Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
File:                     9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa (raw, json)
Hash identifier:          3OukYGoR7JoqC4LoWoqL7RPqBzWpJP/BX4RKAD2+/7U=
Subject key identifier:   ED:21:03:DB:08:12:19:46:95:A7:A7:96:5E:EC:7D:41:21:68:80:65
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0DDAE142596AA9A825A174F9BB730CF5919363F8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa
Signing time:             Mon 31 Mar 2025 20:01:29 +0000
ROA not before:           Mon 31 Mar 2025 20:01:29 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:9040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:da:e1:42:59:6a:a9:a8:25:a1:74:f9:bb:73:0c:f5:91:93:63:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:01:29 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=d0c0d504c135f99f42bcd93c402185268463d1b544f1d52866fd74457ed0157f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:c7:5f:60:4a:de:7f:f0:07:52:e0:d0:50:
                    f5:ea:86:db:8d:71:85:77:80:12:ce:32:54:b4:34:
                    5d:8a:fc:00:09:1d:3e:bf:4c:69:5d:00:5c:5f:f3:
                    81:f1:cc:df:af:eb:04:cb:88:c4:c2:51:16:d2:b1:
                    b1:3f:d1:0e:c1:87:c4:5e:19:00:a6:b9:00:85:ab:
                    71:ca:16:d9:c7:aa:3e:26:07:b6:15:c2:18:6f:50:
                    e6:b3:11:53:8e:f4:7c:11:39:de:8c:34:96:4e:0b:
                    f9:75:5f:0d:34:42:7e:f0:e1:37:d5:a8:b8:1a:b8:
                    6a:f2:9e:3e:e7:b9:97:10:2e:e7:a1:76:28:2e:84:
                    e3:24:ca:35:87:86:f9:f4:33:0c:7f:d1:9f:73:65:
                    a2:26:4a:7c:43:9d:2c:c4:3b:50:dc:81:20:65:fd:
                    5e:01:b4:b1:d1:54:38:cb:94:9f:fb:fd:aa:6b:8a:
                    ac:f7:ff:fc:77:eb:e5:07:d4:e6:14:a8:0f:73:64:
                    9b:4e:4a:ef:15:09:89:c9:32:c7:51:e7:f6:b3:49:
                    94:81:46:6d:03:41:50:41:1e:17:39:4c:a0:85:b4:
                    74:8b:9c:ac:36:19:59:b5:07:89:f5:d1:0e:3b:bd:
                    c7:cf:b0:d0:05:99:3e:24:0e:00:d9:0a:00:be:5b:
                    c3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:03:DB:08:12:19:46:95:A7:A7:96:5E:EC:7D:41:21:68:80:65
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/9207595e-3bbc-45f7-8f0a-813e1b01f9a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:4f:c8:75:08:34:79:42:b0:94:90:ad:5f:f5:19:40:f6:
         49:14:ed:77:66:30:cd:7f:7f:8d:8e:3d:f6:d7:da:ae:e2:f8:
         f2:ab:e4:67:ad:03:e5:50:f4:51:b3:98:af:f6:c7:a3:e2:8e:
         5a:23:a8:3b:e7:a3:25:21:b1:24:a3:21:f1:cb:19:b7:45:d1:
         c2:63:84:13:81:cd:05:fd:00:7a:54:cb:7b:4c:46:be:18:1e:
         4e:c8:1e:e6:2f:33:85:1c:34:87:76:13:e8:7b:4b:67:1f:e3:
         47:55:29:8d:bf:64:f5:62:8e:ed:09:ad:97:c1:2b:bf:95:bc:
         b6:e3:b6:aa:8c:6a:0e:e2:b0:f2:63:d9:68:a6:04:6c:38:f5:
         43:cf:3e:fa:8c:92:6a:e7:0f:dc:1d:25:ed:53:e5:a3:5d:13:
         b6:47:4e:e2:db:e9:37:77:f2:bb:9b:09:5d:c7:99:91:44:e4:
         11:5e:24:7c:85:6e:20:51:42:df:1e:c8:79:26:09:b4:e6:b3:
         eb:50:88:dc:67:f1:0f:f1:60:32:90:be:69:7c:02:af:8c:4e:
         d0:18:00:ed:c8:dc:e1:a2:7b:1f:8f:b8:46:18:86:a5:60:ed:
         e7:1e:68:5b:1b:18:55:a6:52:a4:86:2e:23:cf:a4:03:cd:da:
         29:8f:31:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----