Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
File:                     4e84f0a8-9d20-4219-b641-9a6905a033d9.roa (raw, json)
Hash identifier:          8OP64XZwe3ftfIjsmLj/BfCGRCYbRJbn6Vg6Lme5aMs=
Subject key identifier:   2F:CF:5A:E7:B4:00:00:26:3E:AC:10:5E:BD:DB:5F:0A:CB:B4:36:99
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2130F562847B17ED82F6A3E1926EB0CA3253F594
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa
Signing time:             Mon 31 Mar 2025 19:10:46 +0000
ROA not before:           Mon 31 Mar 2025 19:10:46 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:a040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:30:f5:62:84:7b:17:ed:82:f6:a3:e1:92:6e:b0:ca:32:53:f5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:10:46 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=bba9424bfa434681404d4cdfe38d6d872dd63cd3b3b38c6466b486fef05ec4d5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:36:4b:ff:31:d9:99:35:04:b8:03:04:8f:
                    31:44:e1:ab:44:84:5c:d9:a5:8c:9e:83:0c:e4:c0:
                    b8:7e:70:cc:c5:ad:c5:06:46:ea:71:9d:8d:fb:0a:
                    88:ae:e6:27:ce:5d:28:63:67:98:5e:2a:31:2b:d1:
                    e8:c9:45:70:fe:d1:36:8d:fb:d7:db:3a:6a:49:88:
                    c4:66:41:26:5e:75:04:6b:01:13:92:66:fd:f3:87:
                    fc:bb:53:1d:34:ec:f1:13:36:4b:51:0d:ab:23:88:
                    d8:01:4c:c5:f0:71:95:18:e3:4f:9a:84:56:08:28:
                    97:d3:c3:e7:ed:f3:b0:5b:ad:32:7b:e4:54:1a:b3:
                    54:07:27:d0:22:58:16:fa:c0:71:02:96:28:ee:7c:
                    53:0d:21:63:68:ae:09:05:db:e4:b1:b4:db:f7:32:
                    2d:68:85:cc:94:45:24:a1:ae:9b:92:10:ca:8d:ae:
                    75:ac:23:54:90:87:7a:dd:53:cc:c7:76:53:f3:a2:
                    dd:11:f9:b9:a8:53:61:30:55:6b:90:63:77:e6:72:
                    ff:a8:df:a2:6d:a2:ed:bc:31:83:c1:c4:5f:1f:de:
                    2e:f8:70:fd:ea:3e:6d:4c:a5:d0:db:f5:31:20:7a:
                    1a:b8:8b:93:59:69:65:21:56:92:c8:5d:b8:73:4a:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CF:5A:E7:B4:00:00:26:3E:AC:10:5E:BD:DB:5F:0A:CB:B4:36:99
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e84f0a8-9d20-4219-b641-9a6905a033d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:05:5f:4f:a7:d6:46:55:63:33:14:04:10:61:72:b5:8d:65:
         3a:55:8c:51:98:d9:7d:2f:69:88:8c:5f:2a:5f:60:a7:fe:f6:
         5f:52:df:2a:ac:3f:df:aa:b6:9f:ea:1d:7c:a3:1a:54:66:71:
         7b:d3:a5:3e:e5:61:19:86:41:f2:53:d9:71:da:25:ac:db:35:
         c7:7f:67:11:61:0a:e9:60:87:c9:20:bb:78:24:29:d5:1e:98:
         98:56:c9:5a:c4:bd:b0:f2:cb:e9:88:87:19:07:dd:91:9b:ee:
         64:d3:88:4c:93:87:59:24:75:b3:14:3a:74:e2:1d:a0:3e:f8:
         f6:7c:15:72:d9:24:45:48:67:a8:3b:96:75:11:d6:96:cb:5a:
         54:55:dc:f8:f8:f0:02:e0:ca:d6:38:2f:67:84:61:e2:ed:1f:
         4a:6a:3a:09:6f:00:09:95:a6:40:f1:f2:8d:9b:96:f2:0f:11:
         79:1b:e5:64:ad:ee:94:6b:f0:cf:29:98:64:84:a9:f3:25:cb:
         a8:fb:d5:ca:4b:88:18:3f:e4:96:da:ad:59:da:f9:35:e9:06:
         57:f4:a2:0e:81:85:71:7c:f4:17:bd:7d:26:c6:fe:d4:1b:b0:
         8f:a6:93:bd:96:84:93:39:e5:2c:16:cb:07:70:c2:8a:d5:e2:
         ae:89:92:5a
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUITD1YoR7F+2C9qPhkm6wyjJT9ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTEwNDZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGJiYTk0MjRiZmE0MzQ2ODE0MDRkNGNkZmUzOGQ2ZDg3MmRkNjNjZDNiM2Iz
OGM2NDY2YjQ4NmZlZjA1ZWM0ZDUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpHNkv/MdmZNQS4AwSPMUThq0SEXNmljJ6DDOTAuH5wzMWtxQZG6nGdjfsK
iK7mJ85dKGNnmF4qMSvR6MlFcP7RNo3719s6akmIxGZBJl51BGsBE5Jm/fOH/LtT
HTTs8RM2S1ENqyOI2AFMxfBxlRjjT5qEVggol9PD5+3zsFutMnvkVBqzVAcn0CJY
FvrAcQKWKO58Uw0hY2iuCQXb5LG02/cyLWiFzJRFJKGum5IQyo2udawjVJCHet1T
zMd2U/Oi3RH5uahTYTBVa5Bjd+Zy/6jfom2i7bwxg8HEXx/eLvhw/eo+bUyl0Nv1
MSB6GriLk1lpZSFWkshduHNKdl8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQvz1rn
tAAAJj6sEF69218Ky7Q2mTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NGU4NGYwYTgtOWQyMC00MjE5LWI2NDEtOWE2OTA1YTAzM2Q5LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HKg
QDANBgkqhkiG9w0BAQsFAAOCAQEASgVfT6fWRlVjMxQEEGFytY1lOlWMUZjZfS9p
iIxfKl9gp/72X1LfKqw/36q2n+odfKMaVGZxe9OlPuVhGYZB8lPZcdolrNs1x39n
EWEK6WCHySC7eCQp1R6YmFbJWsS9sPLL6YiHGQfdkZvuZNOITJOHWSR1sxQ6dOId
oD749nwVctkkRUhnqDuWdRHWlstaVFXc+PjwAuDK1jgvZ4Rh4u0fSmo6CW8ACZWm
QPHyjZuW8g8ReRvlZK3ulGvwzymYZISp8yXLqPvVykuIGD/kltqtWdr5NekGV/Si
DoGFcXz0F719Jsb+1Buwj6aTvZaEkznlLBbLB3DCitXiromSWg==
-----END CERTIFICATE-----