Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
File:                     86433272-8233-4231-82ff-92246d0a41a5.roa (raw, json)
Hash identifier:          vgdQpzKr2OMDY8BAWB5Y/d7z3OhI0hICczkArVcCFmE=
Subject key identifier:   F9:09:8C:3F:2D:C9:3F:33:54:74:87:28:BE:5A:4D:17:9F:23:69:EB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       35DD5131D933FA6206239F7F7F7B8E1046567BCF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa
Signing time:             Mon 31 Mar 2025 19:40:41 +0000
ROA not before:           Mon 31 Mar 2025 19:40:41 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:40c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:dd:51:31:d9:33:fa:62:06:23:9f:7f:7f:7b:8e:10:46:56:7b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:40:41 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=c9d1f26dcbdd89381e15ec4a8a23ac3761b9f6a66b52481f65910950e4ea5a84, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:36:53:03:8a:13:b6:86:98:56:57:ef:81:bb:
                    e1:fb:75:11:09:19:7b:8d:be:21:8b:09:67:be:a7:
                    c6:46:06:81:bb:dd:14:4a:9b:e1:d1:4e:f8:da:74:
                    ec:a3:b5:d5:b5:9e:77:d8:bb:86:22:45:61:96:8b:
                    34:42:88:9c:2e:d6:43:90:7f:a8:1b:18:b0:21:56:
                    0c:99:46:7c:33:da:77:82:d5:f2:81:02:2a:ab:c0:
                    98:bf:c1:bd:e9:00:f5:f9:cb:69:51:60:75:81:b1:
                    bb:f5:5f:f2:52:5b:e2:25:18:17:73:13:54:ec:f9:
                    f1:73:52:43:42:54:94:14:7f:73:47:fc:91:f6:0f:
                    c4:e8:29:87:0e:6f:55:f3:36:2e:79:8d:78:ee:e4:
                    ee:a4:d6:c2:61:ac:58:b1:bc:e0:9f:08:95:b7:9f:
                    5b:9b:df:ef:65:22:2d:4f:83:87:22:aa:5b:55:f0:
                    cc:3d:8d:16:d6:bd:80:77:ca:99:22:f0:a6:c7:58:
                    5b:f6:04:cd:bf:d6:7b:1c:f3:0b:c8:bf:d1:31:50:
                    57:d9:78:8c:ff:0d:82:98:ef:e2:4d:53:e4:04:4b:
                    11:e5:f5:b7:9c:f8:99:12:2a:69:e6:71:a5:f3:22:
                    c9:27:ff:61:f2:29:0d:60:18:a1:15:3d:5d:df:28:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:8C:3F:2D:C9:3F:33:54:74:87:28:BE:5A:4D:17:9F:23:69:EB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/86433272-8233-4231-82ff-92246d0a41a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:ba:0d:d5:05:66:d3:0a:c3:46:83:73:c7:6a:8e:cd:d8:82:
         74:98:90:a8:1e:9c:11:96:24:e0:02:87:0e:6e:8e:50:12:83:
         1e:b5:6c:a1:34:ae:fa:d7:aa:fc:19:e1:1c:a7:52:3a:e1:16:
         3b:84:97:dc:94:be:9c:d5:50:1d:49:d7:52:ba:09:bf:e8:1c:
         a1:a2:cf:56:0d:a1:57:6c:3a:82:8e:aa:dd:5c:7a:ad:19:43:
         6c:a4:64:12:94:00:88:fb:d0:b1:23:70:46:e6:d2:e7:e3:91:
         76:a3:bf:a0:d2:50:4a:c0:48:e1:57:b3:1a:af:bc:c8:a2:2f:
         82:4b:68:4d:be:20:af:78:c4:f6:d5:b5:80:87:c5:ad:55:dd:
         00:c9:3a:d1:9e:88:3f:55:a0:d5:cc:2c:45:52:ef:bf:2e:86:
         90:ae:ca:53:f6:63:8b:86:ce:1b:e0:8a:39:86:3c:1b:68:94:
         1c:29:ee:88:5e:17:e7:d6:b3:3c:3d:f5:2f:bb:89:7e:c4:3e:
         8a:b7:8a:10:b5:62:a7:49:a9:a4:9b:a8:79:ef:bc:31:eb:7c:
         8c:1d:0a:fd:37:08:a7:93:f6:10:54:79:a9:c0:2b:67:32:eb:
         1d:54:bf:4a:f7:fe:6b:e3:cb:bb:bf:be:26:50:e9:37:51:83:
         04:83:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----