Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa
File:                     86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa (raw, json)
Hash identifier:          Iu8G4NW+dRbdcG4MoHbBmAJPMkgDHouV+fD+5ZJ9hF8=
Subject key identifier:   0D:45:C9:D8:79:96:69:C0:3F:9E:D7:2A:C9:D8:84:74:39:F5:C5:06
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1C10BC17EAA7BA736D186A04DBC67F53A77418CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa
Signing time:             Tue 14 Oct 2025 00:22:02 +0000
ROA not before:           Tue 14 Oct 2025 00:22:02 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:10:bc:17:ea:a7:ba:73:6d:18:6a:04:db:c6:7f:53:a7:74:18:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:22:02 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=bcf258199f8558f6edb2583232efb1d1e776843dfa151cf10a85b53989cd67ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:da:50:d2:93:c4:a8:4d:b8:65:90:1d:1f:
                    7a:21:44:c3:54:ed:c1:89:05:3e:3e:55:83:95:7a:
                    26:94:3c:57:af:11:1b:87:0b:44:14:fb:62:00:39:
                    84:d1:94:77:f8:90:d5:b3:fd:e1:ed:94:af:ad:e8:
                    86:bc:a6:bf:ee:ac:53:7a:f7:b3:1d:60:6b:c2:c4:
                    8a:0b:d6:2c:9f:e5:81:3f:1a:3f:7b:ca:9b:06:30:
                    9d:3b:60:5d:94:98:a2:a0:27:ff:4a:22:ed:12:3d:
                    eb:d1:5c:85:19:94:53:92:79:5c:f4:a3:81:83:ec:
                    14:19:b9:d0:68:5a:c3:86:97:79:28:59:c0:63:0f:
                    dd:f3:e1:77:f3:72:fc:6c:39:a2:b7:27:76:2d:08:
                    7a:88:bd:f1:7c:a4:c3:5c:e6:3c:1b:66:61:9f:e5:
                    bf:56:5c:30:40:cc:84:bb:d2:30:9c:8b:d2:fc:18:
                    77:77:04:d5:b0:19:5a:1e:fb:ec:7e:04:87:21:15:
                    0a:3f:ca:5f:5d:c9:c3:31:e2:b7:ce:80:53:cb:a2:
                    f9:e9:ab:fc:3f:6a:19:c9:02:fd:20:f1:9f:44:02:
                    66:24:83:43:a2:a7:09:10:7c:20:13:0f:ba:8c:d8:
                    40:86:c7:b0:cb:71:30:74:bf:4b:80:6a:0f:a2:ad:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:45:C9:D8:79:96:69:C0:3F:9E:D7:2A:C9:D8:84:74:39:F5:C5:06
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86f7c3f6-0ab1-49c6-8352-f942257d2f79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:26:93:79:b8:89:88:0c:09:d5:8d:1a:71:15:69:82:23:4e:
         5d:10:44:a8:82:a7:cf:a6:fa:e9:1f:6b:47:a8:6a:5d:a9:9a:
         e1:f7:9d:08:20:f1:2b:3e:55:8b:a3:93:f7:3f:07:7f:ee:7e:
         2b:d4:77:af:84:fb:4a:19:df:6a:fd:18:e4:79:5f:13:bb:94:
         27:e5:5b:0b:9f:62:b0:23:1d:cb:05:22:bf:d4:0e:51:88:a9:
         95:be:12:9e:e8:a1:ac:ba:15:19:32:7b:3b:ac:c6:03:7e:03:
         85:77:fc:c0:5e:91:18:69:57:f7:45:a4:82:58:10:70:ea:07:
         0f:43:44:c3:bb:71:5f:b8:b2:97:c3:c9:b9:bd:01:55:25:47:
         2b:04:65:49:7c:c9:a9:65:b7:e3:5b:6e:c0:8f:21:5d:c0:44:
         6b:a7:63:c1:6d:f5:96:e2:73:48:0b:8d:32:24:dc:8e:04:6f:
         dc:bf:1b:d5:44:17:71:aa:d2:64:47:75:a9:33:59:0b:64:83:
         a7:34:f4:16:79:a1:b1:96:ae:f2:e8:29:44:66:c5:9b:3d:f1:
         8b:1f:c1:6a:7b:62:6f:77:87:da:e1:a3:58:fa:ce:4e:a9:ab:
         d1:de:8b:6c:fe:08:9c:02:fd:fa:52:2f:d6:ef:0d:44:c4:bd:
         93:11:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----