Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa
File:                     b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa (raw, json)
Hash identifier:          S0CCZcAR0ELwI088nta4X8M+vRX2Nd0txGFD7HfJq9k=
Subject key identifier:   C2:F8:F5:3B:3F:1C:22:5C:84:D8:91:88:57:54:42:61:C4:9E:88:EC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       15AC2E19FA7E1C30A130E15A9119C452AA97F51F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa
Signing time:             Tue 07 Oct 2025 00:11:49 +0000
ROA not before:           Tue 07 Oct 2025 00:11:49 +0000
ROA not after:            Tue 11 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        136.18.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ac:2e:19:fa:7e:1c:30:a1:30:e1:5a:91:19:c4:52:aa:97:f5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  7 00:11:49 2025 GMT
            Not After : Nov 11 23:59:59 2025 GMT
        Subject: serialNumber=b814bd504c95855ba990412199f8eb5b3546e022c12e91f09820452f13372442, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:82:4c:1d:94:b0:7e:ac:e4:f9:dd:36:49:
                    38:b7:b3:c2:28:1c:e4:7f:bb:64:b2:93:2d:9f:24:
                    b4:f2:cc:79:10:2c:4d:50:f0:81:70:20:bf:17:89:
                    13:1f:d4:4b:50:f9:41:ab:34:f6:31:e1:a0:12:a4:
                    0d:5b:be:55:44:c3:c6:b4:11:41:52:d1:8f:af:d4:
                    25:6f:e6:f6:d3:ae:9b:85:c4:43:87:f4:fb:77:df:
                    a0:4e:8d:18:06:75:19:a4:7d:46:ae:78:14:00:b7:
                    55:f0:2a:24:f4:18:74:98:84:67:ed:df:37:14:59:
                    a4:a1:75:f6:52:f6:cb:36:ac:ab:ba:c9:b4:cf:5e:
                    94:e5:dd:a7:1d:6b:a5:55:b8:d4:06:23:17:b5:b1:
                    72:40:5a:b9:18:2a:95:ff:b8:9f:f6:8f:f2:16:41:
                    ea:f8:ea:c4:a4:79:8a:5a:cf:9e:ca:9b:8d:43:e2:
                    72:e9:5b:28:b9:b2:4f:b3:ec:56:1f:8e:71:84:c6:
                    8b:0b:d0:69:ee:cb:54:35:2c:4a:d8:01:74:f5:ba:
                    86:a9:07:5e:61:39:b9:6c:6f:f1:48:76:61:92:9b:
                    81:3b:5e:65:4a:7d:1f:6b:04:3f:9a:0c:e7:70:28:
                    c3:76:2b:70:d7:73:56:2e:76:98:b0:f5:bf:ab:22:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F8:F5:3B:3F:1C:22:5C:84:D8:91:88:57:54:42:61:C4:9E:88:EC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7f35684-6e69-42e2-8bd9-fcd1a07f79ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.18.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:51:a7:fb:f7:70:b5:f2:0e:89:70:c9:fd:5a:0d:df:82:8e:
         f8:f3:80:7f:81:6b:13:90:ae:7e:4a:a6:1b:ed:89:35:a2:9e:
         f1:7c:78:51:e4:ea:64:8a:c5:4c:e4:84:72:ca:04:44:6a:79:
         aa:e0:dc:54:69:93:aa:d0:99:cc:40:28:1e:07:b1:b5:be:8b:
         b5:57:40:1c:49:fe:38:ea:2a:d0:b1:9e:10:c3:38:ea:99:80:
         68:d0:0c:04:73:b7:70:f1:90:11:70:02:e3:9a:60:5d:29:8e:
         af:07:58:ec:65:74:5d:ba:57:41:50:8a:5d:37:a2:44:eb:f3:
         03:ff:d0:7f:00:39:d6:c3:c2:78:38:f2:82:e6:03:21:f2:4f:
         35:ca:52:f2:a2:f1:38:da:fc:d4:40:a5:1b:98:0c:db:d9:68:
         dd:85:25:d3:8e:17:59:c1:6b:40:d6:ed:10:92:67:9b:4b:d0:
         bf:6c:18:49:e6:7e:71:4c:5b:ae:16:1f:a7:ce:14:57:0b:c4:
         39:65:01:a6:f4:5a:0d:b6:94:84:55:e2:7a:d1:73:58:f1:2a:
         07:56:79:37:d2:d2:bd:6e:6b:1b:69:07:b7:7b:0a:81:6f:db:
         ec:46:51:31:a2:b7:dd:67:1b:75:22:89:91:57:74:ce:61:5c:
         1b:1f:f4:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFawuGfp+HDChMOFakRnEUqqX9R8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA3MDAxMTQ5WhcNMjUxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BiODE0YmQ1MDRjOTU4NTViYTk5MDQxMjE5OWY4ZWI1YjM1
NDZlMDIyYzEyZTkxZjA5ODIwNDUyZjEzMzcyNDQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8BIJMHZSwfqzk+d02STi3s8IoHOR/u2Syky2fJLTyzHkQ
LE1Q8IFwIL8XiRMf1EtQ+UGrNPYx4aASpA1bvlVEw8a0EUFS0Y+v1CVv5vbTrpuF
xEOH9Pt336BOjRgGdRmkfUaueBQAt1XwKiT0GHSYhGft3zcUWaShdfZS9ss2rKu6
ybTPXpTl3acda6VVuNQGIxe1sXJAWrkYKpX/uJ/2j/IWQer46sSkeYpaz57Km41D
4nLpWyi5sk+z7FYfjnGExosL0Gnuy1Q1LErYAXT1uoapB15hOblsb/FIdmGSm4E7
XmVKfR9rBD+aDOdwKMN2K3DXc1Yudpiw9b+rIuSpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwvj1Oz8cIlyE2JGIV1RCYcSeiOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3ZjM1Njg0LTZlNjktNDJlMi04YmQ5LWZjZDFhMDdmNzliYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACIEoIwDQYJKoZIhvcNAQELBQADggEBAHJRp/v3cLXyDolwyf1aDd+Cjvjz
gH+BaxOQrn5KphvtiTWinvF8eFHk6mSKxUzkhHLKBERqearg3FRpk6rQmcxAKB4H
sbW+i7VXQBxJ/jjqKtCxnhDDOOqZgGjQDARzt3DxkBFwAuOaYF0pjq8HWOxldF26
V0FQil03okTr8wP/0H8AOdbDwng48oLmAyHyTzXKUvKi8Tja/NRApRuYDNvZaN2F
JdOOF1nBa0DW7RCSZ5tL0L9sGEnmfnFMW64WH6fOFFcLxDllAab0Wg22lIRV4nrR
c1jxKgdWeTfS0r1uaxtpB7d7CoFv2+xGUTGit91nG3UiiZFXdM5hXBsf9C8=
-----END CERTIFICATE-----