Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
File:                     2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa (raw, json)
Hash identifier:          Hik2nZBIITtqD9O5wSz0o6xKvYVs7S6LtCDG3NlGafQ=
Subject key identifier:   62:7A:A4:1F:C4:78:D7:FF:BE:17:C5:A7:86:0B:E1:5A:35:CA:A7:D1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       73389B068BC269523B41347A99F5B6979BBBD6A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa
Signing time:             Mon 31 Mar 2025 20:11:17 +0000
ROA not before:           Mon 31 Mar 2025 20:11:17 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:9080::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:38:9b:06:8b:c2:69:52:3b:41:34:7a:99:f5:b6:97:9b:bb:d6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:11:17 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=bf50549687857c939f6c09b44737e9b6bcd18d4b5c9a2749f33854951623c8df, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:ad:e2:56:fb:40:1d:10:5e:cc:d4:75:93:
                    99:e4:82:cf:cd:c9:f6:46:7e:92:db:1d:7c:c8:60:
                    41:11:4e:fd:f4:3b:e7:e6:84:ae:2f:e8:42:7b:58:
                    16:1d:56:86:57:66:6b:11:62:b1:e4:3b:a0:f0:ef:
                    a3:47:e9:d9:66:e6:7c:08:2a:3b:41:9a:da:53:31:
                    5e:43:9c:45:ef:16:4c:ed:a2:46:c1:c2:d5:24:e8:
                    df:3f:c9:3f:e4:04:1d:aa:96:f6:fa:f1:db:0a:3b:
                    b1:f8:b7:ae:67:62:e7:0e:e9:f9:35:4c:28:46:6e:
                    fa:2f:a2:16:d9:83:6d:16:b7:dc:28:5c:bb:50:31:
                    fb:c8:a2:e1:80:58:7d:a8:50:a3:1c:31:16:0b:39:
                    5f:08:6b:ee:26:fe:0a:9d:b8:3e:ad:26:2a:2e:92:
                    24:ed:66:33:68:2a:09:35:d7:0e:37:7a:59:aa:e6:
                    ac:80:c2:76:e0:ea:82:35:5f:c6:ad:bc:91:f1:27:
                    5f:49:85:2f:04:02:d8:a2:c2:8e:60:cd:39:f2:b7:
                    a5:cd:02:c2:9a:a6:3c:57:d6:79:1c:a3:0a:c6:ea:
                    80:75:ba:36:1b:29:49:29:35:65:88:24:8f:44:08:
                    60:61:fc:c3:d8:7d:97:0a:b2:c8:42:9a:3a:32:47:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7A:A4:1F:C4:78:D7:FF:BE:17:C5:A7:86:0B:E1:5A:35:CA:A7:D1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2133a9e1-9f3c-4662-b3c3-5cea0c9406cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:9080::/46

    Signature Algorithm: sha256WithRSAEncryption
         aa:46:91:2c:eb:48:b6:9a:28:0e:3d:44:d0:6b:33:dc:6b:11:
         f2:a1:1b:7b:d8:43:91:2f:8b:99:7a:ac:78:cd:d0:fa:7b:80:
         e5:c0:ed:f5:75:03:c5:f7:65:4b:4e:8f:77:27:3f:06:bb:f9:
         2c:20:1e:e6:92:cb:f6:43:3e:90:9b:69:93:8b:32:ef:58:cf:
         f8:8a:6a:47:6f:14:97:22:fa:ab:3b:c1:b1:60:aa:b7:5e:a5:
         6c:15:5d:3b:0d:a9:44:90:71:60:e6:55:3f:03:f4:71:75:d6:
         47:b8:28:d7:36:eb:11:e9:fe:06:88:79:13:4f:24:32:b1:42:
         f0:c8:f2:2c:25:4a:3f:7e:3d:1d:5c:37:e9:38:3a:2c:96:f9:
         c8:37:71:a6:14:a1:62:00:c9:69:ea:91:a5:36:09:88:32:da:
         2d:73:9b:37:bc:c1:db:28:25:4b:6b:ca:da:2d:cd:da:7a:d1:
         02:f2:6f:a8:18:2d:2e:ef:86:05:15:3a:2d:f7:0c:69:b1:a1:
         e2:86:0e:90:fb:79:2b:89:7a:13:95:de:d4:51:b2:90:d2:fe:
         58:1a:44:f5:1a:16:d8:58:c2:77:b2:fb:18:65:01:d0:d0:b9:
         73:07:1d:92:66:ea:4a:da:87:df:9c:89:e7:93:b7:bc:0b:ec:
         08:9b:98:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----