Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
File:                     87ec9982-c725-40e5-b829-ff0f06d939c8.roa (raw, json)
Hash identifier:          bR8FtXcdDnyLL9Is7z2S/Nlxgb81jzwsYbzcbLI3BV0=
Subject key identifier:   41:D3:E7:18:78:2F:04:16:70:A9:0A:4D:EC:62:8A:1A:39:A2:F9:0D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3D9CBD07653D6920455DB023B8BD31376E33FD2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa
Signing time:             Mon 31 Mar 2025 20:40:17 +0000
ROA not before:           Mon 31 Mar 2025 20:40:17 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d058:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:9c:bd:07:65:3d:69:20:45:5d:b0:23:b8:bd:31:37:6e:33:fd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:40:17 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=df7637686ec537fc0e75e3438d1db12af439d142273455c5c42898a103c06e1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:5b:95:e8:36:2c:d0:36:be:1e:d9:23:d6:
                    1f:cf:08:15:5e:21:b2:af:8d:e9:35:36:0c:7b:29:
                    cd:bf:3e:5b:72:7c:0f:4b:de:bf:b3:40:74:fa:02:
                    32:1e:7b:c8:e8:7c:99:89:df:0e:a8:2a:4e:98:d6:
                    ce:02:8e:83:7f:14:5a:04:42:fb:7f:1c:c0:ee:e8:
                    97:e4:f6:70:92:c3:e8:ec:68:82:19:56:79:35:6c:
                    41:cc:af:3f:f6:ba:42:c5:55:df:b7:fc:78:4d:fa:
                    e1:61:cd:de:b0:e2:2e:c8:78:1b:ce:80:ce:a3:9e:
                    2d:71:93:e3:34:36:c9:4e:56:9b:49:f1:11:86:e2:
                    cd:bd:fb:b2:02:de:99:a5:12:dd:55:02:a4:a3:cf:
                    53:49:97:5a:82:2c:2a:6f:f0:86:7c:61:09:55:77:
                    44:4b:6a:dc:17:0d:97:7a:54:06:78:7d:3c:ce:11:
                    b8:ab:1b:6e:6a:07:d0:da:2e:07:57:be:1b:e9:d4:
                    8f:8d:73:43:81:be:e7:8f:ac:4c:20:dc:36:d2:50:
                    9c:80:67:7d:d9:36:bb:55:82:c2:69:dc:99:a0:2e:
                    ae:0c:f0:df:63:99:c2:86:63:04:18:2a:73:5c:b0:
                    5d:e5:60:c8:97:1c:a4:ad:32:52:00:6f:af:21:c3:
                    25:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D3:E7:18:78:2F:04:16:70:A9:0A:4D:EC:62:8A:1A:39:A2:F9:0D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/87ec9982-c725-40e5-b829-ff0f06d939c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d058:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:fa:0e:b1:07:0b:4a:68:04:cc:18:3e:fc:73:c1:e2:90:aa:
         99:95:5a:88:8c:8e:f8:42:af:92:6a:bd:1d:ad:13:4d:1a:a6:
         82:4b:44:a6:be:0b:85:25:fc:a8:f4:b3:b5:52:70:32:13:d8:
         9c:ae:d9:24:96:2e:77:e8:6b:40:ac:ea:65:79:18:c6:aa:bc:
         bc:bf:60:12:8b:a8:dc:7f:1f:f0:47:bb:7c:5c:40:03:ad:8b:
         af:b8:58:dd:d0:b9:b9:46:80:9a:89:d9:07:10:a5:57:bc:bd:
         54:3c:be:37:cf:7f:69:00:20:fe:74:f5:20:79:6b:24:93:cf:
         9d:41:1c:64:21:70:8e:0e:d9:de:72:25:1f:44:e2:f4:f0:12:
         02:35:be:48:e7:76:9c:52:21:3c:c6:89:9a:34:24:8b:ef:3c:
         76:ba:39:9a:81:ec:9d:93:1e:04:f3:af:81:1a:4e:6e:fa:da:
         17:fe:c8:01:29:e0:c2:c8:ad:73:bc:70:41:28:ec:54:e9:43:
         f4:2d:1b:5d:62:2d:8e:79:e7:08:d4:05:12:5b:56:ab:9f:6b:
         27:b7:c3:b1:49:72:f4:b8:65:b0:b0:2a:51:ed:87:ef:6c:04:
         de:c1:9b:07:af:85:db:95:6a:bd:ea:97:90:92:c5:2b:96:cd:
         7c:b3:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----