Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
File:                     48ce7dfe-434d-4b57-b520-9001ae26be85.roa (raw, json)
Hash identifier:          GOaeNCvJcvzaaPJDwThzKA8nA+kkzvBELBF5jwiFMCM=
Subject key identifier:   49:B3:17:FC:69:12:73:7D:DC:B9:35:C4:8E:66:B8:F4:8D:43:44:56
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       39749C86DFB39418395F1736BD9CF6783D4C3A89
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa
Signing time:             Mon 31 Mar 2025 19:20:22 +0000
ROA not before:           Mon 31 Mar 2025 19:20:22 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:8010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:9c:86:df:b3:94:18:39:5f:17:36:bd:9c:f6:78:3d:4c:3a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:20:22 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=94056da2420158416205078938fddeef45926695de77d39f92f21abca480521f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:4a:9c:d3:da:d5:1c:56:3c:3e:48:97:94:
                    b5:27:c2:49:c9:06:0d:77:d7:21:c3:f0:68:85:6d:
                    34:a2:fc:b2:a1:32:d3:8a:ff:a4:f7:be:d1:16:5e:
                    89:41:37:a0:0f:c4:65:4e:ff:16:1c:f2:fb:29:5c:
                    69:e8:50:f5:f4:ce:41:c5:9e:0e:c0:b1:de:71:7f:
                    fa:7b:2b:48:7e:ed:4b:ec:e9:30:31:b7:1c:b1:5d:
                    52:e2:ef:31:2e:84:a1:c2:8b:e2:ec:6c:cf:b7:3e:
                    a3:d0:b6:44:06:8c:d3:3b:57:27:27:f9:c9:b8:22:
                    0e:ce:f3:93:8e:77:34:cb:30:02:df:cf:97:d5:14:
                    f1:41:56:92:ff:13:77:c7:98:ec:28:f6:4a:0e:e6:
                    41:6d:d3:1c:3d:a8:3f:03:79:fb:59:32:cf:21:4f:
                    a8:5e:bc:ca:e1:b4:5e:6c:66:a5:2d:80:1e:f6:1f:
                    29:ea:f2:df:11:3f:02:f6:3e:fb:ac:22:dc:b5:d2:
                    4c:c4:b8:3e:ef:28:1d:ba:8b:51:4e:6e:da:37:18:
                    91:25:52:b4:c9:38:b6:e8:60:7d:0f:08:39:90:5b:
                    17:9d:8b:04:01:c6:18:c3:93:19:99:7f:a6:37:a0:
                    26:57:08:b7:8e:78:d5:ac:93:d6:7a:39:79:8e:e9:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:17:FC:69:12:73:7D:DC:B9:35:C4:8E:66:B8:F4:8D:43:44:56
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/48ce7dfe-434d-4b57-b520-9001ae26be85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:49:ed:24:5b:8f:64:d2:62:4c:e5:1c:e3:6d:a5:11:c5:
         c7:b9:8f:df:17:33:90:50:f9:ce:d7:cb:4a:1c:0f:00:69:a7:
         4d:5e:27:7a:d8:f1:dd:d6:d6:e4:7b:88:d6:51:ec:99:84:d6:
         38:4e:7f:06:e5:14:12:56:c3:3a:a1:3c:40:59:01:f1:e4:3b:
         fd:2e:5e:ba:a7:04:55:aa:f0:45:37:af:10:d7:c6:52:de:4c:
         32:29:d8:dd:bf:1d:c6:81:c7:a3:f4:64:8d:4f:e0:e0:df:08:
         63:a3:6c:d7:94:b6:c1:d5:87:20:a4:c2:c5:30:fe:b2:fc:da:
         9b:09:ac:99:a6:4a:69:9a:36:94:98:17:1d:1b:33:73:65:60:
         25:ff:8e:bd:3d:1a:ac:4a:a1:30:0f:1c:43:16:04:c5:3b:8b:
         e9:ac:06:30:54:2c:d3:68:b2:66:60:c3:09:75:d8:f1:92:0f:
         25:58:fc:a2:02:ae:c0:9d:26:14:0f:ec:58:9d:b5:b7:f0:ec:
         c7:b9:fc:0c:e5:c6:0d:d2:ca:2b:7b:d8:28:e6:c0:63:12:0a:
         90:e9:46:c6:e4:ef:a7:e5:cf:14:3d:7e:a1:d7:fe:76:16:12:
         eb:3f:2a:30:30:6e:1c:20:ad:0c:02:2e:ae:a3:67:b0:44:7e:
         27:8e:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----