Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
File:                     0b360e2c-382b-4420-8550-330a58e946ee.roa (raw, json)
Hash identifier:          BI5teTCNiZdb9H7Wbk/QfppyyIB+ZrR8rT1FfUgfBoQ=
Subject key identifier:   EF:90:1A:B8:CB:A3:16:D3:07:E2:86:61:85:41:82:93:83:A8:2E:F4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       28A4B076950260F47ED96535AE3637F583147E0B
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa
Signing time:             Mon 31 Mar 2025 21:00:57 +0000
ROA not before:           Mon 31 Mar 2025 21:00:57 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d058:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:b0:76:95:02:60:f4:7e:d9:65:35:ae:36:37:f5:83:14:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:00:57 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=95219ffff5bca1b8ff8cfdd75374be5eb0d9ec51b814c25b14a67d0e734eb00e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:40:ed:20:be:97:fb:78:23:16:03:42:ea:
                    41:00:30:11:d8:58:72:ea:12:47:ce:1d:0c:3f:fc:
                    56:1d:9f:b7:8a:11:f0:25:69:eb:2b:47:81:73:89:
                    34:88:96:55:49:d8:bb:f8:19:8d:fe:c3:96:e1:6d:
                    5d:95:f3:66:31:b6:b6:ac:cd:53:91:a1:9d:a7:0a:
                    9c:fc:25:9c:1a:36:ce:ac:d6:09:dc:4c:26:5b:54:
                    6c:38:fd:da:f4:c0:07:68:0f:a0:ae:46:17:0f:90:
                    b1:d3:8b:c7:32:ee:77:bc:9c:26:a3:81:63:cb:f6:
                    be:c2:cd:8e:ae:99:c6:80:0a:2b:e2:1a:c0:53:c6:
                    54:cc:e7:d2:3f:2c:8c:d0:fc:db:2f:d9:49:9b:a5:
                    b8:87:01:e5:98:31:b9:d7:50:1c:13:d7:3f:19:59:
                    4d:9b:31:7f:c3:c1:bf:03:0f:54:49:b3:fd:a9:03:
                    a8:94:68:5a:a4:70:1c:9a:64:ec:de:39:e3:c7:40:
                    97:8e:47:5e:f5:8c:81:5f:dc:9a:df:09:b1:1b:2b:
                    6f:47:91:e7:8e:d4:62:48:0f:12:ca:67:f5:67:dc:
                    24:2f:0b:56:c3:2f:c2:b9:87:92:51:89:59:fd:6d:
                    33:a0:00:85:74:49:b3:b4:98:d5:4d:8e:49:eb:a6:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:90:1A:B8:CB:A3:16:D3:07:E2:86:61:85:41:82:93:83:A8:2E:F4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0b360e2c-382b-4420-8550-330a58e946ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d058:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:81:63:2b:88:e4:ff:24:9d:bf:7b:9d:1e:ba:6c:96:1e:8a:
         a6:f0:d1:50:75:af:3d:8d:57:05:27:3c:2c:57:8a:a5:3e:4e:
         1d:fd:87:b3:ed:f1:6f:31:fa:4f:af:3c:ef:dd:57:61:0d:3e:
         bf:1c:95:da:6b:1f:b2:79:ef:83:23:a6:5d:ea:d6:b0:2a:83:
         dd:36:b2:98:7c:1d:66:11:5d:22:b8:98:e6:9a:1c:6c:96:35:
         a8:79:41:92:01:33:3d:7a:41:f8:3e:22:4e:0b:43:ba:a3:e7:
         c4:b2:a0:b5:a6:90:18:8b:cd:98:53:15:5f:52:d7:bd:d2:ab:
         47:a3:ff:73:23:0e:6e:bb:cf:48:a5:83:cb:0a:e6:cd:18:ed:
         24:b8:a0:2c:31:3b:35:0f:bd:79:34:f5:db:18:7a:ab:9f:d4:
         e6:5b:4c:34:65:2e:82:15:5e:5f:2d:5e:69:d7:24:d7:f3:3d:
         59:fa:8a:6b:8f:e8:1d:51:dc:88:f5:ff:90:01:95:e0:80:bf:
         7b:59:90:29:b4:fe:43:8c:39:d8:19:96:e8:be:c6:fa:fb:59:
         4b:df:5b:f9:84:41:c8:ba:33:d8:6b:3d:94:c0:ee:39:ac:ca:
         a2:fa:d4:b8:2c:73:cb:5f:1c:0d:4f:93:22:1d:c6:cc:a3:96:
         1e:b8:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----