Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa
File:                     4d44ff17-5bc1-4611-8a19-bea766316aca.roa (raw, json)
Hash identifier:          MFEzsgiL8fnyGFX62Y5EucB9RVX3zbfHNSU1EAl2ia4=
Subject key identifier:   C3:6F:D4:F6:DC:0B:6F:F1:96:E0:E1:31:05:41:CC:84:5A:2A:FE:58
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3B4696D93DA42AE21242BD72E3038F30103414
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa
Signing time:             Tue 14 Oct 2025 15:11:11 +0000
ROA not before:           Tue 14 Oct 2025 15:11:11 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.236.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:3b:46:96:d9:3d:a4:2a:e2:12:42:bd:72:e3:03:8f:30:10:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:11:11 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=c2776f6117d2ac442f18bd1f03d5a08f91e265232db2545a6e3fc265e387834c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:4d:4f:6b:1a:fb:25:ef:a6:c4:1d:38:9a:
                    dd:6f:93:0e:15:70:d6:2d:0e:93:ff:52:be:9d:df:
                    df:26:23:eb:fe:f0:79:3b:22:e6:01:54:64:3d:fb:
                    d5:45:5b:18:ae:3f:4f:a2:5b:d7:81:03:81:25:46:
                    47:32:61:5f:c3:a4:68:11:b4:fe:db:94:36:3a:af:
                    58:e7:fc:37:dd:a4:b0:10:aa:f1:e1:17:06:7e:87:
                    e4:fc:2d:0e:b1:e7:ac:4f:32:88:9a:d6:2c:cd:b3:
                    b2:dd:f3:94:d0:f7:a5:ea:92:d1:66:f6:d0:cc:cc:
                    91:16:57:e2:26:51:64:1a:c8:e6:0d:0d:3e:6a:49:
                    38:18:5d:41:12:f5:07:1d:57:bc:14:b6:f1:e7:df:
                    df:19:32:3e:33:64:ce:9c:fb:3a:92:49:53:2d:56:
                    cf:40:a3:36:f8:29:51:45:f8:4e:33:4b:eb:31:05:
                    e2:f7:e9:14:d1:77:b0:5f:48:f0:3a:f1:bf:db:9e:
                    b6:a4:4c:e7:f9:73:ec:de:ec:fe:dc:4d:9f:b1:5f:
                    89:c7:3c:60:2b:1c:05:1e:a1:2f:c6:fe:e0:bf:92:
                    74:01:03:f1:cd:13:f5:23:53:a0:20:bb:32:8f:96:
                    98:7f:b6:e2:6d:7c:97:10:bc:6b:8a:09:fd:bb:48:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:D4:F6:DC:0B:6F:F1:96:E0:E1:31:05:41:CC:84:5A:2A:FE:58
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:3a:c3:6f:03:ca:61:c3:8f:96:3c:25:b8:9d:da:33:67:78:
         e0:eb:93:e2:b2:c6:06:7b:2c:96:13:5d:f2:14:55:73:ca:e1:
         da:7d:4c:a4:29:8f:45:1d:5d:09:35:c2:11:e0:ff:47:19:d5:
         9b:f9:53:63:48:ea:99:39:3d:a4:3c:59:20:ce:16:a3:9b:53:
         64:84:f4:3a:81:14:e0:b8:09:ad:2d:0e:ed:be:f0:62:f6:0e:
         1b:ec:f1:ce:38:7e:d5:1b:71:d3:ee:06:d3:4a:d1:98:c2:63:
         a3:56:5e:d1:55:27:1b:33:a6:f5:dc:fb:59:71:17:db:31:11:
         ff:83:3a:c7:0f:dc:88:68:7c:c5:94:3f:10:fd:f0:3b:f6:5b:
         0d:11:52:cc:79:0c:13:74:35:ff:1e:34:e7:d7:90:5f:83:4e:
         f2:1b:d3:a4:84:ed:60:25:bf:12:91:37:59:37:8f:c0:9a:63:
         49:6b:69:4f:fa:60:3a:73:82:58:bc:f1:b5:ef:78:58:ec:4e:
         8b:ec:1b:b3:ed:18:12:6f:10:ea:c8:9f:99:87:8b:09:89:38:
         ff:67:84:99:bc:4a:17:08:a0:8a:b1:74:ce:83:15:11:4a:c4:
         3e:b8:64:b9:a6:d1:5a:f0:e4:bb:79:7e:58:90:a1:23:47:19:
         60:71:e0:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOztGltk9pCriEkK9cuMDjzAQNBQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTUxMTExWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjc3NmY2MTE3ZDJhYzQ0MmYxOGJkMWYwM2Q1YTA4Zjkx
ZTI2NTIzMmRiMjU0NWE2ZTNmYzI2NWUzODc4MzRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDwfU1Paxr7Je+mxB04mt1vkw4VcNYtDpP/Ur6d398mI+v+
8Hk7IuYBVGQ9+9VFWxiuP0+iW9eBA4ElRkcyYV/DpGgRtP7blDY6r1jn/DfdpLAQ
qvHhFwZ+h+T8LQ6x56xPMoia1izNs7Ld85TQ96XqktFm9tDMzJEWV+ImUWQayOYN
DT5qSTgYXUES9QcdV7wUtvHn398ZMj4zZM6c+zqSSVMtVs9Aozb4KVFF+E4zS+sx
BeL36RTRd7BfSPA68b/bnrakTOf5c+ze7P7cTZ+xX4nHPGArHAUeoS/G/uC/knQB
A/HNE/UjU6AguzKPlph/tuJtfJcQvGuKCf27SB8dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUw2/U9twLb/GW4OExBUHMhFoq/lgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkNDRmZjE3LTViYzEtNDYxMS04YTE5LWJlYTc2NjMxNmFjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsOwwDQYJKoZIhvcNAQELBQADggEBAHE6w28DymHDj5Y8Jbid2jNneODr
k+KyxgZ7LJYTXfIUVXPK4dp9TKQpj0UdXQk1whHg/0cZ1Zv5U2NI6pk5PaQ8WSDO
FqObU2SE9DqBFOC4Ca0tDu2+8GL2Dhvs8c44ftUbcdPuBtNK0ZjCY6NWXtFVJxsz
pvXc+1lxF9sxEf+DOscP3IhofMWUPxD98Dv2Ww0RUsx5DBN0Nf8eNOfXkF+DTvIb
06SE7WAlvxKRN1k3j8CaY0lraU/6YDpzgli88bXveFjsTovsG7PtGBJvEOrIn5mH
iwmJOP9nhJm8ShcIoIqxdM6DFRFKxD64ZLmm0Vrw5Lt5fliQoSNHGWBx4PQ=
-----END CERTIFICATE-----