Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
File:                     007aa6ae-ee04-4168-a465-d2d3db70f19f.roa (raw, json)
Hash identifier:          g3DydyWE16bRsPsVOCfRJr3R4bJG1BMZqhPh/DLPHCk=
Subject key identifier:   E1:27:DE:0B:7C:00:D9:E4:E8:BF:9C:03:66:48:68:77:24:E0:E2:91
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0E410671BD8EC0F2350FD564BD55F32317C8298F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa
Signing time:             Mon 31 Mar 2025 19:00:14 +0000
ROA not before:           Mon 31 Mar 2025 19:00:14 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:1040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:41:06:71:bd:8e:c0:f2:35:0f:d5:64:bd:55:f3:23:17:c8:29:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:00:14 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=df34fea2c647a3e9cd3632d1d85e511c57067192d44cdc94081dd43c346d8add, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:59:8d:2f:1e:ec:0b:4f:51:39:0c:5e:f3:
                    45:e2:fb:36:cb:23:49:c6:1d:71:43:a4:67:4c:34:
                    73:51:88:8e:47:f1:72:1a:85:c2:1e:a7:39:1e:d8:
                    5f:a1:c6:ce:3a:3b:fa:18:47:97:f6:1d:77:65:9d:
                    04:8a:be:6d:4a:57:a9:a1:e6:b8:40:7d:2a:a4:62:
                    b4:c9:f7:3c:be:ce:36:47:47:aa:a3:a8:fc:92:1f:
                    a0:1d:03:07:d9:f3:f5:b8:3a:e9:5a:e6:4f:3f:34:
                    bc:53:d0:75:af:84:30:72:c3:66:f2:8a:93:a7:53:
                    e9:72:1c:72:4a:6c:7c:35:9d:08:5e:b8:40:9a:58:
                    9b:6f:83:15:6b:c9:45:6a:92:04:35:52:e7:26:0a:
                    28:b4:bc:b8:26:e2:01:07:b7:6a:26:74:85:0f:c5:
                    7c:b4:5b:3d:3a:c2:02:ed:48:a1:eb:36:f7:41:43:
                    d8:7b:f5:44:db:56:88:7f:f7:75:d0:e3:d0:1d:c9:
                    37:43:14:7a:3e:de:2e:c6:1d:21:ed:0a:6b:58:4e:
                    f2:fc:fe:5a:f5:1f:e7:53:33:76:7e:1d:5c:72:62:
                    52:f0:a6:28:0a:77:dd:97:6b:29:06:78:7f:59:97:
                    b8:4c:0b:5d:15:3f:ea:74:3d:ea:d7:fa:da:e0:5d:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:DE:0B:7C:00:D9:E4:E8:BF:9C:03:66:48:68:77:24:E0:E2:91
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/007aa6ae-ee04-4168-a465-d2d3db70f19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:25:51:bf:a7:ec:af:5f:42:54:32:2f:96:32:e5:12:a3:cd:
         ca:da:2e:18:1b:8d:ce:2b:11:f2:c9:d8:73:3c:e5:4b:52:35:
         97:f3:8c:33:41:df:b1:c1:51:69:2f:4e:90:00:9f:49:5b:f6:
         ab:63:f4:c6:cb:4c:52:63:10:56:7a:64:ab:92:f5:09:35:8c:
         c5:d5:d9:9e:a0:ec:ee:aa:b5:f2:50:c5:c9:8d:b3:43:7d:a9:
         b3:0b:6f:0a:02:3a:01:43:23:fc:cd:5c:4f:62:e6:5f:2b:aa:
         cb:07:da:c6:33:cc:de:ec:46:bc:67:7d:7e:f8:8a:72:e5:4f:
         06:98:36:f4:65:1a:ff:f4:71:f4:9b:00:47:3d:c5:e1:e5:0b:
         4c:fa:6f:ee:99:a1:ab:da:4e:77:6a:44:9a:7f:58:55:eb:a7:
         00:af:c5:ec:9b:b0:d5:cd:c0:33:72:a6:5a:50:18:a4:76:f6:
         39:59:f4:d0:1a:e6:6e:f6:0e:85:81:be:e6:e5:20:1a:17:87:
         0e:0f:36:b4:54:e3:ba:df:0f:9b:3b:c0:1e:b3:93:39:30:d2:
         43:fe:0b:57:08:01:f0:a3:47:06:22:3f:c9:91:ed:36:e8:1c:
         8b:64:3b:5b:59:d9:1d:4a:11:9e:c0:77:f4:07:03:3c:71:5e:
         1f:fe:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----