Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
File:                     44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa (raw, json)
Hash identifier:          M4uQcyWoElg8xLPNaCLy3Gg+YSdG0NHt66czmrZsu4w=
Subject key identifier:   EB:BF:3C:02:97:36:C1:A1:FD:20:89:45:50:25:06:DA:6E:06:98:02
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       162F293A087DA4E2A536E956A6A1BA5716B77E6D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa
Signing time:             Mon 31 Mar 2025 19:10:38 +0000
ROA not before:           Mon 31 Mar 2025 19:10:38 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:5040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:2f:29:3a:08:7d:a4:e2:a5:36:e9:56:a6:a1:ba:57:16:b7:7e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:10:38 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=3ce97dd2f3c97cd75c61f85383913615d042c121c6b0bac8eeac095469388b5f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:81:a5:80:8d:65:c0:97:9c:11:be:1c:bc:
                    59:6e:46:b1:a3:e8:f4:02:e3:43:4c:21:39:7f:8d:
                    95:9d:f4:a3:55:2a:69:01:d6:bc:31:10:79:4c:55:
                    7d:52:c0:71:82:bd:ee:9f:e9:9e:0a:d6:ad:d9:5a:
                    fd:ca:15:04:0a:b2:9e:00:41:68:b3:16:5b:49:e2:
                    d5:27:b9:f5:b2:9c:68:d2:ed:7f:58:eb:b6:eb:90:
                    83:72:6e:a8:b1:af:c8:b2:ce:47:82:37:66:fe:95:
                    dc:4c:76:89:ee:5f:ea:c6:5a:9b:c6:79:ab:b0:e9:
                    4a:f1:fc:07:f3:6c:13:10:c7:5d:8a:22:55:42:83:
                    96:c5:3b:0e:cb:ad:73:04:76:9b:40:ba:45:d6:1b:
                    f0:9f:98:fa:1d:e8:4b:49:2b:8b:b6:a8:a6:cb:c4:
                    c9:69:c0:2d:97:5c:eb:f7:3c:5f:93:04:e3:29:ba:
                    f2:b3:60:51:ca:7a:be:1a:0b:e1:51:8c:70:7b:93:
                    e3:07:f5:68:e8:5e:e7:f3:43:a4:1e:77:e3:ff:1c:
                    47:ae:6c:c1:51:fe:0f:b2:76:6b:2b:6e:0e:ee:45:
                    57:dc:84:d7:f2:d5:dd:61:27:8d:3d:5b:84:62:af:
                    f8:1f:ef:33:59:17:40:2b:c3:bc:63:d7:87:f4:29:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BF:3C:02:97:36:C1:A1:FD:20:89:45:50:25:06:DA:6E:06:98:02
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/44bb2f76-7c1e-411a-85f6-b9cd1c77d60c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:67:15:0c:00:1f:2c:0d:5b:0b:e3:4b:b6:8d:3f:87:21:
         b8:1c:9c:73:4a:ed:d5:a6:f8:1e:5d:b5:06:cd:a3:a3:d4:e3:
         9f:bd:3f:17:ff:db:a6:ce:75:55:6a:46:2b:3f:04:77:76:aa:
         ac:61:61:04:19:f2:2d:a3:9d:1c:aa:92:61:98:a0:d8:e1:81:
         f3:25:62:b6:4d:91:d0:07:af:69:f6:68:10:70:67:ce:d3:ee:
         ef:90:4a:96:6d:b0:d6:d3:ae:14:a5:40:d7:a2:dc:06:d1:cc:
         e4:35:71:5b:14:4d:12:8a:74:43:a0:b3:cd:30:fd:8e:7a:ca:
         7e:4a:73:46:51:ca:4c:00:88:00:ac:44:84:7c:66:a5:59:37:
         e5:39:f7:04:a9:c1:90:18:6d:e4:31:c8:66:fb:d5:89:d4:40:
         0f:89:c3:9a:1c:97:3e:11:79:38:74:1b:a7:49:25:d3:54:d8:
         c1:df:14:fe:e8:4e:2e:50:2d:e3:61:28:11:e5:7a:cd:0a:81:
         02:66:20:77:b1:df:ab:97:b4:b6:ee:7c:a5:b7:50:a0:2f:77:
         9f:7f:16:ae:ff:d5:b1:0b:04:75:81:01:8f:01:54:ca:23:a3:
         17:ab:99:be:84:6b:2e:d5:4d:b1:c4:90:01:4e:8a:f2:d3:8c:
         36:e2:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----