Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74829dde-c52b-46c2-8036-0755ebbb7a37.roa
File:                     74829dde-c52b-46c2-8036-0755ebbb7a37.roa (raw, json)
Hash identifier:          brxbnWhsVYcM5LAsbeec33YGPsN2BA5cGetpN2BE1BU=
Subject key identifier:   AD:DA:06:39:2A:6D:7C:9E:5F:A2:5C:A9:BD:B5:7D:DA:80:7E:A2:35
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6C3CE1950F50A010E4F5CD2D41D8ACF8D5168ED1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74829dde-c52b-46c2-8036-0755ebbb7a37.roa
Signing time:             Mon 31 Mar 2025 19:10:43 +0000
ROA not before:           Mon 31 Mar 2025 19:10:43 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:2080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3c:e1:95:0f:50:a0:10:e4:f5:cd:2d:41:d8:ac:f8:d5:16:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:10:43 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=ef203e93180111e2bfede1855de8898ef2e6d4c904817c8e70dafca424ade9ac, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:a5:9b:00:b6:78:93:56:18:e4:1d:1b:14:
                    b1:a7:e5:e2:98:b7:b8:a7:47:c0:b8:08:cf:85:40:
                    e5:92:cc:15:d8:eb:8e:95:60:b8:12:d8:66:8a:e3:
                    c7:5e:fc:d7:6c:f5:67:b2:93:47:a8:af:96:c5:94:
                    e3:67:61:e7:a0:f9:4e:69:c2:1e:ea:24:d8:ca:35:
                    14:fe:0b:5b:f4:5b:ca:21:5d:c7:51:24:57:6b:ad:
                    02:01:a9:32:f2:08:66:35:d8:4a:67:f5:2a:ba:f4:
                    52:c8:39:6d:3c:46:b3:ee:8f:81:c5:26:d4:fc:9f:
                    a0:89:87:48:34:d1:08:3d:8b:21:7c:ef:33:9f:5f:
                    f0:be:d2:f6:f0:1a:06:81:97:f2:7a:78:4a:6d:c6:
                    69:3e:76:72:8b:ab:a7:5c:62:3a:41:ce:b7:c2:60:
                    b2:29:70:ac:ce:64:26:d6:05:85:63:a4:b5:2b:b7:
                    b2:db:23:e6:e0:86:d3:b6:7d:af:a1:f4:3c:ae:73:
                    c6:0c:79:09:40:0d:55:60:bf:e2:cf:cb:52:cd:41:
                    08:bc:3a:2a:01:b2:f1:89:4f:b5:29:bf:06:df:2f:
                    c8:a5:00:29:a3:3b:db:54:2d:0d:a3:bc:8f:48:0b:
                    80:06:74:43:05:6b:4b:d5:48:4e:be:f5:48:e2:8d:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DA:06:39:2A:6D:7C:9E:5F:A2:5C:A9:BD:B5:7D:DA:80:7E:A2:35
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/74829dde-c52b-46c2-8036-0755ebbb7a37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:4d:3c:98:62:79:ef:c3:0f:50:21:f9:12:bf:46:e8:18:35:
         26:36:d7:ad:3b:ab:4e:b1:8a:fa:b3:1b:0c:75:24:13:2a:81:
         9a:a0:60:87:ca:05:81:04:9f:1d:bc:47:12:54:df:c4:24:05:
         ca:0b:0a:64:a9:de:ab:0c:2c:50:cd:e6:01:6b:d3:64:57:f0:
         dc:e9:e5:95:6f:68:27:99:3c:08:f3:9a:01:c2:84:2a:eb:77:
         93:02:e0:60:32:61:12:4d:0e:17:5a:30:1a:60:41:0f:07:ae:
         b2:ea:c6:82:c9:7c:1f:c9:b9:a4:a9:a9:4d:f9:de:e3:6c:4a:
         64:39:4e:da:23:93:0b:79:aa:12:ac:c2:0b:c5:d4:4d:cb:e1:
         29:66:fa:ea:6a:b0:57:4f:a6:4a:80:6d:66:42:55:65:d3:eb:
         f1:01:5f:dc:a7:59:3f:3f:6f:1d:28:8c:7f:76:27:b7:0a:77:
         44:29:b7:b0:fe:36:d8:8b:40:e7:b3:d4:7a:f5:02:f1:c8:5d:
         02:f2:b7:52:bf:ab:07:81:e0:d6:11:90:eb:ff:bc:9e:27:c0:
         9d:fa:b9:dd:f2:5f:8e:22:18:ba:c5:b6:38:ec:09:1c:18:31:
         9b:de:37:63:7c:21:16:48:ac:97:94:02:e0:ef:c8:86:ee:b1:
         50:67:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----