Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
File:                     a6c6065d-431b-4a4f-98c4-f607358ee480.roa (raw, json)
Hash identifier:          v/Xo6vQ5sqJZfieLRtaSjH000cy2CX1fEqhTIPQssFw=
Subject key identifier:   50:BF:B7:2E:88:B9:5F:BA:92:40:47:B8:20:FA:5D:D7:1D:58:8A:D9
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2D62EADC68611329A4FD41622F0358442A58327F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa
Signing time:             Wed 02 Apr 2025 00:30:33 +0000
ROA not before:           Wed 02 Apr 2025 00:30:33 +0000
ROA not after:            Wed 07 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:c000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:62:ea:dc:68:61:13:29:a4:fd:41:62:2f:03:58:44:2a:58:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:30:33 2025 GMT
            Not After : May  7 23:59:59 2025 GMT
        Subject: serialNumber=2728bff9d9b0004f20bc496d1f7a8e30bb83e5c6f717098f1422c88a440f70f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:eb:61:41:af:2a:f9:8d:0e:83:9e:86:a5:
                    8c:00:4e:a7:dd:db:a3:f2:ad:ae:d8:14:6a:d3:e3:
                    e1:88:d8:18:56:cc:2f:2f:d6:e1:7d:cf:e9:3c:1c:
                    7e:ae:6f:a6:34:02:c8:e2:f5:c2:08:19:0f:9a:70:
                    71:90:bf:5a:5a:e1:1b:62:64:9a:7c:f7:a6:f3:01:
                    c6:cd:45:0c:6f:fc:93:95:b1:27:0a:7a:3e:73:95:
                    f6:58:0a:e1:b6:26:e4:ce:78:42:d2:c4:fd:c9:69:
                    a9:db:22:1e:aa:37:a3:2c:56:c2:c7:75:b9:cf:72:
                    d3:9b:68:87:ac:99:dc:50:f9:a5:35:d0:84:98:e5:
                    8a:9d:34:de:4e:62:86:16:c6:33:48:1a:da:d9:f3:
                    c3:23:01:94:c7:2b:0c:2b:fb:d2:9b:9c:9b:f3:7c:
                    e4:3c:00:36:30:0e:2d:f9:ba:6c:7b:6a:37:98:8f:
                    b0:79:a9:98:42:85:05:5e:08:d2:9b:fb:ea:a2:0a:
                    3b:ea:f3:dd:c5:88:2a:7b:49:23:d5:35:44:80:40:
                    1b:66:72:f8:f7:b1:86:d4:1e:fc:58:47:f3:c2:85:
                    94:0c:0e:ad:5c:35:e7:2e:e3:ca:6e:0f:aa:f6:80:
                    74:1f:2d:e5:b1:b1:82:00:ac:ac:e7:17:23:ef:c0:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:B7:2E:88:B9:5F:BA:92:40:47:B8:20:FA:5D:D7:1D:58:8A:D9
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c6065d-431b-4a4f-98c4-f607358ee480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:66:58:09:14:1e:21:51:b2:82:0c:92:b9:18:5e:ad:c0:
         49:f0:82:e9:8b:93:da:b8:8a:7b:9c:02:e7:3e:05:ab:71:6e:
         54:b9:a0:6e:c7:48:bb:57:ae:1a:15:76:ba:a9:7a:13:af:76:
         a5:91:fc:94:63:33:6e:7b:c9:0a:3d:d7:ef:2e:cd:ef:77:4e:
         1f:62:24:c6:61:b1:ac:95:dc:61:09:34:c3:43:ee:a5:42:e3:
         f3:24:a9:87:15:e0:d4:82:a0:de:fc:ca:a3:03:3a:6f:0f:2a:
         21:a4:58:d8:18:ed:0f:05:6c:03:b6:08:fb:04:c2:6f:d2:83:
         2c:4e:ab:d5:e0:92:d9:d3:56:fd:cd:f5:35:7f:0a:d5:7d:fb:
         ee:f3:11:de:fe:46:d2:f2:c5:d2:4c:af:55:f5:48:c1:01:77:
         9d:56:91:79:aa:52:0b:40:b5:1e:36:3e:3c:ff:67:fb:1a:ec:
         d8:af:e4:dc:c2:ae:34:35:fd:09:1b:3b:13:7a:cd:ae:36:c7:
         34:0d:1d:11:a9:58:ef:af:55:4a:cb:4d:e9:e9:af:40:80:32:
         cd:f7:5d:74:51:67:bd:03:64:ca:84:8c:9e:b0:54:3d:fa:4a:
         78:49:94:4f:e7:05:4f:24:f5:f5:67:7b:ca:c4:65:4f:16:a9:
         49:44:83:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----