Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39521ea-35b0-44a0-b274-109ae8801555.roa
File:                     d39521ea-35b0-44a0-b274-109ae8801555.roa (raw, json)
Hash identifier:          kiZ0YfzxQTbhkpLS0CQL0VILSYPssji56p8n6qbEJEA=
Subject key identifier:   9B:CF:48:65:4F:29:1A:37:1D:F3:01:F2:6C:99:1C:13:26:04:FD:12
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F536A4A6D0987D1F108936589C1518515BFA03B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39521ea-35b0-44a0-b274-109ae8801555.roa
Signing time:             Tue 14 Oct 2025 00:52:10 +0000
ROA not before:           Tue 14 Oct 2025 00:52:10 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:53:6a:4a:6d:09:87:d1:f1:08:93:65:89:c1:51:85:15:bf:a0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:52:10 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=ab4858a791efca34e7ccee008de0df66276f8ac87b095c77e8c50bca6a7e4864, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:bb:d8:5d:15:0c:9d:1b:5e:fa:1a:45:74:
                    c2:68:53:2f:df:e0:f8:65:df:be:db:5d:e3:fe:a8:
                    27:c1:15:fc:07:67:3f:ff:77:60:d3:3d:8d:67:3a:
                    ce:74:ff:5e:0d:0a:11:7b:8c:dc:33:06:06:a3:21:
                    c4:6f:41:07:b3:b4:76:36:1a:17:cc:c9:fb:db:6b:
                    5d:98:ae:d3:e4:f5:7a:73:cf:e7:a3:32:4a:3f:b0:
                    f9:d7:e9:4f:46:b0:10:19:fb:21:61:56:14:1c:2b:
                    0e:1e:be:47:37:93:51:ad:2b:90:6c:91:b0:25:1f:
                    88:b0:d2:73:b3:7c:93:cc:23:e5:fd:ac:2c:d2:7d:
                    b1:d9:23:7c:82:28:6f:ab:e5:70:d4:05:df:6b:c1:
                    07:e5:16:1e:ce:88:d4:11:96:2e:c6:60:14:e4:5f:
                    48:ed:19:9a:a3:97:d8:53:b5:ad:f8:c3:74:71:85:
                    69:9b:6d:2c:db:ea:49:1b:01:f2:0c:26:bf:14:0f:
                    6a:a1:47:3e:33:f2:cd:d3:23:27:c5:4a:82:43:77:
                    38:89:89:de:99:0b:fc:a9:f4:9d:72:0f:2e:db:4b:
                    a8:25:a2:f3:aa:78:34:07:81:74:69:15:bb:b6:d9:
                    15:ea:0c:3c:e9:16:a6:7c:26:72:d5:a2:15:b6:1a:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:48:65:4F:29:1A:37:1D:F3:01:F2:6C:99:1C:13:26:04:FD:12
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d39521ea-35b0-44a0-b274-109ae8801555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:ca:0c:ef:98:13:15:55:27:a9:68:2e:e2:9f:a1:cb:82:85:
         0d:5c:02:b9:db:46:99:c0:6c:93:c9:c1:93:29:8d:4e:68:c4:
         b1:54:a4:b3:b0:4b:83:d6:ed:c5:ca:fc:ab:66:60:91:7b:b8:
         9b:ac:f4:63:90:d4:bc:e4:ea:65:1a:d5:aa:fa:03:ea:4e:2c:
         64:16:3a:80:23:a4:81:93:66:4a:39:e2:08:12:31:f9:33:0b:
         41:49:8f:5b:da:e8:fd:ea:83:09:77:51:4c:f9:95:f3:a6:ae:
         9d:98:d1:00:4a:74:11:e8:24:33:b6:47:11:21:64:a7:88:b0:
         9b:ff:e0:c9:f8:77:06:60:e9:bf:19:46:9b:8b:21:3b:cb:a1:
         6f:43:33:6d:55:eb:05:2f:5b:b3:f5:9f:ba:4c:f4:01:5c:5e:
         98:4d:6d:7b:15:e0:b9:54:d8:5a:27:23:2b:77:3f:bd:a0:eb:
         5c:ad:c3:3b:7f:2c:49:61:54:76:1c:6d:1c:75:31:20:72:87:
         95:e3:9e:79:ba:38:f7:26:3c:ee:22:68:a5:a6:a0:d8:d5:cb:
         2a:2d:68:d4:df:58:34:76:4f:fa:b9:25:fa:1b:b6:75:75:b4:
         6b:16:c8:b1:ea:46:d2:11:76:8a:2e:a4:a6:d9:23:d6:fd:e3:
         68:4f:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----