Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
File:                     4498c2d2-5806-4a94-bd91-8de10249561d.roa (raw, json)
Hash identifier:          Z/MEFZxMX8hqCqvxXCsNetH9N3GvisY6LqtUK36agj0=
Subject key identifier:   4A:5C:3B:2B:1E:16:7C:99:74:10:2E:90:5A:37:C6:2B:1A:A9:2E:70
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       47F71E88407BB8CCC965386748AAECFA6170B74E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa
Signing time:             Mon 31 Mar 2025 20:40:11 +0000
ROA not before:           Mon 31 Mar 2025 20:40:11 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d078:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f7:1e:88:40:7b:b8:cc:c9:65:38:67:48:aa:ec:fa:61:70:b7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:40:11 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=3bfd83cd64e8ea7888935aa403f276d1325cbe2d9f32b06c2aecbcfaf31a456c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:46:42:ff:6e:a3:2b:74:c3:42:8f:28:f8:
                    75:47:3e:f2:f0:2a:a3:14:da:78:83:10:32:5a:05:
                    a6:e6:da:59:bd:e2:21:b3:01:5c:bf:06:92:6d:ee:
                    81:03:2c:4c:f8:ab:ec:a9:b6:29:24:cb:3a:bd:97:
                    e7:fe:b7:f5:65:19:a7:0c:6c:23:44:89:63:38:70:
                    7c:bb:1a:5d:d9:28:ff:52:a2:73:19:58:d7:dc:f3:
                    60:3e:db:96:c3:95:51:84:f4:40:08:37:84:21:6f:
                    6c:a1:e4:7b:5b:da:12:97:a5:db:0d:6c:7d:9b:35:
                    aa:cc:9e:fe:a9:c5:ed:50:8c:e1:29:b8:d3:4a:70:
                    5e:ca:95:8d:4e:37:83:df:d7:59:3d:17:2e:78:17:
                    94:09:46:e4:24:ab:fd:53:7c:ca:d1:cb:d4:72:8e:
                    f6:0a:69:4c:ed:a0:ed:c4:71:b1:d0:3d:27:42:e9:
                    8a:2d:fc:a1:ca:d7:98:f1:a8:49:67:a9:f7:bb:f2:
                    cf:11:b2:2e:38:4c:78:9d:67:86:d6:92:d7:58:99:
                    a3:94:17:ca:1d:09:1b:9b:89:71:6c:f2:4c:3c:a4:
                    26:2c:0c:20:7f:34:dd:2e:20:b1:dd:54:1a:a0:f9:
                    b8:4b:e8:db:ae:42:62:3e:1b:7c:60:31:01:e2:53:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5C:3B:2B:1E:16:7C:99:74:10:2E:90:5A:37:C6:2B:1A:A9:2E:70
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4498c2d2-5806-4a94-bd91-8de10249561d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d078:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:24:fa:24:5b:fb:21:fc:da:d0:05:d9:77:86:55:c2:34:
         c7:e2:10:30:8f:e9:ed:67:41:67:1f:6e:ab:c5:e3:25:b2:c4:
         aa:16:03:dd:d7:8c:53:e9:6d:75:b2:ab:ee:79:5f:f1:f7:c1:
         14:53:a7:83:e4:44:12:d3:a8:c0:f3:13:e2:ad:87:26:03:de:
         ee:54:39:25:ca:ba:4c:26:bc:b8:89:8a:e6:0c:ee:d4:0a:35:
         b7:16:1a:6f:a6:6d:f7:06:5e:28:bb:3f:2d:53:6b:51:14:10:
         f0:68:9f:c8:3c:e7:af:49:d1:72:1d:ba:69:91:a0:77:af:90:
         1d:8f:9c:c3:43:14:8c:88:60:08:66:4c:7d:ae:81:ef:83:0f:
         e6:4b:d0:91:92:fc:a8:14:b6:2e:c7:f2:d7:99:fc:98:ac:85:
         b0:92:98:47:c5:e1:a7:fe:8d:6d:cb:7f:37:fe:95:13:f2:83:
         f4:65:d9:76:28:e7:69:d9:9a:72:16:5d:37:fd:8c:0d:6f:58:
         d8:ec:8e:41:30:e6:4e:67:3c:b9:2d:0b:a8:d4:95:b9:c9:bc:
         e6:67:d8:93:cb:b3:5f:ee:c2:cf:92:74:6f:17:2a:3a:f0:3d:
         81:03:86:e6:79:ca:61:86:9a:e1:b2:72:c4:e9:d7:33:a7:ac:
         b0:8b:22:c2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUR/ceiEB7uMzJZThnSKrs+mFwt04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDQwMTFaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDNiZmQ4M2NkNjRlOGVhNzg4ODkzNWFhNDAzZjI3NmQxMzI1Y2JlMmQ5ZjMy
YjA2YzJhZWNiY2ZhZjMxYTQ1NmMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANaJRkL/bqMrdMNCjyj4dUc+8vAqoxTaeIMQMloFpubaWb3iIbMBXL8Gkm3u
gQMsTPir7Km2KSTLOr2X5/639WUZpwxsI0SJYzhwfLsaXdko/1KicxlY19zzYD7b
lsOVUYT0QAg3hCFvbKHke1vaEpel2w1sfZs1qsye/qnF7VCM4Sm400pwXsqVjU43
g9/XWT0XLngXlAlG5CSr/VN8ytHL1HKO9gppTO2g7cRxsdA9J0Lpii38ocrXmPGo
SWep97vyzxGyLjhMeJ1nhtaS11iZo5QXyh0JG5uJcWzyTDykJiwMIH803S4gsd1U
GqD5uEvo265CYj4bfGAxAeJT/7ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBRKXDsr
HhZ8mXQQLpBaN8YrGqkucDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NDQ5OGMyZDItNTgwNi00YTk0LWJkOTEtOGRlMTAyNDk1NjFkLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Hjg
MA0GCSqGSIb3DQEBCwUAA4IBAQCpVST6JFv7Ifza0AXZd4ZVwjTH4hAwj+ntZ0Fn
H26rxeMlssSqFgPd14xT6W11sqvueV/x98EUU6eD5EQS06jA8xPirYcmA97uVDkl
yrpMJry4iYrmDO7UCjW3Fhpvpm33Bl4ouz8tU2tRFBDwaJ/IPOevSdFyHbppkaB3
r5Adj5zDQxSMiGAIZkx9roHvgw/mS9CRkvyoFLYux/LXmfyYrIWwkphHxeGn/o1t
y383/pUT8oP0Zdl2KOdp2ZpyFl03/YwNb1jY7I5BMOZOZzy5LQuo1JW5ybzmZ9iT
y7Nf7sLPknRvFyo68D2BA4bmecphhprhsnLE6dczp6ywiyLC
-----END CERTIFICATE-----