Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
File:                     1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa (raw, json)
Hash identifier:          gtP+WK6ebeAy7zDVnsAdyD4TOeqBPmZx2H3X4l1/a3k=
Subject key identifier:   C6:25:67:CC:0F:0B:55:63:2B:7E:EA:8D:8A:18:86:22:E8:4B:4B:63
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7390CA24EE19BA59BF784A683F716803E74F440F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa
Signing time:             Mon 31 Mar 2025 21:20:07 +0000
ROA not before:           Mon 31 Mar 2025 21:20:07 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01d:800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:90:ca:24:ee:19:ba:59:bf:78:4a:68:3f:71:68:03:e7:4f:44:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:20:07 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=eae8c4c44f0cfb3b7b11a2d6441a66114543b445f4375fc1a3884db8c049f037, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e8:6e:8e:a0:34:27:01:84:f0:fa:3b:20:1a:
                    08:d7:e7:89:f3:47:5e:bd:dd:6c:1a:75:1d:8c:8f:
                    ac:e6:7a:3a:41:f1:79:be:16:ef:c5:ed:fb:76:3a:
                    22:1f:90:44:54:68:5c:3e:88:0f:e4:59:a4:59:e4:
                    b2:0b:87:ed:cd:86:56:88:7e:d9:db:5a:97:38:4e:
                    cc:18:80:e8:cb:53:91:28:4f:24:a6:1b:f4:8b:00:
                    e1:79:3d:f9:19:fe:ab:13:14:4c:99:3d:22:c1:e0:
                    dc:48:06:a1:bf:55:57:70:76:df:98:1a:6c:92:cf:
                    c2:a5:a4:2e:2b:94:b4:ab:f6:c6:f6:63:26:65:9f:
                    f4:e4:28:a0:46:53:cf:98:41:8a:a1:af:c1:b8:e5:
                    50:e3:87:c5:69:38:9f:16:fc:7f:71:a6:3c:08:9f:
                    26:4f:52:e9:fb:d6:56:97:8c:3d:a9:8f:b4:ce:87:
                    c1:97:3a:64:16:f3:74:38:48:32:1f:63:13:ca:74:
                    55:69:06:69:48:90:91:51:a1:47:02:2a:af:f1:6b:
                    0e:cf:a6:f5:3a:ad:33:e1:fa:33:72:86:10:4e:54:
                    2e:ae:55:9b:f7:03:61:4b:1b:c0:7f:98:4e:0a:ee:
                    c2:d1:81:ef:ad:9e:6e:0f:90:83:5e:ab:37:9a:3c:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:67:CC:0F:0B:55:63:2B:7E:EA:8D:8A:18:86:22:E8:4B:4B:63
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/1d480b6d-25fc-4f37-b125-f45ce236f4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01d:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         96:bd:06:2c:63:23:14:a8:12:d0:c3:1f:bc:56:01:de:00:63:
         08:fc:e0:7f:fd:eb:38:0c:56:72:b3:6c:05:4b:44:5c:e8:94:
         c5:98:fc:73:c9:a9:19:1b:0e:fd:cd:92:59:c5:29:81:24:ac:
         91:31:97:d2:69:49:49:fe:8b:c8:d6:3c:00:6b:b2:44:d0:1d:
         55:74:fb:66:39:f2:9e:23:56:a2:77:8d:27:de:5d:d6:d1:f2:
         6b:81:4e:4d:e4:0f:ab:fe:42:17:f4:ff:1e:a8:87:0e:2e:bf:
         88:59:b6:56:2e:fd:85:5b:e5:de:23:4e:92:0b:db:c6:fa:96:
         9b:31:d7:f0:16:cd:2f:5d:a9:42:2a:ec:e1:d4:63:d6:86:a8:
         32:3d:86:e2:ba:6c:f3:fa:b6:cf:ce:18:7e:46:9e:ac:1c:98:
         99:31:14:0d:9c:fd:f6:ff:01:92:9f:7c:70:1f:1b:e8:f4:f0:
         a0:d2:bc:e7:d1:5c:47:de:a6:a0:0c:44:6f:5c:b2:5a:15:8e:
         6d:5e:cf:cb:b5:67:e7:9c:46:35:a0:de:46:2c:31:43:63:6e:
         9a:5a:f2:04:12:ee:6e:5b:0e:34:0f:26:8c:bb:a2:5f:2c:77:
         c0:13:4e:d3:fd:3a:71:df:a2:8c:a4:f3:7e:bd:a5:b9:34:4e:
         ff:fd:d6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----