Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
File:                     79440387-66a3-4852-a94b-8a3250f20726.roa (raw, json)
Hash identifier:          NOYOe1Cd0uq9aJXIT92pszp+kpWe2H+hs/riM+kQr8w=
Subject key identifier:   2D:CF:47:10:ED:EA:FD:14:5C:D1:73:29:F5:78:39:FF:BA:44:8F:AD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6B1767FE562B350389D6A36E962558579FAEBDB7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa
Signing time:             Mon 31 Mar 2025 19:01:35 +0000
ROA not before:           Mon 31 Mar 2025 19:01:35 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:a040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:17:67:fe:56:2b:35:03:89:d6:a3:6e:96:25:58:57:9f:ae:bd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:01:35 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=80b30cd7621d30fc22d54aa17ab5a9eee02320fb069bf94a48f0365183c45cbf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:dc:74:23:d8:0e:e8:51:fd:03:8b:c8:18:
                    9e:7c:10:9d:cd:48:7c:38:57:fd:b5:65:7e:5b:85:
                    fd:a4:bf:1d:c4:01:ca:65:5e:f6:ad:a8:e9:b6:f2:
                    51:0b:07:10:5e:08:c7:3e:61:d1:57:92:cf:6a:4d:
                    9f:27:90:1d:fd:20:f9:46:de:88:bc:cf:69:72:e9:
                    cc:e2:82:6c:48:db:0f:e7:ae:2c:2b:99:19:25:10:
                    da:07:3c:9f:fc:f6:3f:88:44:e1:20:1b:3b:2a:34:
                    a3:dd:66:13:f2:6e:06:aa:d2:6a:68:d4:97:8e:d8:
                    17:59:9b:ee:7d:01:67:58:da:6b:a5:68:8e:bc:09:
                    25:23:87:1f:94:15:83:e1:f9:f3:e6:3d:03:a7:90:
                    d5:b7:62:ac:31:a0:5e:b7:71:6a:09:7c:4f:49:6d:
                    00:c0:e6:e7:f2:d5:fc:2d:0e:c5:82:d1:b9:7b:80:
                    bd:ad:c2:dd:96:f6:70:ee:66:7d:ad:88:1e:1e:7c:
                    e0:f9:94:b1:2a:2e:be:8f:f5:ed:11:76:3f:d7:1c:
                    93:e2:90:2a:30:a8:cb:ab:48:55:b8:b6:cc:5b:8e:
                    15:99:55:df:f6:84:b3:a1:74:30:f0:f9:67:98:6e:
                    79:41:7a:e4:38:5c:c1:62:d4:18:d6:57:29:cf:b5:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:47:10:ED:EA:FD:14:5C:D1:73:29:F5:78:39:FF:BA:44:8F:AD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/79440387-66a3-4852-a94b-8a3250f20726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:2e:30:99:ed:2a:28:76:06:10:bd:79:de:cf:75:99:4f:c8:
         f4:34:3f:7a:ef:f9:9f:44:7f:60:60:23:c1:33:07:e4:a2:86:
         ed:75:b2:67:bf:91:0a:49:d7:08:86:3b:66:ad:65:e6:3f:8f:
         fa:6c:55:68:cd:a8:f3:35:cf:d0:99:77:1f:50:f1:fb:7e:4d:
         fd:ed:97:30:6d:1d:a8:b7:75:da:54:94:26:69:80:f8:84:e9:
         f5:d1:b9:81:ae:c2:98:b7:27:97:a7:4f:95:b5:e9:46:1c:91:
         ad:53:69:c9:60:18:5d:2b:7a:fb:df:5b:3f:4e:6a:58:85:73:
         31:2a:8f:85:b8:ea:1a:1f:41:63:ff:9e:07:54:1f:1e:76:4b:
         9c:60:3c:a5:50:45:c8:98:66:77:31:93:7b:e2:8e:dd:12:73:
         90:3d:7d:db:89:8a:24:45:c4:4e:37:56:93:a6:e7:3c:04:19:
         59:2e:e7:5c:3c:32:5f:70:22:f9:c5:ce:2f:4b:ee:49:9d:7a:
         76:59:dc:65:06:43:d5:53:d8:3f:f0:65:14:1f:57:29:ed:1f:
         20:e9:7f:c0:df:b1:f1:31:63:78:4d:32:9f:3a:53:fa:d0:37:
         85:f6:97:c3:e4:82:52:2b:26:a5:42:79:0c:cb:13:0a:7f:ba:
         96:9e:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----