Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6cba8379-da94-4697-867f-03730e03e9ac.roa
File:                     6cba8379-da94-4697-867f-03730e03e9ac.roa (raw, json)
Hash identifier:          0Ymig1A6WvcvEhnF3+bosXbPLTvVkfb6IT5cIx9Sh7c=
Subject key identifier:   58:F3:7A:03:3D:55:25:6D:39:FC:49:33:AC:18:A9:8B:4F:0B:6D:E7
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       71B050D4F1271B227E2F51536545B436A2B44806
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6cba8379-da94-4697-867f-03730e03e9ac.roa
Signing time:             Mon 31 Mar 2025 20:20:23 +0000
ROA not before:           Mon 31 Mar 2025 20:20:23 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:50:d4:f1:27:1b:22:7e:2f:51:53:65:45:b4:36:a2:b4:48:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:20:23 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=94a0f850c53ba442b4da3a1594dad818adb4bd8d70790cb35c930e37f7cfae17, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2f:f5:c2:8c:41:38:8e:c2:00:37:20:da:46:
                    87:62:fd:48:b2:51:ac:d5:85:50:b7:37:68:c4:b3:
                    dd:9e:26:5c:99:78:45:f7:41:21:68:63:b9:0c:fa:
                    aa:a8:51:a8:26:b7:e6:f6:00:f2:1e:48:f7:42:37:
                    50:b1:d8:87:01:2f:27:6f:92:57:eb:ef:2d:36:85:
                    07:19:02:89:37:68:62:fd:0a:75:2e:8a:88:17:56:
                    f5:9f:68:71:66:3d:91:26:8c:54:36:c4:e7:59:e2:
                    a8:84:b8:9a:cc:88:77:98:1c:88:1a:a4:4b:f3:90:
                    64:93:27:9f:17:50:fe:e5:fb:55:14:3e:e8:f8:af:
                    b3:e7:55:09:4a:9c:7d:6a:e5:55:07:ff:de:cd:85:
                    a0:92:cb:29:89:a7:1d:50:1d:a3:86:3c:82:a0:a2:
                    d6:a4:99:27:d4:b3:e8:18:49:b4:47:05:7e:7a:c0:
                    ee:d4:db:4e:cf:dc:3f:0c:62:3a:cb:d5:1f:2c:c8:
                    95:e5:e6:4b:ae:cc:25:44:3d:ab:ed:30:3e:22:ff:
                    d4:14:31:72:5c:32:5f:09:5f:28:42:84:18:c8:41:
                    04:54:15:75:a7:8e:e0:13:11:16:38:9e:23:3d:64:
                    df:6e:9f:d8:bb:01:ee:38:16:30:de:ff:b1:0f:cc:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F3:7A:03:3D:55:25:6D:39:FC:49:33:AC:18:A9:8B:4F:0B:6D:E7
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6cba8379-da94-4697-867f-03730e03e9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:a5:2c:68:d8:84:8b:ec:76:a1:f3:dd:56:40:e0:21:ee:69:
         b9:a1:2a:2d:6a:02:f6:ec:ad:c7:aa:b9:23:7e:71:24:48:2f:
         2f:53:70:e2:fb:51:b4:5b:db:ea:ba:8a:57:6c:90:4f:6c:35:
         27:41:03:93:9b:02:24:b1:06:07:7f:cb:fd:12:6d:ba:4f:62:
         c8:32:6f:1c:38:73:98:b7:6a:44:90:52:1c:fe:0c:37:ae:1a:
         1a:45:32:c5:fc:93:10:a2:83:10:24:f9:0e:73:78:3e:ae:77:
         42:d5:26:3c:98:f6:6f:41:73:c4:f2:0d:ad:8b:3a:4f:15:c4:
         4d:b3:df:4f:7f:ab:2f:4c:71:ea:a8:75:1e:94:e6:ad:1a:55:
         cb:53:25:5b:ed:81:3c:d4:34:0e:1e:75:04:f3:5d:81:1f:d2:
         8b:1f:2c:e5:1d:c9:1d:c7:60:1c:26:3f:5b:16:04:c3:64:f7:
         04:0d:89:2b:92:4b:9f:4e:68:1e:5b:9e:65:60:d4:f1:93:86:
         1f:b8:45:6e:af:f0:a0:9c:3d:8d:77:78:19:10:3e:af:9a:97:
         6c:48:66:6e:17:07:11:83:0e:be:d5:fe:a1:ac:e0:8f:f7:f2:
         19:1e:b6:90:a7:53:f1:e3:b3:fd:3d:dc:8b:5f:02:48:c4:ac:
         a3:62:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----