Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fdeda4f-6156-4d65-945e-f8e31add3117.roa
File:                     2fdeda4f-6156-4d65-945e-f8e31add3117.roa (raw, json)
Hash identifier:          dSFYMn8zTR3wCMxzTltr5cnh+3jCjHhM1ac2B/5TR9M=
Subject key identifier:   08:AC:19:61:1E:DE:85:AA:D5:8F:A0:44:2D:C1:74:33:57:3E:EC:13
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DDC748F5722D21629EAB99EAC63DE60FAA4A81B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fdeda4f-6156-4d65-945e-f8e31add3117.roa
Signing time:             Tue 14 Oct 2025 00:41:14 +0000
ROA not before:           Tue 14 Oct 2025 00:41:14 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:dc:74:8f:57:22:d2:16:29:ea:b9:9e:ac:63:de:60:fa:a4:a8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:41:14 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=e92242accdca72b984a53f0c61c0b80a6ecdea13350c734055f3737c99a6f318, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:06:5f:d0:da:f5:31:a7:16:ee:c8:3b:5a:
                    74:ad:9b:85:ed:db:fe:69:59:52:ce:cf:d8:9b:92:
                    0a:55:ed:58:de:1f:13:37:30:42:52:c8:21:68:12:
                    21:38:8d:2e:72:b9:94:9a:c0:6e:8c:27:63:f9:00:
                    c7:6a:b2:1a:93:f4:ea:cf:3b:67:63:d9:39:34:c6:
                    53:22:05:d5:f8:59:90:b7:91:14:c7:59:8e:53:98:
                    ae:d5:76:81:99:46:c0:bf:1e:9f:a1:5f:fd:b6:2a:
                    4d:e3:2b:28:96:b1:43:f7:00:8f:2e:f0:fd:94:84:
                    5d:f6:61:1b:74:3a:87:bd:a8:2b:da:4b:a1:0b:69:
                    79:37:2f:6b:63:17:e8:e5:7d:c8:45:3b:fb:31:dd:
                    fd:b1:b2:33:3d:55:40:2c:c9:89:2d:7f:bc:fe:bb:
                    a1:a2:20:6e:32:9e:07:6e:b5:21:07:1a:48:6d:ed:
                    63:43:49:e8:0f:a7:1d:04:25:66:27:d1:aa:2d:03:
                    20:2e:73:a5:07:a7:48:41:ee:09:d9:f5:4f:db:22:
                    c1:fc:12:a7:fb:ee:43:8e:d0:f0:52:ff:2b:b5:08:
                    46:02:19:d3:aa:6f:e7:a5:f7:cc:44:83:20:68:df:
                    73:19:bc:4f:42:da:c3:ab:68:4d:17:8b:7e:52:7d:
                    44:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:19:61:1E:DE:85:AA:D5:8F:A0:44:2D:C1:74:33:57:3E:EC:13
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2fdeda4f-6156-4d65-945e-f8e31add3117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:15:67:46:b4:55:f1:ea:d8:ee:2a:7e:19:45:bf:a9:d2:
         b7:7a:65:be:cb:85:f3:9f:42:35:e1:66:af:66:19:83:ac:37:
         e6:52:af:ef:d0:74:e8:43:ad:9e:e4:3c:f1:8c:c5:57:84:d2:
         5c:88:c3:cf:3a:0a:f1:df:f3:bf:56:e5:dd:d7:b9:e1:67:fb:
         28:d5:71:ef:c0:0f:f9:ae:18:fc:a9:32:1a:e6:54:e4:00:80:
         f4:5b:02:f4:12:d4:35:6e:46:2d:3d:c4:49:c8:66:60:38:10:
         34:e9:6e:65:ed:1f:8e:c9:f5:4d:fa:c0:e2:a1:3b:4d:04:13:
         5c:35:d2:9d:fe:c1:13:ef:73:4e:8f:59:69:f3:e0:cb:23:99:
         48:a3:bb:0a:62:82:2d:52:cf:2c:3e:63:b6:b2:83:2b:7c:06:
         73:4a:49:78:a3:85:40:7c:95:4d:70:8a:f6:4a:4c:5d:81:c9:
         89:1e:ac:02:16:e8:83:54:15:a8:d3:c7:37:9c:5e:56:0f:cb:
         c7:cd:9f:1d:52:63:8c:20:90:8e:65:ad:07:bb:34:a9:2e:2d:
         da:89:b1:7d:ed:69:cc:66:a4:de:e9:94:1a:42:70:00:34:a3:
         e5:34:e0:52:be:58:81:a9:9e:2a:80:63:66:ff:fc:e1:79:c7:
         d5:3b:ad:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----