Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
File:                     7665346b-5715-4d4a-9ee7-32affc669e92.roa (raw, json)
Hash identifier:          +LR1M7IuZbqwU3rGB6KdTmcdEL30R3GOYpLc6qczAYs=
Subject key identifier:   FF:F2:D7:01:BC:7F:45:55:A2:EB:05:9F:3E:F4:FA:87:B6:56:21:1A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1DFE02BD66F19B443B1F1D2D3F67CFC6F22510F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa
Signing time:             Mon 31 Mar 2025 19:01:32 +0000
ROA not before:           Mon 31 Mar 2025 19:01:32 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:2040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:02:bd:66:f1:9b:44:3b:1f:1d:2d:3f:67:cf:c6:f2:25:10:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:01:32 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=be8d676216f038153a3cd044a4a659b4957292db30e1bf546f2755e8427a2655, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3d:d5:54:f9:0d:aa:66:9c:82:2d:15:f7:5e:
                    37:6b:39:21:0f:9b:69:c1:fe:32:41:75:eb:2d:56:
                    0b:1a:2f:6c:99:91:4d:e1:e5:8c:b1:ec:da:83:a4:
                    26:00:ae:07:93:f4:62:39:d8:e1:21:d9:63:86:20:
                    7c:61:da:6c:52:51:79:c7:b6:06:12:57:6e:3d:bc:
                    3e:a2:77:3c:c0:38:88:31:45:68:f2:63:00:6e:08:
                    26:8e:29:b8:d8:05:7e:75:53:f5:83:7f:5c:31:30:
                    6c:84:0a:7e:68:bd:6f:27:98:25:b7:de:29:09:ca:
                    f2:4d:a3:c5:9e:4d:ab:35:3a:24:35:20:33:0b:fb:
                    87:cb:82:32:cd:f9:d7:16:c8:35:7f:46:68:33:2c:
                    f8:c9:fd:f8:fe:40:36:9e:8d:f2:29:da:0f:0f:c1:
                    52:81:dd:5b:09:1e:31:bc:dc:49:27:1d:bd:e6:5d:
                    9a:64:71:e3:62:82:9e:83:e1:bd:36:08:61:2d:58:
                    99:c1:67:61:5f:dd:48:d8:6c:9f:a5:f2:47:33:0d:
                    24:f9:bc:ef:0a:02:62:b8:b7:1c:ee:1d:aa:6e:a2:
                    a5:29:0c:ca:03:7a:de:d2:10:d3:c2:f6:f8:f9:04:
                    0c:21:6a:b2:d5:44:71:49:e7:a0:0f:86:f2:9a:53:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F2:D7:01:BC:7F:45:55:A2:EB:05:9F:3E:F4:FA:87:B6:56:21:1A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7665346b-5715-4d4a-9ee7-32affc669e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:61:de:a2:01:f6:ee:fc:4e:70:09:47:61:60:85:ed:b7:fc:
         2b:ba:84:8a:14:ee:ec:65:60:d4:47:96:24:8e:a6:63:6f:55:
         e6:e2:99:d2:5c:dc:e1:44:bd:c3:e8:f5:47:d5:08:80:13:b2:
         ba:25:4a:63:b8:64:95:82:c7:01:d3:87:83:00:9d:8d:ed:a3:
         22:b2:9f:57:e8:67:be:06:28:7b:04:06:cd:ee:55:55:93:8e:
         e2:21:29:52:c5:6d:00:a4:f8:15:9b:ad:0f:92:d7:f4:56:41:
         8a:35:b4:30:ab:d9:7b:9f:96:41:6c:dd:46:12:d2:f0:2b:0f:
         48:84:ee:ff:7c:da:eb:76:2d:ae:39:e1:95:d3:4c:3d:41:50:
         76:99:91:f1:62:88:70:66:b3:c0:42:03:0f:34:3f:dd:c9:49:
         05:bd:4c:dd:ae:65:00:27:ad:3c:a7:e2:1f:09:ea:d9:7f:d1:
         60:a6:a6:4a:46:bd:b4:17:56:81:39:4c:17:b8:c1:9c:80:0f:
         e1:39:08:dd:df:2b:0b:32:ff:61:f0:e7:22:a1:22:4f:4f:12:
         fd:24:15:1b:b3:9a:95:90:f6:6e:f9:eb:38:21:e8:ab:78:19:
         06:04:c6:57:3d:6a:bb:c2:a4:36:85:84:9a:2c:78:8e:3e:fb:
         94:01:49:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----