Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9fbe26a-d82d-4ffc-b142-53afbaa6c461.roa
File:                     f9fbe26a-d82d-4ffc-b142-53afbaa6c461.roa (raw, json)
Hash identifier:          5ZMP6MTf7OS4d9SFoNyu7f1URnC5+TgOIrYX2xmO6os=
Subject key identifier:   C4:BA:20:04:BE:02:43:63:25:FA:3B:7B:51:0C:2A:18:AE:C9:F9:18
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6A7621F9D6C955378AA035E51C7ED8FB634B3FA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9fbe26a-d82d-4ffc-b142-53afbaa6c461.roa
Signing time:             Tue 14 Oct 2025 15:21:19 +0000
ROA not before:           Tue 14 Oct 2025 15:21:19 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        130.176.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:76:21:f9:d6:c9:55:37:8a:a0:35:e5:1c:7e:d8:fb:63:4b:3f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 15:21:19 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=2ca61e6c29feb02a65e9a3a5e7d7e26f14492c98455f505f9aea55ff0c92c826, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4f:5c:b2:be:9d:de:a2:83:ef:9e:c5:30:40:
                    b2:a8:65:04:ce:4a:ee:89:56:b0:2d:03:b2:41:37:
                    05:69:76:a7:2f:51:53:6f:c5:02:6b:fd:11:fb:8a:
                    35:57:49:d4:73:17:f2:a0:fe:47:14:c2:3b:6b:bc:
                    42:67:9e:40:ba:a0:66:7f:15:43:3c:09:e2:69:9f:
                    b3:3f:10:4c:90:02:71:0f:ff:1b:15:7f:21:2b:fd:
                    20:3c:7c:56:c6:c2:e0:28:e3:ec:83:f9:8c:e4:7b:
                    9c:4c:d3:b3:98:1b:b1:e4:c8:54:e9:97:73:3d:48:
                    f9:f0:46:e2:44:4e:4f:ec:49:13:47:d8:a3:da:bb:
                    4a:ee:48:d0:6f:9c:ee:04:c3:a3:6f:24:34:73:07:
                    d7:ab:0c:23:30:e7:78:57:7b:27:5e:fb:6f:af:8e:
                    fc:66:82:4b:8c:73:bd:d3:b0:d1:e5:d7:0f:bc:e9:
                    69:18:5d:4d:c6:c4:45:2b:79:0d:47:d7:20:22:26:
                    22:77:81:9e:d0:d8:40:4c:95:97:73:22:a1:24:c7:
                    0d:0b:b4:20:ad:76:db:e5:ff:f3:13:28:1f:12:83:
                    1c:e5:cb:96:35:4b:2d:6a:ff:8f:09:26:81:f3:aa:
                    78:0c:d6:b5:55:8e:e8:9b:d9:6e:87:b6:98:ea:63:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BA:20:04:BE:02:43:63:25:FA:3B:7B:51:0C:2A:18:AE:C9:F9:18
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9fbe26a-d82d-4ffc-b142-53afbaa6c461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.176.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:1d:db:d2:97:75:93:4a:74:70:05:ea:38:25:78:c0:02:
         a7:b0:3b:2b:f0:07:09:4d:e9:5a:eb:b4:e8:23:c8:60:28:2f:
         f8:e5:a9:77:46:d0:45:66:98:fa:b8:6e:ef:74:b1:43:0f:04:
         2e:2f:2f:36:62:83:52:c8:ed:f2:31:08:e3:57:fa:c3:7a:aa:
         b5:e9:fe:4d:29:46:27:6a:b3:c5:53:5c:85:5c:a3:1d:1b:15:
         60:8c:0c:5b:d1:b5:44:c4:d1:50:6a:af:7c:3f:17:50:31:d0:
         bb:f4:f6:05:5d:50:aa:d8:66:3b:6e:64:78:89:e6:ed:71:cc:
         d0:d5:d3:93:99:d5:37:69:b3:5e:5e:19:84:02:89:a0:bb:d4:
         bf:bb:5d:f2:d1:c4:ce:54:80:91:38:e0:52:24:ae:41:e3:55:
         21:e0:2f:39:3d:e4:d0:60:69:d2:23:ef:14:5a:de:af:fd:a3:
         96:e4:95:ce:9f:d5:f3:6f:64:b8:89:de:fe:1d:28:f8:eb:e2:
         7a:0d:c9:36:c8:4b:b6:41:ea:46:a0:15:f5:78:ed:0b:99:24:
         42:87:0c:01:66:97:dc:c8:e1:c7:76:43:b2:97:e9:46:3e:94:
         70:a6:24:11:e8:4c:cd:bc:9f:70:2c:56:37:34:7b:71:e7:cd:
         a7:e5:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----