Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
File:                     a6c61029-f559-411c-89fd-a1970cac6bc1.roa (raw, json)
Hash identifier:          9JZTZPCMXxZjUMGox2oqdw491IU37pAHq3IeXpeUELM=
Subject key identifier:   15:26:59:32:21:3C:F9:DE:B6:AA:07:FB:F0:CF:E7:5C:37:28:02:8D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       55C0B2A95E17F7451A510C16DCB685F88649B052
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa
Signing time:             Mon 31 Mar 2025 21:00:49 +0000
ROA not before:           Mon 31 Mar 2025 21:00:49 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c0:b2:a9:5e:17:f7:45:1a:51:0c:16:dc:b6:85:f8:86:49:b0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:00:49 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=9eb49d05979edb012a3db02ae0133fae18fe8b754d0cf7790d046c7161a817e0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:78:a8:4e:8f:0a:c0:7a:42:61:1f:24:fd:4a:
                    e3:3c:f3:cc:6f:93:f7:22:82:0a:5d:a5:89:1c:5d:
                    a9:b2:18:99:2a:60:ae:e5:3e:66:70:13:46:46:68:
                    27:a4:3e:cd:7c:6f:5d:76:41:de:3b:db:96:e0:2f:
                    e1:38:28:56:49:7e:35:0d:66:ce:b4:9c:d9:26:71:
                    80:32:78:38:43:ad:64:32:9b:7a:86:8f:c7:f3:b0:
                    3d:be:d7:7c:27:65:10:cc:9f:27:00:e3:8b:f5:09:
                    7f:e8:d3:d0:4f:ab:05:02:8f:4b:9b:ed:12:b7:a2:
                    16:14:ff:d7:c0:cd:fb:d2:1c:3c:df:7c:2f:db:5e:
                    4b:70:2b:16:a4:fe:03:ec:31:a2:2c:b8:a6:b0:eb:
                    5e:b1:c5:50:4c:fa:34:2e:c6:ed:c9:8b:a8:9f:11:
                    ea:bc:3b:41:a5:01:8c:bd:13:9a:ea:c8:e3:ae:00:
                    59:b0:fc:1b:6f:2c:cb:01:90:af:5e:7f:d5:56:a6:
                    1f:80:4d:1f:38:0e:2c:ba:01:94:0b:b1:64:d2:c5:
                    8b:76:db:0a:41:31:f0:90:77:61:42:18:d6:d2:0a:
                    54:7d:e6:7e:9a:92:55:5f:9a:83:1f:78:e9:9f:68:
                    48:13:3e:ed:59:98:ef:6a:3c:89:6c:d5:a8:df:dd:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:26:59:32:21:3C:F9:DE:B6:AA:07:FB:F0:CF:E7:5C:37:28:02:8D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6c61029-f559-411c-89fd-a1970cac6bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:d7:67:6c:7e:df:f5:02:f0:8c:5e:a1:27:2b:66:c1:b7:4f:
         d1:a9:63:8c:b4:7b:c2:36:82:c4:43:ed:30:4d:a0:96:56:6a:
         2a:11:0e:4f:72:64:2f:a7:5e:dc:d0:76:29:22:7d:47:43:cf:
         b1:db:8d:74:d4:fc:f1:d9:34:37:c0:33:e4:f1:ee:b9:f4:9a:
         d7:02:30:88:a6:1e:ab:23:1b:fa:99:ee:8a:95:59:2d:54:27:
         14:3c:7e:3e:a2:b5:ba:fa:c3:79:fb:73:e3:f7:69:e3:80:b3:
         5f:00:a1:fc:27:7f:ed:b9:1b:3c:c7:a3:9e:ca:96:25:6e:05:
         1e:03:91:27:64:0f:04:46:db:8d:0b:ab:6c:5e:1e:e3:64:7f:
         49:1a:70:11:90:84:79:44:6a:67:ff:d2:17:4c:66:9b:c0:42:
         72:bb:97:46:6b:d5:45:92:71:fd:c0:25:41:6e:aa:4a:b1:94:
         e7:ab:96:a0:ed:ea:4a:1a:a4:8f:40:e1:49:43:4f:af:24:59:
         87:42:d5:6e:f2:06:dc:10:d7:90:9f:a8:0f:01:96:f4:ec:80:
         f3:0b:bc:d2:b0:4e:02:de:2e:89:16:d8:c1:f8:b2:df:06:a8:
         d8:01:00:66:f5:e0:cc:56:6a:d3:fb:6d:70:81:d6:ef:a4:53:
         e3:21:f6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----