Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
File:                     8e492412-994d-4c48-a29e-9082ebce3349.roa (raw, json)
Hash identifier:          sMoKSrodhg/m8WeL4V8k+T1q39i+TwYNzRleFhesMt8=
Subject key identifier:   E4:AB:DD:8B:24:40:97:2F:7A:20:6E:5D:D5:47:94:08:EA:DF:6C:2E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3BA647B187B426C7E23D7C0837A4A893FD7EC229
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa
Signing time:             Mon 31 Mar 2025 20:40:13 +0000
ROA not before:           Mon 31 Mar 2025 20:40:13 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07a:8000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a6:47:b1:87:b4:26:c7:e2:3d:7c:08:37:a4:a8:93:fd:7e:c2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:40:13 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a160b1720a672f36839c7be8a0b1cb7132f27a611a68a5f1fc918b401f948242, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:e9:0e:7e:e0:9c:30:1d:fb:31:d0:cc:6e:
                    25:9d:8e:bb:ec:14:fd:ea:06:d7:8d:f3:20:dc:e3:
                    f0:4e:0c:d3:c6:29:e0:7c:a9:f7:06:1f:69:f4:11:
                    3b:9e:b8:9f:1c:fe:af:ca:0b:5a:f1:fd:34:8d:08:
                    1a:68:2e:25:75:22:b3:ef:b0:28:fa:53:9b:4d:ac:
                    fd:4b:21:8e:06:37:f4:3a:95:73:b0:96:91:6e:81:
                    57:27:a8:41:50:eb:2c:7d:77:db:a9:6b:a6:d0:ec:
                    6a:61:7b:40:c4:f3:d1:21:58:c9:4d:3d:f2:9f:47:
                    9d:c4:bb:46:0b:08:6f:59:86:37:5c:f4:57:05:9c:
                    78:77:b6:d9:e3:18:cd:ec:ae:54:e7:b0:42:71:43:
                    16:d0:29:7e:84:1e:a7:99:a7:75:80:42:70:91:91:
                    d6:a2:22:fd:e5:04:85:35:86:4b:05:4f:8c:4e:da:
                    dd:9a:2f:d5:8b:de:a5:30:09:61:6e:76:80:ed:f2:
                    fc:34:1f:2a:00:c0:1e:d0:a5:4f:92:98:36:71:5d:
                    0b:44:da:15:34:6c:95:f8:e8:5d:b5:08:00:a1:24:
                    d0:fa:f9:51:8e:f6:63:3b:d6:9c:a1:d5:8c:8d:c2:
                    6a:cf:01:eb:40:79:ba:17:29:ec:c3:7c:19:b7:b5:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:DD:8B:24:40:97:2F:7A:20:6E:5D:D5:47:94:08:EA:DF:6C:2E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8e492412-994d-4c48-a29e-9082ebce3349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07a:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:84:b1:d0:5f:29:53:01:0a:2a:05:ee:77:9e:36:e3:74:ba:
         3a:31:b1:c5:d7:7e:b6:8d:41:26:89:f2:8d:53:cb:16:ca:d1:
         48:4d:31:91:3d:a4:9b:6b:cc:f9:95:23:11:63:c2:84:1a:4f:
         8d:c6:7a:ae:a1:b1:f4:64:e3:66:2d:ad:62:2d:7c:a4:19:a3:
         51:dc:be:8d:52:35:59:57:fe:49:f9:13:75:30:57:fd:40:4e:
         55:3c:b3:ad:ea:21:b9:2c:4c:bf:11:22:a5:ec:88:37:95:9d:
         3a:8b:c5:ea:68:e6:dc:20:5b:b1:6f:25:88:01:8e:7f:07:87:
         a3:9f:f7:21:8b:ac:4e:1a:2d:38:73:b2:1f:88:98:25:db:8c:
         2b:fc:99:f5:94:1f:1d:f9:b0:ad:b7:c9:09:28:8b:62:40:f4:
         45:5c:bc:9a:cd:50:0e:87:3a:4a:d8:37:3b:5f:eb:32:2b:9e:
         a8:22:76:59:31:8d:be:ad:28:1e:98:26:56:bf:0b:98:d2:7c:
         eb:5d:27:2b:eb:55:7d:f8:b0:d4:b1:53:d7:de:7c:e5:ac:00:
         2b:a4:6b:4a:42:99:c9:41:96:19:64:b7:8c:34:bb:f0:27:98:
         8f:de:e6:5c:e6:f8:cb:ba:68:01:eb:c9:db:47:26:b3:d9:12:
         a3:77:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----