Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee8045f5-cfdc-4179-a517-cf570909521d.roa
File:                     ee8045f5-cfdc-4179-a517-cf570909521d.roa (raw, json)
Hash identifier:          YVb2tTOtq5LZH6+6hapuYOJRk4gljI44wKel4No30cM=
Subject key identifier:   75:71:D4:A8:26:05:36:15:5D:AD:11:C5:53:B7:CC:FE:93:F4:E2:1A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1703433D63A4DDB13E54B2667B619E8FB2540C3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee8045f5-cfdc-4179-a517-cf570909521d.roa
Signing time:             Tue 14 Oct 2025 00:41:12 +0000
ROA not before:           Tue 14 Oct 2025 00:41:12 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:43:3d:63:a4:dd:b1:3e:54:b2:66:7b:61:9e:8f:b2:54:0c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 00:41:12 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=37a7dc7fd854f1403eb3586a56febb4ec8b5578e6f1a3c00295afbb3d62380b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:bc:96:f0:c7:3b:9c:33:62:64:80:21:7f:
                    3f:c8:43:e5:bd:14:f5:7b:28:5b:f4:39:5c:24:c9:
                    3a:8f:8e:d7:5e:c4:96:5d:0a:49:aa:13:60:f5:d7:
                    cc:3d:54:b8:f5:04:2a:d7:0e:c5:95:ae:74:da:6d:
                    08:fb:e9:f9:73:9e:1d:9e:07:3e:67:69:a9:65:9f:
                    c2:c0:be:0d:eb:f6:50:7e:0c:9b:52:1d:11:00:57:
                    ef:e9:7e:db:eb:23:10:b8:6b:df:1f:b3:f0:13:4b:
                    6c:3f:14:9f:ac:d7:ff:1a:a9:29:9c:81:ac:56:d0:
                    30:2a:3a:36:bc:85:cf:09:da:b6:97:24:d9:ad:3e:
                    84:57:f8:12:1d:03:8b:85:7e:3e:bb:7c:09:6b:54:
                    74:3c:71:0d:96:12:02:d8:18:ea:12:75:68:5e:33:
                    2b:d0:f9:d5:90:9f:a7:55:3a:dc:c6:72:9f:80:e5:
                    22:74:49:89:a6:35:40:91:8f:8f:60:e9:d1:7b:3e:
                    65:87:87:28:7a:55:7a:7b:0c:62:a6:32:96:3a:c9:
                    78:c4:37:3e:c5:b1:f8:14:df:f8:b9:7f:20:06:8a:
                    50:87:ee:5a:83:7d:53:33:96:41:4e:b3:7b:37:1c:
                    07:11:a3:ac:d9:bd:9c:f6:24:31:47:22:20:e0:9f:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:71:D4:A8:26:05:36:15:5D:AD:11:C5:53:B7:CC:FE:93:F4:E2:1A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee8045f5-cfdc-4179-a517-cf570909521d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:44:1f:95:5c:64:ad:61:75:79:29:82:e9:dc:b5:a8:50:ef:
         36:5e:fb:58:89:83:45:bd:00:aa:43:87:bd:5c:07:32:8d:aa:
         98:2a:1d:b9:f3:42:1c:e7:ca:ee:ec:60:4e:7b:14:e0:66:6b:
         81:f6:7b:25:07:2a:85:03:1e:f2:21:1e:b5:b0:ef:bb:91:7f:
         27:21:86:00:d5:de:68:16:f1:43:69:f4:20:21:00:26:5c:ea:
         91:ab:28:e2:13:55:1e:be:aa:71:cc:eb:b6:0f:26:d8:c3:a2:
         64:fc:e7:11:88:ea:d1:c4:9a:80:57:0e:a5:87:76:3d:06:8a:
         72:f3:2c:65:d9:8a:1d:ad:c4:a8:c1:3c:4a:60:b4:44:ed:c6:
         04:c1:5d:dd:12:3e:5e:88:24:61:b1:d9:11:a7:1d:a7:0e:28:
         df:9e:9c:a2:80:57:b1:ae:ae:5c:5c:7d:18:39:c6:1b:2d:6c:
         c6:c8:a3:03:75:68:6b:08:fc:f2:d7:15:91:ec:17:b4:72:2f:
         5c:5e:09:8a:2e:6e:f6:12:c0:6a:d8:4a:ee:8d:cf:dd:50:fd:
         16:75:fb:9a:24:4c:79:3c:f1:ea:b9:84:38:3b:e6:02:dd:06:
         58:ad:b4:e8:5c:db:63:a4:28:0b:b8:01:6e:4f:69:67:8e:b0:
         9d:88:f9:0b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFwNDPWOk3bE+VLJme2Gej7JUDDwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDA0MTEyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzN2E3ZGM3ZmQ4NTRmMTQwM2ViMzU4NmE1NmZlYmI0ZWM4
YjU1NzhlNmYxYTNjMDAyOTVhZmJiM2Q2MjM4MGIyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC09LyW8Mc7nDNiZIAhfz/IQ+W9FPV7KFv0OVwkyTqPjtde
xJZdCkmqE2D118w9VLj1BCrXDsWVrnTabQj76flznh2eBz5naalln8LAvg3r9lB+
DJtSHREAV+/pftvrIxC4a98fs/ATS2w/FJ+s1/8aqSmcgaxW0DAqOja8hc8J2raX
JNmtPoRX+BIdA4uFfj67fAlrVHQ8cQ2WEgLYGOoSdWheMyvQ+dWQn6dVOtzGcp+A
5SJ0SYmmNUCRj49g6dF7PmWHhyh6VXp7DGKmMpY6yXjENz7FsfgU3/i5fyAGilCH
7lqDfVMzlkFOs3s3HAcRo6zZvZz2JDFHIiDgn/ARAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdXHUqCYFNhVdrRHFU7fM/pP04howHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VlODA0NWY1LWNmZGMtNDE3OS1hNTE3LWNmNTcwOTA5NTIxZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsFswDQYJKoZIhvcNAQELBQADggEBAM9EH5VcZK1hdXkpgunctahQ7zZe
+1iJg0W9AKpDh71cBzKNqpgqHbnzQhznyu7sYE57FOBma4H2eyUHKoUDHvIhHrWw
77uRfychhgDV3mgW8UNp9CAhACZc6pGrKOITVR6+qnHM67YPJtjDomT85xGI6tHE
moBXDqWHdj0GinLzLGXZih2txKjBPEpgtETtxgTBXd0SPl6IJGGx2RGnHacOKN+e
nKKAV7GurlxcfRg5xhstbMbIowN1aGsI/PLXFZHsF7RyL1xeCYoubvYSwGrYSu6N
z91Q/RZ1+5okTHk88eq5hDg75gLdBlittOhc22OkKAu4AW5PaWeOsJ2I+Qs=
-----END CERTIFICATE-----