a1:f3:4f:07:35:a7:41:eb:
                    fb:37:12:97:2d:ec:2f:4b:dc:be:79:10:78:47:9a:
                    77:49:6b:8f:79:1d:24:b3:12:56:1e:86:58:c6:da:
                    60:14:26:90:44:ff:61:7b:be:d6:bd:05:11:d7:66:
                    f3:15:5b:dc:11:95:38:32:84:82:d8:1f:2a:72:ba:
                    c3:19:3b:5c:f8:6f:45:98:28:4c:11:ac:73:b5:6b:
                    4e:f3:0d:53:75:e4:40:ff:01:f8:bf:76:30:cf:a3:
                    32:7e:c3:45:4d:d9:46:e5:ca:e2:fa:81:b2:f6:3b:
                    73:82:8e:83:fd:b3:29:75:f1:02:35:9f:0d:a3:ab:
                    4b:31:ad:c5:ba:5f:53:a4:c8:91:33:f8:43:2a:fb:
                    fb:62:e7:01:35:61:85:47:ed:89:01:1f:2d:fc:d7:
                    be:3d:8a:3c:49:dd:4c:27:62:48:d6:51:ee:0e:d2:
                    82:48:bf:b8:07:01:76:c2:0a:dd:45:7b:f8:19:1c:
                    4e:44:c7:ee:17:a9:91:9b:01:9f:88:29:8f:f2:8a:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:89:A3:5E:81:41:57:B4:9D:AE:C7:79:F4:37:67:F8:88:FF:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8665056-6a8a-4018-86fe-e7b91043b306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:40:5f:52:09:40:a2:45:57:00:8d:10:9c:69:8f:37:61:ac:
         c6:fb:56:96:b4:a2:f4:7c:be:77:64:58:d7:39:93:c4:21:01:
         77:d3:54:ed:cb:10:95:de:59:54:12:b7:27:f5:68:da:4f:3c:
         85:0c:02:8c:62:e9:0e:cc:2a:e4:94:d3:02:32:e8:96:00:b0:
         e9:b3:51:06:4d:de:d2:33:e0:45:47:36:c8:40:30:43:90:af:
         39:e0:a3:e5:c7:8f:69:c5:09:23:c6:7f:d8:f9:86:67:bb:9b:
         a4:3a:f5:b5:b3:c7:6b:37:2f:25:45:1b:cb:8a:d0:d4:b4:77:
         09:75:25:eb:be:d0:75:86:b1:d3:04:2c:cd:5c:41:10:7f:e4:
         51:bc:da:ae:a7:49:66:9b:09:c9:32:ea:05:55:df:70:39:7a:
         2b:1b:cd:a6:a7:86:2a:be:dc:12:3d:aa:f8:18:ca:f0:cc:b9:
         7d:1c:93:15:dd:79:ed:41:69:f3:5c:35:dc:93:93:f6:de:de:
         25:77:f4:8a:b7:67:84:29:17:b8:45:7b:e4:8b:8d:c6:03:24:
         59:4a:72:f1:20:92:cd:26:f4:fc:c3:0a:1f:85:4c:4e:5a:2b:
         87:e1:19:e6:a4:1c:c0:07:bc:2e:95:90:65:7f:9c:6e:f9:4a:
         4e:89:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----