Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94b41852-6a71-4917-86c1-136bffcf1ba3.roa
File:                     94b41852-6a71-4917-86c1-136bffcf1ba3.roa (raw, json)
Hash identifier:          r/QG68aDKY8ZynHsvqs/3be4XEbqs4EYMaA0IVXHl9s=
Subject key identifier:   FA:03:33:34:0A:9C:AE:D0:41:1D:0E:8D:7A:67:C6:AF:91:A1:A3:C6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05994EA9C83328212CCD3BB98449A423DA2591E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94b41852-6a71-4917-86c1-136bffcf1ba3.roa
Signing time:             Tue 14 Oct 2025 15:01:17 +0000
ROA not before:           Tue 14 Oct 2025 15:01:17 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:99:4e:a9:c8:33:28:21:2c:cd:3b:b9:84:49:a4:23:da:25:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:01:17 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=7295a0b3c0a4df85492a8b2bb9e074d894dfc9feb4b4f3a24ed9bf2b956d707b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:9c:12:a0:15:92:0d:a1:d6:df:91:83:ce:
                    52:ca:3c:04:82:a6:bb:3f:5b:8d:5a:3e:a8:01:fb:
                    95:c3:7c:d5:86:e6:de:11:5c:1a:94:e7:3a:6d:8d:
                    a1:b7:b9:04:9d:04:d8:f4:1c:88:54:f9:6b:fe:b8:
                    9b:2c:c3:6d:5b:dd:98:73:50:f7:d4:64:f9:80:7c:
                    e4:cb:35:83:fa:18:6a:ed:a5:73:95:91:4e:0d:06:
                    a3:26:b8:ab:7d:68:27:e9:ea:2d:59:9d:f9:62:05:
                    42:b6:9c:e4:cb:13:1a:87:fd:ac:20:6c:a4:f4:ce:
                    7b:09:cb:17:8c:18:17:6e:4f:87:8c:b0:0a:aa:83:
                    49:f5:01:00:ad:42:77:55:4d:0a:8e:c7:48:f0:03:
                    0c:90:54:96:48:7e:c4:a7:13:cd:b3:01:98:44:f4:
                    23:1a:75:f8:a7:41:24:16:18:0e:ab:fe:1e:55:57:
                    c1:5d:a4:2e:44:43:f4:39:f1:f5:ef:23:60:68:09:
                    b5:29:77:f5:3a:45:83:05:59:fe:44:dd:1b:f8:66:
                    0b:47:27:33:05:1f:a5:f8:44:7d:5d:95:d2:9b:86:
                    18:da:de:02:fe:38:a8:27:39:30:9f:90:48:3e:85:
                    dd:2b:f7:0c:da:02:7c:e8:34:d8:81:68:be:b5:5a:
                    fa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:33:34:0A:9C:AE:D0:41:1D:0E:8D:7A:67:C6:AF:91:A1:A3:C6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94b41852-6a71-4917-86c1-136bffcf1ba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d2:68:13:be:b8:4b:5c:47:4c:41:3b:30:fc:45:34:a6:b9:
         38:78:78:8d:0c:da:7a:0a:93:ac:34:20:7d:68:5b:80:d7:3d:
         0f:d5:52:e2:a2:13:19:c1:5c:2b:1b:b2:31:c4:0e:96:18:98:
         0a:bb:ab:11:24:69:5a:db:41:a4:7e:73:cc:2e:62:57:80:14:
         0e:b3:89:7c:7d:55:b3:fa:8b:47:9a:3a:01:b4:bf:a1:39:4d:
         28:7c:bd:d2:f6:5a:f7:75:74:05:a7:a2:66:d9:57:c2:9a:6d:
         a7:0d:12:e8:b9:42:b8:1e:2c:e5:c5:83:dd:69:3b:c6:c3:53:
         69:2c:ba:f3:4c:74:46:2f:d7:1e:84:19:ac:61:21:74:c0:85:
         2f:4e:ef:05:e5:07:d8:4e:15:42:c5:99:36:3e:76:05:c8:a9:
         ef:be:ee:d5:e2:f6:25:aa:e2:1a:29:7d:e4:29:15:14:7a:d5:
         a6:75:02:14:94:77:7f:25:df:b0:af:5d:36:ea:1a:d5:e6:b6:
         f9:f7:1a:d6:19:ed:27:b5:bd:97:eb:7c:66:e1:e9:00:22:9e:
         c5:87:eb:3e:45:ac:2c:8a:a4:ec:e3:8d:14:29:b1:61:c3:9e:
         fb:8a:e5:20:9a:76:20:0d:ef:d7:c3:26:5a:29:dc:f4:12:ee:
         6b:32:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----