Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c979c44c-1b96-466f-b964-90ce58f76e90.roa
File:                     c979c44c-1b96-466f-b964-90ce58f76e90.roa (raw, json)
Hash identifier:          s/CFoanbBaPL1+T3wB9xiJG/lP6hm9T4NxyUP91ubyU=
Subject key identifier:   03:82:00:09:BE:48:54:29:A1:88:79:6B:10:7F:92:89:A4:6C:39:5B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7429767FECD88BC2D383A1FDDB43D6E9B7C1D059
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c979c44c-1b96-466f-b964-90ce58f76e90.roa
Signing time:             Tue 14 Oct 2025 00:52:51 +0000
ROA not before:           Tue 14 Oct 2025 00:52:51 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:29:76:7f:ec:d8:8b:c2:d3:83:a1:fd:db:43:d6:e9:b7:c1:d0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:52:51 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=9f8ad5412a4c6a0302eb1620b456dea9a6e799cbe67d1efc39de91ef67caab2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:dd:11:dd:82:75:b6:30:3d:66:78:52:7e:
                    6c:f9:43:7e:b3:9c:5c:da:ef:c6:87:a9:a3:e7:7a:
                    b2:9f:42:d6:d2:ff:78:20:50:fa:47:37:2b:2b:38:
                    88:5a:fa:62:1f:2f:5c:4d:47:77:bb:04:1f:84:7d:
                    d2:e6:b6:b0:ed:bc:b2:27:b9:df:d9:0e:5d:2f:db:
                    57:6f:42:7c:ef:4e:7a:13:fd:3a:c3:a3:39:16:e7:
                    14:3b:4c:bd:94:01:7f:af:59:bc:fa:6b:b6:44:ba:
                    6e:1d:0c:88:97:1b:76:2b:3e:08:f6:3d:eb:e8:07:
                    55:1d:cd:ff:1a:44:08:66:50:a8:36:25:94:49:74:
                    9e:52:94:bd:67:fe:54:44:49:f8:72:f9:87:78:24:
                    d2:ae:b1:2b:14:7a:4f:55:17:71:45:06:1c:2f:0e:
                    68:4c:02:3c:b5:35:1c:4c:a8:87:d5:13:a1:bb:57:
                    a8:65:2e:a3:b5:f1:58:6b:a9:6f:b2:f2:ee:9e:34:
                    e1:28:a0:f5:0b:83:71:6d:c0:b9:47:45:a7:22:b6:
                    4f:45:fe:13:52:50:57:c9:d5:fa:a1:6c:a4:8d:3b:
                    7d:a9:4f:b9:7e:9f:fe:15:88:97:c1:cf:4e:53:14:
                    83:1a:b6:97:bb:b9:bd:88:1c:ba:1b:d7:80:32:81:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:00:09:BE:48:54:29:A1:88:79:6B:10:7F:92:89:A4:6C:39:5B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c979c44c-1b96-466f-b964-90ce58f76e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:19:04:e8:64:41:a4:26:37:e0:4f:1a:e6:95:e5:3e:86:09:
         0c:21:27:0f:b2:c5:a7:f7:fd:17:8b:15:f5:16:02:b5:42:c5:
         bf:a0:53:80:ad:14:d8:54:46:1d:58:53:20:b7:b4:78:a4:8e:
         09:3f:30:c3:c2:13:a4:00:03:be:39:99:a6:5d:e1:c3:76:e6:
         bf:05:07:55:bc:48:0a:11:9c:94:04:86:a6:38:b8:89:ec:bb:
         db:3e:59:cc:45:22:31:98:03:f3:92:72:bd:a7:b6:1b:94:2f:
         6d:57:8f:c1:c1:b0:09:14:31:74:bd:80:fc:31:30:70:86:dd:
         b6:6c:b9:68:2f:60:0a:c0:7c:37:82:a4:25:02:73:e6:05:c1:
         fb:ea:63:e6:c0:93:f3:21:68:0d:d1:dc:05:46:93:24:4a:67:
         c2:69:4a:3d:12:ce:c3:fc:3c:29:d8:af:90:35:67:94:6f:5d:
         e4:13:88:03:6a:b2:dc:d0:10:f9:a7:5f:45:5c:7d:02:d8:85:
         31:69:ed:c7:19:c6:81:86:10:d5:a1:04:e0:61:d5:9c:27:dc:
         6b:c3:f6:db:79:58:61:36:1c:e8:fb:c8:03:52:dc:82:70:b2:
         19:29:51:6f:48:5d:f3:9b:59:d0:cb:d5:e8:40:7f:02:6d:78:
         5a:f5:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----