Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954c49ec-13bf-4fce-b81f-7b6368806b64.roa
File:                     954c49ec-13bf-4fce-b81f-7b6368806b64.roa (raw, json)
Hash identifier:          3yiB1xK6PcnuPgQmIbLX3C61rIuSgdpN7Mz/YyCWB9g=
Subject key identifier:   C5:6C:21:58:D1:19:85:28:A0:7F:D2:1F:1A:AD:A7:13:A9:B3:ED:C0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BD50D8C4EE98D338653B824F932AD24053087
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954c49ec-13bf-4fce-b81f-7b6368806b64.roa
Signing time:             Tue 14 Oct 2025 15:21:20 +0000
ROA not before:           Tue 14 Oct 2025 15:21:20 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d5:0d:8c:4e:e9:8d:33:86:53:b8:24:f9:32:ad:24:05:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:21:20 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=be501a1a706f89e9da481db108eb5ab71a8f8e103f3dcb1cf31d98acb36ee194, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:79:8c:b1:60:1f:76:c7:69:f0:0b:b8:65:f5:
                    22:f4:f7:22:4d:3f:54:82:b7:58:16:a3:b6:fd:70:
                    86:0a:41:48:31:f2:af:de:d8:47:b6:81:d4:83:8f:
                    c2:bb:3c:95:97:b8:b4:1f:da:9e:ca:94:5e:6e:ec:
                    dd:68:57:e2:b0:77:70:18:4e:91:1a:ce:15:f9:67:
                    79:0f:2d:de:b8:cd:85:7f:14:94:d7:3f:6f:f6:51:
                    a6:68:ee:e7:36:95:6f:22:e8:59:f9:fd:d3:35:1d:
                    bb:c1:f2:d3:9b:50:0c:2d:1d:03:b9:60:64:67:31:
                    ef:ee:5b:99:aa:f1:73:64:46:43:a7:3c:9a:27:5b:
                    7d:b8:3c:19:db:bb:4b:cf:40:79:ec:b6:ce:c0:4f:
                    a4:65:62:8a:71:46:03:b4:cd:bb:1a:7e:d8:2d:4e:
                    16:38:75:58:35:fc:4a:3e:bd:27:68:8c:8b:81:a7:
                    3d:f5:3a:d6:32:ca:a2:dd:a7:5d:b1:87:95:33:0b:
                    f4:dd:e3:45:e2:fc:1f:f6:26:f8:42:63:b4:0f:f1:
                    bf:22:f5:bc:46:ee:97:68:2f:d0:28:b3:aa:7c:4b:
                    61:54:93:4e:8a:d2:17:05:df:d6:1b:b4:6d:0e:c5:
                    b1:21:68:63:e5:b4:1a:3e:5f:da:d7:0c:aa:ec:00:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6C:21:58:D1:19:85:28:A0:7F:D2:1F:1A:AD:A7:13:A9:B3:ED:C0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/954c49ec-13bf-4fce-b81f-7b6368806b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:7d:da:b2:31:85:42:2e:83:de:7e:81:55:f3:ca:f3:cd:
         90:7c:7b:92:d6:83:c1:76:48:35:b4:65:06:25:3d:10:2e:39:
         38:bc:7e:30:3f:09:6a:30:19:69:4c:25:b4:82:a0:81:ae:67:
         14:69:10:6f:29:d2:3a:f0:7f:6c:d2:f1:14:93:fa:90:de:26:
         e5:6c:0b:70:64:7f:f2:fe:fb:cf:cc:92:db:fd:a5:9d:3e:ab:
         8b:ce:68:c1:61:27:c1:7b:a9:ab:74:31:9e:b1:93:e0:59:a3:
         71:b5:06:e9:e5:6a:d7:33:d4:dc:c1:db:fb:6c:9e:f3:92:b8:
         19:ad:29:5d:be:fa:e4:a9:62:f1:6c:7e:5d:17:49:a9:4d:33:
         29:e5:24:c8:b1:4c:99:1f:76:4e:61:ea:31:e4:56:59:fd:d7:
         7b:a8:3c:b1:1f:62:d3:c4:d2:30:e4:69:9a:f7:a7:8c:0d:27:
         01:cf:4f:84:18:00:6a:49:c5:df:d1:0f:fd:27:25:62:a2:50:
         69:cc:06:90:ac:85:15:9c:15:df:0f:00:39:63:f7:89:ee:b4:
         9f:e0:69:2e:2e:ef:d8:15:b7:c1:d0:2c:af:a4:e2:78:73:f7:
         69:de:05:00:a9:e8:5a:70:88:d7:d5:96:89:c1:08:2a:3a:f2:
         f9:4d:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----