Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
File:                     3f8d2f8f-3d48-47ce-8524-66406f0de004.roa (raw, json)
Hash identifier:          RdjFLfKOLQAscAWF36dPdSC2dYeH7lFs+khNHULbAq0=
Subject key identifier:   4A:3E:0A:1B:91:75:CF:23:B1:5C:7E:9D:21:79:B0:AF:B1:39:10:38
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2AA7FE06C854787ECEB410AEECF14929BD77ADB7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa
Signing time:             Mon 31 Mar 2025 20:51:42 +0000
ROA not before:           Mon 31 Mar 2025 20:51:42 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d034:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a7:fe:06:c8:54:78:7e:ce:b4:10:ae:ec:f1:49:29:bd:77:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:51:42 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=caad7eeccca1be6d82810002d5edc127d48d6588c4f2bbedfe0855623ba15cea, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:89:6a:96:cc:d1:09:ca:47:7f:f6:a6:82:
                    fe:24:dc:4e:e1:8b:d0:db:a0:bf:e6:21:03:f6:33:
                    f5:24:ee:9b:a9:bf:03:9e:e5:58:4a:2e:37:29:93:
                    e1:bb:63:8d:87:21:83:94:6e:fd:d6:a6:7a:b5:1f:
                    09:e9:08:1e:4a:94:32:21:a3:e5:d4:8e:b4:4f:a8:
                    f3:f1:1e:78:a2:c3:9e:21:da:7b:05:0a:64:3f:c2:
                    03:82:b4:f7:9f:65:2f:1f:04:e4:ee:ad:de:b0:74:
                    61:95:da:7a:a5:00:56:f4:9f:43:78:a0:8e:9c:5a:
                    21:f5:e6:ea:4a:f8:4a:d6:60:51:9d:48:06:b0:34:
                    8b:53:a2:c7:10:75:00:db:a7:45:9d:f8:24:b1:c0:
                    37:20:bc:12:f7:47:d3:3f:c0:d6:af:93:d6:30:98:
                    f1:1f:45:d4:ab:c3:15:a2:fa:65:7d:99:37:11:f6:
                    01:47:33:ac:50:2f:41:d7:ad:b1:33:6e:4b:1a:b2:
                    3a:50:c5:07:4e:53:4c:e8:c7:26:da:fa:1e:bb:9d:
                    6d:18:3e:b0:8e:aa:d5:4e:ef:b7:00:4b:4d:3b:96:
                    97:0b:60:85:83:39:3f:76:90:3a:75:c1:58:a6:b0:
                    07:4d:a9:4f:4d:39:56:d9:16:8a:25:fb:bc:9c:a6:
                    5a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3E:0A:1B:91:75:CF:23:B1:5C:7E:9D:21:79:B0:AF:B1:39:10:38
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f8d2f8f-3d48-47ce-8524-66406f0de004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d034:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:84:4f:ee:b2:8b:c5:e4:5e:c4:c1:78:8c:a7:04:24:75:05:
         8c:5e:0a:47:5f:4c:79:c9:d8:8d:87:07:a4:19:89:bb:5f:ca:
         80:f2:99:02:9e:a1:90:bd:10:8d:84:12:25:86:9f:59:e3:a9:
         fa:76:36:4f:b0:79:4d:23:cc:d9:4b:da:fe:a1:df:17:d2:14:
         ad:97:b6:78:d6:d7:1a:3e:8d:38:13:5a:77:75:64:d4:05:23:
         65:e7:6a:15:58:a5:f5:80:0e:6e:d6:a7:9c:1d:1f:be:49:3e:
         a8:fe:ae:fe:d0:eb:57:47:63:ad:95:2d:73:53:3f:2c:23:da:
         fd:fe:a6:18:82:15:d0:75:5a:da:ca:27:e3:ac:50:f0:c8:ac:
         c4:ac:5c:d0:15:97:dd:65:8c:9f:3d:9b:5c:6c:0d:59:61:67:
         90:c9:e5:15:4d:dd:3c:f2:cb:ec:48:5e:0e:b8:11:87:fb:7e:
         61:ed:f8:51:cb:2b:41:d1:87:87:5e:b4:62:43:06:59:b3:60:
         af:6f:be:19:b7:1e:e2:19:10:35:53:f5:4a:1d:0b:4e:55:40:
         b3:a4:b6:3c:77:0b:94:63:44:2c:68:09:82:00:91:12:56:85:
         4a:b0:4b:b9:66:57:fa:61:2b:2d:11:f1:ee:ff:98:5f:75:6d:
         5b:7f:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----