Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
File:                     0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa (raw, json)
Hash identifier:          0x013oF57TDSMblQmZV6qOmulmaaB3J1N7kYF1lsN1Y=
Subject key identifier:   72:FB:73:6C:B8:62:70:29:01:E6:10:1A:42:DB:A4:B8:3E:0A:EB:C7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0BE169B0B9EE0A4F958269A5E914C0166404CBB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa
Signing time:             Mon 31 Mar 2025 19:20:24 +0000
ROA not before:           Mon 31 Mar 2025 19:20:24 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:10c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e1:69:b0:b9:ee:0a:4f:95:82:69:a5:e9:14:c0:16:64:04:cb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:20:24 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=91067ff6b98a34296b3c87d2a2c3cea36961679be1d136e59d198455abd64538, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:9c:21:96:b9:59:84:90:0a:c8:2f:2f:33:
                    00:f4:fd:c5:93:9a:59:a6:95:51:d2:9c:9a:46:91:
                    1c:04:da:a2:db:50:4f:93:d7:06:ff:a5:05:75:4d:
                    cf:a0:61:26:aa:40:83:d2:59:43:e5:ed:4d:87:62:
                    cc:4a:2d:da:29:3e:8e:8c:69:31:96:d3:8d:f3:cb:
                    c7:ec:2d:8d:ae:58:69:0a:84:81:32:d3:64:e6:5b:
                    e1:c1:8f:62:d3:fc:7d:37:a9:f4:ee:b0:39:c7:3d:
                    09:38:ab:ee:f7:13:c8:b3:3e:c5:f8:b5:0f:05:c2:
                    55:6b:9a:c8:4a:72:18:d8:d7:73:e5:0b:36:d6:2a:
                    f5:13:58:01:08:ed:fc:dc:03:75:3a:a0:25:43:22:
                    ab:18:16:8f:37:60:cc:84:b8:65:cd:07:f5:4a:10:
                    e3:08:48:e8:d4:e0:90:ed:b7:21:c8:b9:b2:11:e5:
                    65:47:da:bf:08:d3:5c:71:c8:e9:18:73:67:97:f2:
                    34:67:2b:a1:c9:e1:0d:28:91:de:e1:0d:b4:15:d4:
                    ab:28:7e:07:73:6e:05:bc:16:39:bb:7d:bd:e1:1a:
                    d6:1f:83:0c:5f:07:71:73:62:3a:23:73:9c:8c:e6:
                    7c:d0:ce:aa:3f:e3:9d:2e:eb:19:97:98:b2:67:24:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FB:73:6C:B8:62:70:29:01:E6:10:1A:42:DB:A4:B8:3E:0A:EB:C7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b2e309e-e9d4-4546-8969-2d7b4b9d513f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:4d:61:be:7c:f1:ba:fb:53:d8:01:4a:fc:53:9d:43:41:
         bd:31:09:2a:d7:37:5b:ae:71:99:9b:2c:6a:97:96:57:fa:d2:
         1c:f2:89:22:a8:00:09:9a:05:9b:28:d5:f6:05:ea:cf:1e:76:
         1f:62:94:3e:06:db:60:34:5a:37:ca:f4:c0:2d:38:e6:00:2b:
         86:8d:09:ee:7d:a8:c4:14:30:16:af:39:4d:34:28:6d:b3:d2:
         29:c1:c8:6b:04:88:27:23:55:59:c0:f0:f6:e0:6d:99:5c:97:
         62:6d:0d:d8:a6:d6:50:2c:70:d4:44:e7:dc:80:6c:55:07:c0:
         b1:8b:02:04:84:74:f2:d3:2f:14:c1:25:c7:45:5a:ab:c9:2e:
         81:be:66:00:5f:ed:2d:b0:d7:d3:8a:4a:ac:b1:e0:f1:a7:2f:
         8f:6f:7c:9e:66:b8:87:ba:8c:61:62:23:86:94:bd:cb:49:54:
         4e:06:eb:c6:28:41:6f:e6:c1:34:71:22:b6:29:b7:2c:a9:d4:
         74:c7:96:fc:3c:30:76:9f:fe:96:ec:f0:44:e0:64:00:7e:52:
         3c:20:04:f8:7a:fa:40:6a:1d:ee:93:2c:18:bb:3f:5d:a3:09:
         d8:36:cd:e4:23:7f:58:3e:1c:57:77:84:ca:73:9a:e5:fb:df:
         cf:f4:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----