Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
File:                     36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa (raw, json)
Hash identifier:          XGxlRFX6cns9ggGvLl1jfqXA/81Hk+a8Ru0jjyjhmmM=
Subject key identifier:   CA:BD:BA:21:59:5C:A9:F2:59:9F:8A:BC:57:11:9F:F1:2A:AA:BB:F0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7282992F6A29A2BAB077414873C3223BC619A392
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa
Signing time:             Mon 31 Mar 2025 19:51:01 +0000
ROA not before:           Mon 31 Mar 2025 19:51:01 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:a020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:82:99:2f:6a:29:a2:ba:b0:77:41:48:73:c3:22:3b:c6:19:a3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:51:01 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=057f4d7a3c59282862587e805489da6588e5b413be2b1431c9ae6f1fd42ee7da, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:00:8f:d9:15:ca:b5:30:3d:f1:e9:e1:ef:
                    34:35:c4:11:8a:13:90:b4:3b:72:79:8f:d2:fe:12:
                    25:99:44:06:3c:71:c8:b4:3a:ad:62:90:c2:c1:06:
                    30:3b:ee:2b:fd:26:88:1c:6b:b2:98:c0:6e:5f:07:
                    9a:5c:84:83:5d:51:6f:b7:ef:17:c7:aa:17:b1:06:
                    20:f2:29:a5:5e:a7:fe:71:d4:9d:5f:55:79:d5:bf:
                    90:ba:89:93:5b:48:41:1f:a6:b1:8c:ff:81:47:aa:
                    d4:29:cb:6a:91:f3:6e:79:64:9e:d8:14:00:24:23:
                    f7:69:f3:dc:24:8f:99:5d:89:8a:dd:92:42:51:db:
                    83:5d:5b:1d:bb:bb:fa:59:2d:c1:06:dd:31:f6:21:
                    68:fe:19:b1:bf:39:4c:81:3d:ac:c3:b6:d6:00:69:
                    ab:b9:e1:31:1b:1a:e0:0c:ff:17:b8:3f:d1:94:12:
                    38:84:29:f9:63:f2:28:78:c9:1b:3d:74:d9:fd:33:
                    a3:63:60:a1:18:8b:1f:11:9c:b3:d8:b8:4e:77:6c:
                    d6:4c:b2:77:c1:2a:0e:cb:34:40:6a:43:85:7d:34:
                    5f:f3:23:84:96:66:f1:36:4d:22:e7:2b:7d:be:50:
                    77:10:da:4c:5d:4b:75:a6:23:a1:c6:2e:48:de:4d:
                    bf:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:BA:21:59:5C:A9:F2:59:9F:8A:BC:57:11:9F:F1:2A:AA:BB:F0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/36fde4c7-305c-4e9d-8d1f-ba85c3650278.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:a020::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:f4:8a:61:f9:d3:e9:a4:e2:2b:c5:13:75:3d:0a:21:1f:ff:
         05:8a:2c:a3:96:59:0c:b2:02:16:3b:be:f5:a7:3f:53:64:46:
         f1:93:74:43:4f:8c:49:03:8c:4d:f2:35:58:e2:0c:9c:94:e8:
         02:d3:eb:09:91:68:a9:b6:19:19:26:a5:48:6a:46:d5:5a:19:
         a8:80:e7:e4:c7:21:37:d6:94:a6:d9:4d:2d:22:f2:11:49:d8:
         6f:3e:be:07:bb:6b:87:bb:cb:95:7e:0b:aa:05:56:f8:49:a6:
         17:77:43:a4:2b:53:b2:1e:de:a8:e2:10:3c:b4:35:8e:57:f7:
         46:d3:8b:83:00:96:4e:43:e3:d0:45:97:29:7a:0f:e0:4b:71:
         89:3e:13:56:0d:16:7f:5d:8a:fe:fe:fd:30:68:9e:a5:51:43:
         d8:dd:28:3c:69:3f:fc:48:69:28:f1:21:db:1c:fd:09:bb:de:
         50:3b:79:b2:5b:a3:93:25:a9:8e:07:ed:fc:e7:07:c1:c4:a2:
         48:4c:cc:90:96:0c:01:14:db:97:ec:52:7f:8c:31:02:96:12:
         4f:9a:6f:18:c7:be:00:d6:38:61:3e:25:19:7f:bb:ba:f9:b2:
         1f:c1:14:76:2c:59:57:1a:bd:5d:6a:44:b0:6d:78:26:ba:b9:
         42:3d:47:06
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUcoKZL2oporqwd0FIc8MiO8YZo5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTUxMDFaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDA1N2Y0ZDdhM2M1OTI4Mjg2MjU4N2U4MDU0ODlkYTY1ODhlNWI0MTNiZTJi
MTQzMWM5YWU2ZjFmZDQyZWU3ZGExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALbUAI/ZFcq1MD3x6eHvNDXEEYoTkLQ7cnmP0v4SJZlEBjxxyLQ6rWKQwsEG
MDvuK/0miBxrspjAbl8HmlyEg11Rb7fvF8eqF7EGIPIppV6n/nHUnV9VedW/kLqJ
k1tIQR+msYz/gUeq1CnLapHzbnlkntgUACQj92nz3CSPmV2Jit2SQlHbg11bHbu7
+lktwQbdMfYhaP4Zsb85TIE9rMO21gBpq7nhMRsa4Az/F7g/0ZQSOIQp+WPyKHjJ
Gz102f0zo2NgoRiLHxGcs9i4Tnds1kyyd8EqDss0QGpDhX00X/MjhJZm8TZNIucr
fb5QdxDaTF1LdaYjocYuSN5Nv38CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTKvboh
WVyp8lmfirxXEZ/xKqq78DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
MzZmZGU0YzctMzA1Yy00ZTlkLThkMWYtYmE4NWMzNjUwMjc4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0ACg
IDANBgkqhkiG9w0BAQsFAAOCAQEAnvSKYfnT6aTiK8UTdT0KIR//BYoso5ZZDLIC
Fju+9ac/U2RG8ZN0Q0+MSQOMTfI1WOIMnJToAtPrCZFoqbYZGSalSGpG1VoZqIDn
5MchN9aUptlNLSLyEUnYbz6+B7trh7vLlX4LqgVW+EmmF3dDpCtTsh7eqOIQPLQ1
jlf3RtOLgwCWTkPj0EWXKXoP4EtxiT4TVg0Wf12K/v79MGiepVFD2N0oPGk//Ehp
KPEh2xz9CbveUDt5slujkyWpjgft/OcHwcSiSEzMkJYMARTbl+xSf4wxApYST5pv
GMe+ANY4YT4lGX+7uvmyH8EUdixZVxq9XWpEsG14Jrq5Qj1HBg==
-----END CERTIFICATE-----