Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e3b6523-075f-4fd7-96be-d01c2c779ecd.roa
File:                     4e3b6523-075f-4fd7-96be-d01c2c779ecd.roa (raw, json)
Hash identifier:          mZS5HOYNz5QrAqAFnbrBYgQ7eS9+fdnR6/QMPdZtn6o=
Subject key identifier:   C4:02:14:C0:8D:E5:A2:F2:46:7E:71:F6:BF:E7:63:BD:F7:CA:11:A8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       63CF39319B7CE3EF3BB3CB412ACC3BAFD1B29E0E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e3b6523-075f-4fd7-96be-d01c2c779ecd.roa
Signing time:             Mon 31 Mar 2025 19:01:02 +0000
ROA not before:           Mon 31 Mar 2025 19:01:02 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:9080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cf:39:31:9b:7c:e3:ef:3b:b3:cb:41:2a:cc:3b:af:d1:b2:9e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:01:02 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=ba291619a10e57355d2f3fb1af9e2ef9c5111decbf18f3f02d1fbce9a47a61e7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:c7:74:4b:55:10:48:ee:ad:c2:3a:fd:02:
                    d0:a3:1a:1f:7a:4a:8c:8f:a4:bb:eb:f7:ef:c7:21:
                    9b:f7:f2:a2:d2:70:01:18:d2:30:96:2d:05:65:c5:
                    10:6e:d5:fa:1b:b7:df:be:50:17:78:61:df:c1:aa:
                    8b:36:66:bd:40:6b:71:0f:3c:b1:4c:64:bc:5e:37:
                    a8:d1:08:de:48:64:c1:44:0e:0f:3b:eb:af:29:b5:
                    e6:49:59:f4:81:47:e3:b4:21:fd:8a:f0:8f:dd:4a:
                    6f:94:bb:98:fd:a6:12:14:62:16:e7:ad:3e:cb:6c:
                    23:4e:69:78:16:de:29:39:20:08:01:79:07:63:59:
                    c1:d1:c1:ca:c3:51:04:ae:f8:0b:d3:48:72:91:65:
                    af:45:0d:1b:e2:eb:4a:a9:dd:48:20:69:c8:ec:86:
                    25:d9:d0:e3:f6:f2:53:13:98:57:a8:65:b6:b4:3a:
                    f5:dd:43:0c:71:44:6d:93:59:6a:90:d8:79:9a:21:
                    8c:e1:06:c9:53:51:5a:6e:37:0d:b5:ea:25:d9:b6:
                    96:ad:96:f8:a8:aa:c1:7b:c5:f9:9b:25:29:f4:20:
                    92:d6:c3:c2:1e:b2:b1:fe:70:3d:5e:51:88:eb:4e:
                    fd:9c:c4:35:94:5b:d7:a6:76:11:5f:c2:14:36:09:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:14:C0:8D:E5:A2:F2:46:7E:71:F6:BF:E7:63:BD:F7:CA:11:A8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e3b6523-075f-4fd7-96be-d01c2c779ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:9080::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:da:5e:df:0b:e2:7e:72:ba:af:ab:3e:5f:34:e9:3d:9a:
         f0:fc:37:5a:7f:db:66:c7:8f:f0:8f:3f:92:85:15:26:e3:da:
         c4:6e:b9:ce:e6:b4:26:d7:e6:a3:b0:83:87:48:b0:ef:7d:91:
         e7:47:c3:73:82:b4:e2:7f:c2:76:60:45:05:04:8d:ab:01:f1:
         eb:95:44:e4:4b:9e:a7:5c:b3:68:7f:a2:0b:5a:e5:57:1d:20:
         eb:a6:e6:82:c1:f4:3c:d0:4d:da:07:b8:ae:fa:22:91:1c:89:
         0c:ee:19:15:b0:b3:f5:dd:ae:5f:06:6d:dc:45:cb:41:04:5a:
         e5:d8:90:40:23:24:1c:c9:2d:cf:68:c0:cc:4a:d9:40:8f:13:
         21:9d:58:e7:ac:66:ad:ce:44:3f:1c:5d:36:74:e6:81:65:0a:
         cb:1c:32:98:17:f7:91:ec:ea:33:af:b7:97:41:8b:5a:bf:78:
         b0:87:96:ea:56:d7:c4:ab:0b:da:6c:ac:a7:6d:22:74:41:e8:
         2e:d3:b8:3d:85:a4:2b:55:56:cb:28:57:a2:e0:6d:c2:58:60:
         35:81:e1:4e:da:6a:62:f3:e5:71:61:7a:c0:1a:d3:30:5b:d4:
         67:15:9a:44:d7:28:93:b8:6e:4d:70:63:c9:83:f7:99:58:4b:
         3c:b5:7c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----