Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
File:                     a6ca14a4-0087-442a-b673-75cc23375cdf.roa (raw, json)
Hash identifier:          zL2Wues0Z+TrrXaIJuGMm3DT4eQcu6hbORBWWeZAA7w=
Subject key identifier:   34:E7:D9:C6:15:C7:59:13:48:3F:F8:B7:F3:DD:7B:00:2E:D7:9C:15
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       58226ADBC55ADDBCD70320CFB5B870A9FCC906D3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa
Signing time:             Mon 31 Mar 2025 20:10:53 +0000
ROA not before:           Mon 31 Mar 2025 20:10:53 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:9080::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:22:6a:db:c5:5a:dd:bc:d7:03:20:cf:b5:b8:70:a9:fc:c9:06:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:10:53 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=9899cbc79a590bd6ecbc791da423698c62723c5e6067b237e2c9c2b2dcbcfe02, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:35:06:16:c8:3f:3e:f3:48:61:b6:5d:69:
                    48:86:11:20:b2:d4:2e:fd:82:ec:55:ac:bf:e8:ff:
                    dd:95:0a:be:03:08:db:4e:4d:11:d3:51:8c:40:4b:
                    08:3a:df:5d:57:3f:44:f0:67:3f:60:a1:ce:91:ef:
                    37:c2:5b:c0:1d:13:27:9b:08:f1:68:4b:76:48:27:
                    ab:0c:78:68:28:0d:3f:07:33:69:00:24:6c:c5:a2:
                    a9:85:06:8f:48:09:57:3d:e3:a6:e4:ba:38:72:5d:
                    e3:df:e7:db:4c:c4:04:af:7c:7b:fd:dd:4a:9d:11:
                    88:cb:11:fc:ba:82:df:26:7d:00:e7:70:68:e4:11:
                    44:c1:fe:dc:bd:c9:da:77:de:6b:29:56:58:26:2f:
                    09:66:e6:6c:2c:b9:0e:8b:34:0b:b7:e4:01:26:0c:
                    ea:04:dc:a8:16:b8:f8:61:0c:cd:8d:72:c2:e1:75:
                    a5:7d:d0:09:c9:1e:3c:ec:85:87:54:ff:bb:2f:90:
                    27:5f:36:50:ea:51:6e:1a:5c:ea:df:87:4d:f5:82:
                    d7:4b:52:9d:df:a3:77:df:92:fe:e6:8b:9d:5a:ed:
                    e5:4d:e9:33:8f:9f:0d:b6:9f:fb:58:40:44:e6:54:
                    ae:47:5b:46:f3:c7:a8:c2:ac:28:c1:f2:76:5a:6a:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E7:D9:C6:15:C7:59:13:48:3F:F8:B7:F3:DD:7B:00:2E:D7:9C:15
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6ca14a4-0087-442a-b673-75cc23375cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:9080::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:df:c7:4c:20:e7:dd:49:61:a3:b7:24:73:ca:b1:5f:23:
         38:58:0a:79:e4:bb:2a:0c:22:21:bd:09:bd:e3:82:6d:72:70:
         a2:ed:94:31:40:4a:09:19:b9:ef:39:93:32:b5:0e:d0:69:bf:
         d9:10:83:8c:df:75:58:c8:7d:db:46:23:0b:19:9c:de:ba:ec:
         bf:3b:0f:d2:da:f1:da:ce:96:40:c3:ac:8b:c9:48:d8:9f:f5:
         5a:87:02:3a:3d:03:83:ec:c4:5f:62:da:16:f5:41:8e:10:0c:
         e7:7d:ff:72:e8:5a:87:23:50:7f:09:0a:16:a2:5c:16:80:68:
         ae:1d:2d:73:aa:8a:03:b8:e3:4a:e8:44:a2:30:2d:9c:15:ba:
         87:ef:e2:db:39:75:0b:01:f9:d1:df:71:ef:60:20:ef:90:bf:
         67:7c:cf:1e:70:f0:dc:d4:b2:c5:ab:f6:e3:ee:29:b3:be:08:
         bb:b7:99:09:16:35:7c:fb:ab:e2:1c:9d:e9:5f:ac:47:63:f3:
         82:2a:e4:1b:ca:35:a0:cb:ad:76:35:f2:f3:89:fd:38:c1:b7:
         61:0c:33:1a:e9:b5:57:01:a7:d7:6f:37:18:d9:b5:11:ab:ea:
         35:bb:2a:31:9c:15:30:98:8e:34:c6:f8:60:9d:43:94:9f:dd:
         71:ab:46:33
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUWCJq28Va3bzXAyDPtbhwqfzJBtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMDEwNTNaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk4OTljYmM3OWE1OTBiZDZlY2JjNzkxZGE0MjM2OThjNjI3MjNjNWU2MDY3
YjIzN2UyYzljMmIyZGNiY2ZlMDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJuyNQYWyD8+80hhtl1pSIYRILLULv2C7FWsv+j/3ZUKvgMI205NEdNRjEBL
CDrfXVc/RPBnP2ChzpHvN8JbwB0TJ5sI8WhLdkgnqwx4aCgNPwczaQAkbMWiqYUG
j0gJVz3jpuS6OHJd49/n20zEBK98e/3dSp0RiMsR/LqC3yZ9AOdwaOQRRMH+3L3J
2nfeaylWWCYvCWbmbCy5Dos0C7fkASYM6gTcqBa4+GEMzY1ywuF1pX3QCckePOyF
h1T/uy+QJ182UOpRbhpc6t+HTfWC10tSnd+jd9+S/uaLnVrt5U3pM4+fDbaf+1hA
ROZUrkdbRvPHqMKsKMHydlpqt60CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQ059nG
FcdZE0g/+Lfz3XsALtecFTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
YTZjYTE0YTQtMDA4Ny00NDJhLWI2NzMtNzVjYzIzMzc1Y2RmLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0HeQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAL/3fx0wg591JYaO3JHPKsV8jOFgKeeS7Kgwi
Ib0JveOCbXJwou2UMUBKCRm57zmTMrUO0Gm/2RCDjN91WMh920YjCxmc3rrsvzsP
0trx2s6WQMOsi8lI2J/1WocCOj0Dg+zEX2LaFvVBjhAM533/cuhahyNQfwkKFqJc
FoBorh0tc6qKA7jjSuhEojAtnBW6h+/i2zl1CwH50d9x72Ag75C/Z3zPHnDw3NSy
xav24+4ps74Iu7eZCRY1fPur4hyd6V+sR2PzgirkG8o1oMutdjXy84n9OMG3YQwz
Gum1VwGn1283GNm1EavqNbsqMZwVMJiONMb4YJ1DlJ/dcatGMw==
-----END CERTIFICATE-----