Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
File:                     8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa (raw, json)
Hash identifier:          EyZnI/i4IBD0tcswvWUSenqMW2t8H6Ab5jsGznC+ohU=
Subject key identifier:   99:D2:AC:AB:F6:98:66:49:A9:85:26:CE:AE:E2:D3:5F:02:14:B4:D6
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       3CBE66117EA2AF509F37C961B90EF40AB0A4F82D
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa
Signing time:             Sat 05 Apr 2025 00:11:11 +0000
ROA not before:           Sat 05 Apr 2025 00:11:11 +0000
ROA not after:            Sat 10 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc7:2840::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:be:66:11:7e:a2:af:50:9f:37:c9:61:b9:0e:f4:0a:b0:a4:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Apr  5 00:11:11 2025 GMT
            Not After : May 10 23:59:59 2025 GMT
        Subject: serialNumber=6ad339608c03130adc055557ea14d375419bd6266d4a280c465f835499fcb93a, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:0b:6b:4d:dc:76:88:84:6c:c8:02:47:a0:
                    7e:d9:75:01:c2:a0:12:23:5f:b0:0e:8e:5d:cb:9e:
                    c9:94:e9:8b:1f:93:12:70:f8:a5:18:c5:e7:75:2e:
                    6c:cf:4b:67:be:a4:73:f4:76:0b:99:4c:af:78:f2:
                    c9:75:fc:70:72:60:33:c4:1a:fe:ef:c2:ea:65:1c:
                    04:dd:11:4e:c3:3e:35:92:57:ce:f7:da:12:f1:f3:
                    0d:73:a9:05:72:6a:e9:de:f7:cf:93:55:d3:b4:da:
                    5c:04:af:85:ea:4a:83:34:37:42:8e:d3:6b:03:9e:
                    dc:f5:12:08:2d:7d:25:a6:51:2c:23:ad:9d:00:d7:
                    ce:8b:3d:43:9d:3a:01:19:cc:56:e6:0f:b6:88:c7:
                    a2:54:ba:4a:c4:dd:fd:91:8a:4f:ec:87:0d:c7:9c:
                    de:79:c6:88:f8:67:f3:b9:fa:28:4f:41:3c:8c:5b:
                    af:75:83:ea:93:3d:a3:68:86:07:66:81:1b:0b:08:
                    92:62:10:20:ad:d9:b7:1a:98:12:07:a2:16:78:a3:
                    16:54:64:b9:27:1e:06:85:de:6d:33:47:c4:52:c4:
                    f0:f4:c0:c3:29:82:dc:d3:e0:c3:10:7c:18:ef:f8:
                    d1:33:17:77:9d:2d:ce:bb:3b:9d:d2:74:39:33:28:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:AC:AB:F6:98:66:49:A9:85:26:CE:AE:E2:D3:5F:02:14:B4:D6
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/8208c1b9-c235-4019-8ac2-a56c3cd1c2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc7:2840::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:12:b8:d8:d0:f5:b8:20:ac:1c:e3:e6:91:47:7c:af:2b:27:
         96:27:07:ca:59:d7:6a:35:e5:19:44:dd:06:86:b8:a2:93:91:
         cf:af:44:cd:b1:09:17:f1:aa:a8:a1:ee:c3:d8:5f:a9:3f:24:
         d0:c8:c4:d4:63:62:48:9e:38:8f:ba:4d:fb:45:c9:5f:bd:68:
         66:ef:08:13:0d:8e:6f:1f:94:f3:4a:ba:b4:19:6b:c4:93:e0:
         12:ab:0b:6e:bb:b4:f7:f1:02:8a:5e:a2:41:17:93:7c:3b:c3:
         2f:ed:27:d5:18:3e:79:3f:36:38:74:05:9d:90:d5:9c:45:82:
         58:a0:e8:d5:63:88:94:07:a5:2c:7b:18:d9:98:5a:ff:1c:fb:
         c5:0c:79:56:f9:79:5b:c2:79:75:3f:24:5b:01:af:30:74:63:
         49:6c:36:b2:45:71:90:4d:58:9b:33:e4:f1:ff:cb:c6:4f:3d:
         b2:1e:ae:35:b8:8f:ab:80:a3:8b:10:8d:88:58:a8:f4:8b:d9:
         63:cc:5e:14:cb:82:c8:be:bb:f6:8c:38:a1:b8:f6:5d:e1:a1:
         a5:96:0b:c0:60:57:fc:f4:02:21:52:f2:2a:4b:26:03:90:12:
         8a:53:4a:9b:07:d4:da:54:a4:71:fe:1f:78:88:20:f2:f8:39:
         c7:1b:aa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----