Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
File:                     10e25f26-1142-4a43-8091-69f9ddd435c1.roa (raw, json)
Hash identifier:          dTF+r0A7vhAw6Q8aMC67dEzjd3bYgrPDb62GcaM3SoA=
Subject key identifier:   E2:F7:B5:50:7E:A7:F2:24:1A:BC:91:9D:F3:DE:A3:10:A3:6A:61:5B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       340352FCF0B0B5A5379F8565D442C32829E7D05F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa
Signing time:             Mon 31 Mar 2025 21:00:43 +0000
ROA not before:           Mon 31 Mar 2025 21:00:43 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:03:52:fc:f0:b0:b5:a5:37:9f:85:65:d4:42:c3:28:29:e7:d0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:00:43 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=46f3feb5452c41199bee75f84f5dd36c72c1a9242072ec7fe7cd9deb4d95b1e4, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:ca:44:9f:31:7b:32:72:14:c8:90:72:cd:
                    31:45:d8:58:51:cc:51:0a:86:63:77:a6:13:db:de:
                    3b:97:a5:02:a8:2f:9b:39:1a:2e:06:50:bf:42:4f:
                    45:50:e5:7e:e3:a8:43:2e:96:96:96:3b:11:26:8a:
                    4d:65:ae:9e:f3:5b:fc:f0:ad:32:31:fd:44:10:86:
                    c0:79:26:ba:e8:29:ce:de:45:8c:5c:4f:e3:dc:50:
                    bc:65:cb:25:0b:73:10:60:1b:f1:88:e6:58:2a:f1:
                    58:92:62:35:9b:b5:8c:8b:66:12:e7:5d:60:e1:bc:
                    b3:de:59:b1:2c:e5:38:1f:69:d1:8a:a0:df:6e:b8:
                    09:f6:0f:02:9f:e8:86:28:04:37:d1:4c:b6:4e:29:
                    84:b3:17:1c:4c:33:24:ed:ee:07:3f:be:ea:54:c3:
                    5a:ae:9d:ef:07:45:53:da:aa:45:f5:36:3c:bc:63:
                    e2:c9:89:0f:96:4d:63:42:dd:d7:18:92:94:f8:e3:
                    7a:73:25:81:b3:7c:ac:6e:eb:6e:b0:ea:8a:9f:bc:
                    0d:56:78:b5:17:93:63:ff:e8:1b:05:c6:d5:ab:65:
                    e7:93:c6:e7:df:9c:2e:0a:e4:bd:a3:dd:ff:14:30:
                    bf:ff:0f:da:d9:bf:a7:55:ad:7c:da:04:86:2f:ff:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F7:B5:50:7E:A7:F2:24:1A:BC:91:9D:F3:DE:A3:10:A3:6A:61:5B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/10e25f26-1142-4a43-8091-69f9ddd435c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:41:a1:b9:a9:ef:54:6f:c3:ff:b8:de:3e:d2:9a:a7:26:96:
         ab:17:26:53:76:da:5e:8e:44:0d:bf:6b:80:3a:91:d0:7f:bd:
         b7:90:4f:f6:f6:33:73:bd:43:e1:d9:94:4c:21:44:ff:99:88:
         14:20:cc:37:ad:20:da:4a:90:3a:dd:af:a2:7b:1e:16:4b:b0:
         9a:57:11:d0:51:f1:6e:27:66:6e:fb:36:62:be:d5:81:19:7a:
         54:14:a3:a5:96:88:75:05:77:2d:12:11:48:d4:85:b3:61:cf:
         d5:86:26:8f:ef:50:13:75:70:40:e8:3d:34:05:cd:23:3a:ba:
         51:42:33:1e:29:2a:78:e7:9a:bf:46:8e:c5:30:b3:0d:b5:78:
         a2:c8:16:13:f6:fa:53:fb:73:d2:7f:8f:1a:9f:d7:b2:d0:6c:
         28:53:c9:5a:69:1e:f1:ce:4e:76:be:e4:e2:66:46:75:44:e3:
         73:c6:be:71:e7:35:b6:fa:eb:0f:f3:d1:2b:f5:00:a0:b7:c9:
         7f:d6:92:4c:70:ed:4c:08:e6:fd:3a:0c:72:99:09:d1:af:cd:
         df:07:5c:11:dd:01:13:57:ac:8f:f4:2d:1c:3e:34:32:4a:75:
         4b:bb:ae:09:0e:39:2a:d2:c9:f1:7e:aa:81:a2:53:5b:67:a2:
         36:d3:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----