Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
File:                     0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa (raw, json)
Hash identifier:          Tx1TIuhDd2OrNaUxH0kFBhlb/7S3q6XJBSPSR3/ZFMQ=
Subject key identifier:   07:32:B3:D7:8C:AA:A7:32:03:A5:50:D8:54:CB:26:BC:43:43:6E:DF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       43ADF87C9EA35E6C0CCF988212AF0FBEBAFEE5BA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa
Signing time:             Mon 31 Mar 2025 19:41:11 +0000
ROA not before:           Mon 31 Mar 2025 19:41:11 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:a040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ad:f8:7c:9e:a3:5e:6c:0c:cf:98:82:12:af:0f:be:ba:fe:e5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:41:11 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=6c46ba60c9b9c497702021ceedb3dd40473864b1d823f35935cb458141b180ff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:12:ce:76:52:7e:ba:cf:e2:e3:8c:9c:f0:
                    83:95:12:53:03:bc:15:70:36:1e:15:cd:39:a9:ad:
                    37:32:d5:b8:6a:e9:bb:20:cc:8f:13:fc:d1:b6:eb:
                    55:f3:ec:cb:3d:94:d7:c5:68:9f:de:7a:22:8c:bd:
                    21:5a:10:75:e8:b5:d7:0b:5d:d2:80:2c:50:6f:87:
                    6c:0c:69:52:16:f3:05:80:23:72:30:e8:32:92:cf:
                    ff:e5:95:31:4f:43:ba:4c:ca:8f:ce:fa:ff:04:9f:
                    9f:0d:cb:76:dc:09:72:ae:00:63:6e:ce:8d:d0:85:
                    90:b4:56:4b:b6:98:f3:49:81:e3:e3:19:b2:26:10:
                    08:d4:ff:4c:21:d7:59:22:7b:07:93:e4:4b:cd:36:
                    e2:43:9d:45:1f:cd:2c:52:66:dd:ed:87:8a:38:43:
                    41:fd:5c:ed:9c:f5:42:a9:d7:fe:ef:4d:c7:95:c5:
                    f3:4d:9a:71:aa:d2:cd:07:7c:06:9f:f6:e9:61:2c:
                    47:29:fd:53:c8:fc:21:29:49:ca:d4:7e:63:95:25:
                    9f:dd:d0:6c:63:d9:84:2d:dd:81:fc:a7:a5:01:ae:
                    1f:a7:c9:35:ac:7d:3c:c4:46:2a:e1:b7:9e:7a:f2:
                    e2:fe:5d:0c:31:f2:31:67:bc:61:0a:05:c7:4c:c9:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:32:B3:D7:8C:AA:A7:32:03:A5:50:D8:54:CB:26:BC:43:43:6E:DF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0a1a25d7-6935-420c-a949-4a9d0e6a95d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:f3:d3:fd:c2:4d:17:16:fb:70:9a:6e:03:1d:f2:28:8a:d2:
         bf:27:88:a9:90:3c:27:04:87:bb:f7:11:3a:9e:af:fa:55:df:
         82:27:5e:86:a6:73:99:c2:79:51:a5:7e:af:33:f9:66:41:a1:
         cb:5e:0e:e5:b8:3a:c4:94:52:1c:4b:ab:68:cd:7d:16:51:6e:
         84:77:ad:a3:d6:55:93:20:4e:59:b5:d1:d9:d4:ff:4c:8a:bd:
         9f:91:79:22:cf:16:cb:c3:ab:cb:14:67:fa:52:39:44:78:a8:
         59:f8:55:20:82:d5:22:e6:d9:6a:7a:c4:5a:bd:dc:99:49:61:
         b2:a6:f1:5e:18:97:9e:25:46:f4:07:1c:25:c9:80:cb:92:9c:
         7e:06:cb:5e:0f:67:2a:9e:13:ba:d2:9f:0b:bd:2d:f2:6d:4f:
         d9:f1:c0:d2:ef:05:aa:e6:27:03:8d:5b:a5:f5:2f:19:45:71:
         41:2f:9a:ea:f7:f6:95:10:a1:c9:ee:eb:fc:6d:d0:c8:66:7f:
         35:76:15:c6:0c:d8:2c:65:f5:25:44:48:75:1a:34:2f:52:7d:
         2c:71:72:d3:27:2a:49:cd:0a:d9:21:e6:39:f3:88:8a:2d:b1:
         ed:17:0f:51:ef:aa:71:07:87:62:e0:78:72:4b:86:58:00:df:
         bf:b4:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----