Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa
File:                     a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa (raw, json)
Hash identifier:          8abaV8c4ZgtFVaYfutX5L+ZPinRpFxAoCmt4zpMLdZ4=
Subject key identifier:   B5:A0:22:45:E0:0E:8A:AE:08:D9:1B:BD:FD:02:F5:2E:85:7F:B9:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37E1B0AC451A0C845412389F779578FE549B8483
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa
Signing time:             Tue 14 Oct 2025 00:51:13 +0000
ROA not before:           Tue 14 Oct 2025 00:51:13 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e1:b0:ac:45:1a:0c:84:54:12:38:9f:77:95:78:fe:54:9b:84:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:51:13 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=a8c51e728cc0b42ced09fff7c58bbf2e8631e056cda43985750494e9ce587cbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:75:73:5e:48:61:5f:be:2a:6b:b1:4e:e3:
                    0d:98:3d:c7:bd:ce:83:59:de:08:ce:21:c4:80:00:
                    36:1f:bc:e2:c8:69:ca:6d:9d:8b:0f:35:a1:35:4f:
                    a7:8e:56:79:16:e5:df:9c:8b:b0:09:1b:2f:34:35:
                    ab:77:0d:71:a6:55:93:40:71:37:48:51:ca:e9:37:
                    52:02:59:3c:81:2f:2a:e1:75:b1:dd:b3:1b:ea:64:
                    3a:46:0a:2f:44:a7:f8:f0:f9:a0:3c:f7:4a:07:9a:
                    7b:13:01:9e:2d:21:01:29:0d:17:28:67:c8:d1:10:
                    74:df:a9:d2:7f:79:82:0b:d2:fe:fb:36:b0:70:a0:
                    03:e4:28:49:af:5f:d5:47:9e:45:26:58:f9:a8:dd:
                    04:a1:77:d4:1b:8d:9f:3a:ba:73:ec:1b:44:fa:5b:
                    88:93:eb:21:ef:a8:bf:c3:97:8f:20:b1:b7:5d:e8:
                    80:f3:06:58:83:65:15:51:1f:13:07:7f:9b:7c:53:
                    07:85:5a:d8:68:88:2e:c1:5d:90:2a:df:bf:a7:01:
                    13:97:cb:2e:25:b0:e1:50:38:d8:a0:29:1a:b2:a5:
                    1a:8b:40:29:27:cb:d8:5a:b4:98:22:10:5f:a1:97:
                    4c:e8:9a:1b:01:3c:12:c9:ec:40:38:6f:7d:b9:5a:
                    80:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:22:45:E0:0E:8A:AE:08:D9:1B:BD:FD:02:F5:2E:85:7F:B9:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0982b3d-85c6-445f-ac08-b1fb609d4aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:03:f1:81:d9:57:3c:06:b2:85:0e:8e:14:5a:07:d2:bf:9f:
         27:8a:02:b8:66:4b:c7:22:4d:21:aa:7d:b2:d3:d9:2c:b6:db:
         b1:18:f2:b0:65:2f:ca:5a:06:44:70:7b:f9:b1:24:c0:dc:f6:
         28:ce:cf:8b:21:3e:89:4e:77:14:4a:22:8f:e4:d1:7d:7a:5f:
         d2:44:db:8a:6b:10:6f:77:ea:0f:3d:d1:30:88:54:60:c0:55:
         17:60:35:78:fa:97:bc:fc:d0:3c:6d:5f:27:f4:f3:e9:ab:5c:
         f5:71:e4:64:c6:9d:1e:9f:77:0c:fc:69:61:a0:53:5a:aa:d3:
         7e:96:0d:b5:cd:04:c8:19:60:ac:1f:22:9a:f6:02:fe:56:47:
         2b:c8:90:67:84:42:c8:c0:d4:6e:76:51:a9:0d:57:5e:cc:85:
         bd:7f:63:7e:96:50:56:4a:40:90:31:7e:c8:1c:f3:58:e2:e2:
         f5:8d:46:52:f1:8e:51:00:38:33:f1:e2:49:cf:c5:31:43:dc:
         4a:71:b0:17:14:af:02:09:47:f7:dc:e9:dd:64:83:56:d4:8c:
         3e:56:2d:45:c9:21:18:57:d7:f2:5d:4e:28:5a:a4:59:70:16:
         90:dd:af:76:58:95:da:f2:f5:68:a5:f4:0c:8f:67:47:57:ef:
         02:6f:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----