Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa
File:                     a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa (raw, json)
Hash identifier:          CjaJSHjLYPd38bf5qLw23hyqtilu6iekklQD9kTqeqI=
Subject key identifier:   E3:F5:B7:CF:6C:87:38:09:69:58:CB:CD:7E:19:E0:1F:D3:84:F3:67
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       6C9A49392BBFFA392E6A421E4E6A268C35FE572D
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa
Signing time:             Sat 05 Apr 2025 00:21:20 +0000
ROA not before:           Sat 05 Apr 2025 00:21:20 +0000
ROA not after:            Sat 10 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9a:49:39:2b:bf:fa:39:2e:6a:42:1e:4e:6a:26:8c:35:fe:57:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Apr  5 00:21:20 2025 GMT
            Not After : May 10 23:59:59 2025 GMT
        Subject: serialNumber=c5a24d74779070cfa2008ed4a250d3f2813636afe157389a234bb12f57e14419, CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:38:65:f2:8b:56:08:5c:d4:6a:eb:e5:20:
                    bd:5b:99:d1:2d:cc:62:a6:59:3f:05:bb:29:f4:4a:
                    81:94:e9:4a:55:f9:75:74:ef:a4:f5:c3:6f:64:06:
                    81:8f:62:0a:13:ad:1f:0b:06:36:35:57:20:60:31:
                    a0:11:38:f8:d7:6d:f1:2e:c1:2c:09:ed:e8:f9:c2:
                    90:63:6c:21:39:e8:84:a3:a2:94:6a:a5:4a:14:2c:
                    5e:a2:c4:0c:90:41:15:f6:39:9d:16:9c:43:40:b0:
                    e3:40:b3:af:ed:24:d4:25:f3:bc:76:8b:69:03:af:
                    24:a2:48:96:78:a2:3d:a9:ee:f8:f3:38:ca:91:0b:
                    a5:c6:9a:3f:8f:13:15:1d:0a:af:16:6e:4e:bc:b9:
                    e0:cb:07:83:8f:60:c9:14:dd:ea:f9:e6:dc:87:85:
                    07:ab:be:13:d9:f7:5b:b7:5a:20:b7:65:b1:24:7a:
                    78:73:70:29:7c:cd:11:ed:56:b4:d8:7a:f4:35:1c:
                    0c:9e:3a:af:13:50:90:e3:b3:46:7a:7f:d7:bb:b0:
                    a6:78:5d:27:2a:d0:71:c4:09:5e:31:4a:48:e0:cf:
                    f8:b4:0b:2b:52:2b:36:a6:9b:5c:5d:c1:03:e6:b6:
                    4f:58:1a:8e:bf:01:d3:72:a5:93:7c:77:25:7e:a6:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F5:B7:CF:6C:87:38:09:69:58:CB:CD:7E:19:E0:1F:D3:84:F3:67
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:28:aa:39:9e:a5:4f:22:c1:d1:22:a4:d2:71:09:99:0a:
         77:b4:a4:fb:1c:89:df:78:2a:e6:3a:a6:fb:de:24:df:62:7b:
         8a:d0:36:68:7b:e2:71:5b:a2:11:2e:b5:cd:c5:7c:b2:90:ec:
         3e:e6:29:48:16:7b:0c:c3:78:de:75:87:78:dc:20:77:99:75:
         68:a6:a7:f8:3c:ae:ac:ea:71:17:80:d9:27:c2:03:3e:b7:89:
         3d:55:95:21:c0:63:aa:37:a9:95:2a:84:21:a3:fd:d6:f6:e4:
         8a:62:05:09:a7:c3:b7:21:84:da:d9:92:03:1e:93:58:5d:c8:
         12:e8:39:33:6f:33:c1:6d:c6:af:0d:d1:46:3e:c4:e4:bd:09:
         f5:85:b2:aa:d1:ae:42:9f:04:c7:cd:e8:f8:82:7e:5c:69:30:
         c6:db:5a:22:fd:f5:7f:31:ee:6e:ae:97:6c:2b:07:8e:a3:91:
         dc:54:a4:80:a4:bf:28:8e:45:d1:6c:6a:56:74:97:66:fc:e9:
         98:2f:e6:de:a8:e9:5c:81:9b:2e:b8:bc:8b:5e:18:68:42:56:
         49:94:7d:c2:f2:e6:90:63:29:d8:c9:82:52:36:39:a2:0b:20:
         be:ba:6e:4a:74:eb:c5:dc:23:f9:60:8c:4e:30:21:f1:e9:75:
         d3:74:3d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----