Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa
File:                     414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa (raw, json)
Hash identifier:          Hkthd+0aJdV9KcJj+PPpuWuHqSOAT/nCfztVt/83bV0=
Subject key identifier:   8D:06:1B:8B:C9:4A:1E:85:BB:A2:8E:B8:1E:A1:92:6B:82:3B:E5:BE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6C6D54B5B164E9DD2B3FF72CDD1CE9E65BA367C9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa
Signing time:             Mon 31 Mar 2025 21:21:33 +0000
ROA not before:           Mon 31 Mar 2025 21:21:33 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d017:800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:54:b5:b1:64:e9:dd:2b:3f:f7:2c:dd:1c:e9:e6:5b:a3:67:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:21:33 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=eefbbe764bd2b6a5c415fad0534db2285700e117076bc5007e19df791d1ed6ef, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:6e:e8:5c:f5:b2:c0:36:62:31:e1:e0:aa:
                    f1:90:2b:a8:d8:74:a4:cb:83:b9:3c:d4:c8:e8:43:
                    2a:c3:27:d9:f4:cd:f3:1d:a0:68:48:32:c1:71:81:
                    03:c5:fd:fa:a0:6e:77:ef:b5:65:ba:70:fa:16:1d:
                    d7:d6:09:3a:c0:84:b0:7d:07:48:62:19:26:7b:3f:
                    a5:44:d5:eb:0c:f9:70:10:f5:b5:e3:dd:6f:6e:40:
                    76:f4:c3:47:32:f5:92:d7:b8:c9:86:e9:1c:64:0d:
                    27:93:83:5d:7a:50:a4:d1:46:f9:6f:5a:da:62:d7:
                    ee:54:a1:67:df:22:36:0b:1a:3e:00:29:0b:79:7c:
                    0a:6f:77:82:e4:c3:76:fc:e4:56:36:e8:34:4b:a1:
                    d5:51:ea:15:e1:b8:46:1a:a7:bd:9c:d1:39:2d:7f:
                    60:06:e9:ed:6b:ae:b0:0f:b3:7a:0c:6a:79:00:cc:
                    3d:74:b0:bf:57:e1:2e:f4:31:55:68:34:76:31:2d:
                    3d:02:40:ff:fe:12:7b:8c:32:0e:a9:7a:86:6c:56:
                    cb:a3:86:63:85:42:36:9d:7f:0e:3d:ff:f8:ca:0e:
                    d8:b6:80:29:98:6d:b7:e6:ae:a0:dd:c1:eb:bf:5d:
                    3f:6e:de:55:86:0a:ba:60:e4:32:eb:1b:30:a5:4d:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:06:1B:8B:C9:4A:1E:85:BB:A2:8E:B8:1E:A1:92:6B:82:3B:E5:BE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/414a2d71-5ba6-4cec-a009-936a83a7e2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d017:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:dc:b9:67:e0:e4:e6:c2:eb:ee:dd:8d:90:5b:56:77:1d:
         62:31:3e:9f:d2:9a:15:f5:b3:7f:54:f9:e2:ca:85:78:17:05:
         90:c4:a3:15:9a:00:ab:90:e2:e1:bb:97:21:33:29:07:b0:37:
         19:a1:22:20:02:55:65:de:7c:52:b7:9b:2b:e0:4a:63:10:99:
         19:d2:bb:12:a4:55:e1:e9:db:08:9a:f1:65:81:e7:96:3c:dc:
         b4:8e:04:9b:e9:f2:de:d9:17:5b:2b:eb:20:95:d3:a9:bb:92:
         44:fe:81:1b:2b:43:62:3b:d3:51:f8:3b:9f:00:a2:a0:77:32:
         26:31:9b:10:65:ef:8f:31:9a:04:7b:76:a3:31:1f:21:47:f4:
         b9:f7:94:00:83:d0:6c:4a:95:9c:b8:0e:8a:af:83:40:24:8a:
         c0:cf:91:5f:65:fd:e9:16:22:65:af:61:b7:3f:86:7b:3a:0b:
         73:20:76:6e:1d:2a:dd:bf:a2:60:d1:ff:a8:ee:d5:95:0e:37:
         b1:79:ca:ab:23:5d:f7:f4:bd:0d:87:2d:9d:26:aa:f6:40:4d:
         a2:4c:0e:61:58:92:bd:1b:64:09:96:19:e4:fc:55:a1:f6:49:
         be:e9:ee:78:ee:c8:af:a2:b6:8b:e2:30:da:f8:e8:a3:03:b7:
         3b:7d:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----