Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e2e7542-7017-4b0e-a3cb-0b0a16d01737.roa
File:                     0e2e7542-7017-4b0e-a3cb-0b0a16d01737.roa (raw, json)
Hash identifier:          VViYIgOtc+tuJKvMGUhbEnT5iZLSJOQN3aysqPn/6nw=
Subject key identifier:   5A:2F:C5:2C:04:73:C6:17:60:BC:2C:CD:5E:51:D9:35:E7:F4:88:4D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       588852369EDBD52D6D1FD886623D507B7613EEC2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e2e7542-7017-4b0e-a3cb-0b0a16d01737.roa
Signing time:             Mon 31 Mar 2025 20:41:26 +0000
ROA not before:           Mon 31 Mar 2025 20:41:26 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06e:a000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:88:52:36:9e:db:d5:2d:6d:1f:d8:86:62:3d:50:7b:76:13:ee:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:41:26 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=3b73f5c71ae158c38470d0be5f5671f7ee2dd14e53be1e4edda3fd402e0eb357, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:b2:23:6a:ab:4c:d2:ad:75:fd:b1:b1:23:
                    2e:df:d5:2a:2f:7c:85:e3:48:8f:42:c4:27:e1:ba:
                    d0:f8:2f:ce:be:9c:2e:f1:ec:72:28:38:b6:d2:78:
                    dc:b6:b0:a3:a2:08:0b:1f:1b:b6:b6:33:d8:9c:fc:
                    f4:26:b6:41:5e:2f:1a:40:7f:63:be:4a:00:27:14:
                    47:7a:fa:31:78:23:92:5e:be:72:76:44:24:38:99:
                    6d:d8:b0:12:2a:8c:75:be:6f:c8:d5:8d:de:53:bd:
                    6e:c1:66:62:36:53:32:38:4f:4f:2a:66:c7:91:f7:
                    b2:35:67:bb:14:70:f5:67:7e:df:5e:78:86:43:64:
                    cd:1c:fe:42:1e:46:e3:de:ef:a4:cc:b7:59:43:56:
                    77:bb:c9:3f:50:40:f8:c8:0b:eb:11:4a:de:80:ab:
                    8e:08:cb:5d:e8:2a:1f:24:18:32:52:1a:9d:c1:84:
                    34:62:b0:2b:dc:53:ff:77:36:d8:39:c0:fd:36:bf:
                    e7:ee:07:2c:74:e9:30:1d:3c:1c:41:a3:97:d3:26:
                    91:a7:6d:72:8a:7d:74:aa:39:51:b8:1d:8e:be:9b:
                    28:c4:cd:75:5a:5b:27:98:cf:41:6c:b4:d2:01:8d:
                    48:aa:1b:01:83:e6:6a:c8:96:60:0f:4c:f1:cf:19:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:C5:2C:04:73:C6:17:60:BC:2C:CD:5E:51:D9:35:E7:F4:88:4D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0e2e7542-7017-4b0e-a3cb-0b0a16d01737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06e:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:9b:8a:f6:16:d9:30:f3:14:63:33:2f:75:3d:30:ca:f2:
         6d:af:42:49:52:a8:0d:b6:73:6e:16:68:a9:53:4d:10:6f:9f:
         0b:54:72:d4:96:f5:68:87:53:9b:b1:69:7a:e7:f9:6a:35:d7:
         5f:ca:cb:63:c2:94:7f:05:9c:e8:eb:5d:bd:b4:68:cd:90:40:
         79:f0:2d:f8:13:db:80:c7:c8:9b:e1:27:7c:63:77:23:a8:4f:
         db:cf:20:03:25:91:b1:3e:d4:a0:ab:a6:aa:61:c7:88:cd:9b:
         ee:71:54:63:5e:33:93:f8:06:ee:cb:1c:d9:d7:3d:b4:03:94:
         34:61:28:c3:8c:36:eb:84:db:32:17:2b:a1:ed:5d:45:6d:cd:
         8b:f1:2d:64:d5:69:36:f8:ba:7c:81:d0:45:48:5a:1a:92:ed:
         5f:6b:9f:43:66:a1:97:85:41:00:27:67:6e:38:6a:df:51:66:
         e1:19:c1:b0:d9:89:4e:02:45:3d:6f:ea:86:02:2b:12:ff:8a:
         ca:9f:e0:3d:2a:dd:26:03:19:b6:fd:6e:48:e9:57:28:44:18:
         a6:97:d3:41:55:bc:a5:a8:79:b0:ac:03:de:1f:d7:df:61:82:
         2f:4c:21:db:bb:5c:ca:c6:7e:ab:20:b2:f5:88:c7:7a:09:a6:
         b2:5e:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----