Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
File:                     8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa (raw, json)
Hash identifier:          jhswWqbmDJ2ZjNMvRLwkneaSgBAF28go8bQU9Ajgzx4=
Subject key identifier:   D4:6D:EC:4D:1B:0D:09:8D:FD:53:F6:D1:06:38:16:BF:94:AD:2A:2A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4BE91F2840B1011E6524766ACE9A86C02707134F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa
Signing time:             Mon 31 Mar 2025 19:40:49 +0000
ROA not before:           Mon 31 Mar 2025 19:40:49 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:40c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e9:1f:28:40:b1:01:1e:65:24:76:6a:ce:9a:86:c0:27:07:13:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:40:49 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=fb0c5a53ffc3ed4fa378d0fb4fd39996f9d49da5feeca3ed33cefdd1bbcbd64d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:0f:d6:4b:68:28:b8:f1:48:a6:13:75:af:
                    7c:e4:0d:92:93:c6:d7:04:7c:0a:1c:a0:84:72:e4:
                    da:99:cb:94:1c:fb:11:c5:2d:3a:02:4c:b2:86:7f:
                    8f:0f:83:3b:51:a8:b1:bc:f4:9c:fc:7c:e9:1a:18:
                    16:e9:b2:c4:2a:e3:81:3c:3a:d3:99:bc:54:22:b4:
                    8f:05:fe:c8:48:a6:d4:1f:b8:5e:fa:cf:8c:d1:19:
                    91:fb:59:5c:6f:5e:52:83:2e:a7:29:8d:76:44:35:
                    d1:16:41:35:40:0e:5e:63:bd:67:b8:cf:6c:c8:77:
                    98:fc:62:e9:d2:50:54:3f:b5:20:e8:b2:65:3e:a2:
                    be:0d:64:a9:b4:2d:22:0a:4e:6b:e2:72:b4:0e:c0:
                    4b:48:00:3c:17:c6:d8:86:53:21:f4:4a:a5:bd:a2:
                    a3:e8:ec:ae:bf:dc:0e:3f:95:88:14:41:d0:d0:5a:
                    7d:19:4c:e0:d0:f2:33:60:9f:e3:8e:03:07:81:fc:
                    51:4a:d1:12:b3:5d:60:8d:2c:db:1d:67:2d:c6:6b:
                    ad:a4:25:34:b4:5d:04:f6:c0:9b:49:c4:ed:65:87:
                    41:e9:3c:1e:f5:d7:cb:2a:b8:e3:d9:21:97:23:42:
                    a6:d3:f4:3c:79:56:cf:2b:16:ec:b5:33:14:e8:78:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6D:EC:4D:1B:0D:09:8D:FD:53:F6:D1:06:38:16:BF:94:AD:2A:2A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8b0ccbc1-3638-4f7f-8a24-3f5e181c8b8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:86:9e:1d:5e:a4:44:af:1a:d5:fd:2d:5a:0b:4c:6d:40:
         e2:0c:66:64:c9:de:d4:00:32:5a:31:0e:ee:62:5e:00:6f:8e:
         da:52:0d:05:87:a7:36:47:5e:51:82:2f:4c:73:3e:fc:db:69:
         06:68:16:4b:9a:ad:34:3a:e2:b8:52:48:fa:87:a9:00:85:39:
         5e:d6:34:a9:0b:97:8b:ac:75:33:65:2d:36:47:ed:55:5c:d8:
         8a:ea:cc:6b:9c:bd:f5:73:58:bd:56:88:56:86:be:2c:6d:7f:
         43:04:88:de:44:bb:27:8f:69:bc:a0:1d:3c:f5:ba:66:7e:be:
         9f:44:d3:1b:74:0c:ac:61:f4:f8:e6:5e:f0:0d:5c:a7:70:47:
         51:07:21:bf:d6:8d:fb:d8:36:0b:58:ed:6a:0b:7d:c6:88:20:
         37:1a:12:57:ae:89:00:d4:be:76:d2:7d:be:4c:6b:aa:23:da:
         4f:6b:09:8b:93:c1:2f:c3:9a:ae:d7:a7:13:29:34:2c:7a:de:
         ff:e3:46:a3:5e:78:b9:37:28:31:21:6f:ae:b2:96:a5:b0:c2:
         2a:47:2b:58:36:dd:9f:ed:9c:7f:8a:a4:ea:ed:ab:bf:7f:64:
         36:af:47:e9:1f:66:e4:8c:ec:c4:ce:5b:11:8d:56:fb:03:77:
         de:8d:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----