Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
File:                     a8cd111d-bddb-47e0-af43-fc5a8d930376.roa (raw, json)
Hash identifier:          TOnV/Yx9V8Bkty8P5Ut41O55Gn/7P4v2WJGhgizf+Hg=
Subject key identifier:   C6:19:05:26:54:D9:1C:DA:7F:9C:32:8F:44:D7:17:33:66:24:F5:EC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       298F6407259B574A0338160958A86E53EFFC0129
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa
Signing time:             Mon 31 Mar 2025 19:30:25 +0000
ROA not before:           Mon 31 Mar 2025 19:30:25 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:64:07:25:9b:57:4a:03:38:16:09:58:a8:6e:53:ef:fc:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:30:25 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=cfd11a2c0cb87ba9056ab827ca267b26b0a6b85cb020c4b84a64036466b7a35c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:6c:f0:6a:12:99:3f:f7:27:0b:49:82:6b:
                    56:32:bd:f1:b6:89:4e:e6:4b:bf:ce:88:ad:b5:6b:
                    21:e5:ea:73:56:9b:e2:9a:60:63:8a:47:1f:5b:10:
                    38:4f:4d:93:dd:7a:91:37:42:05:27:e1:4b:64:ca:
                    3e:f7:a7:b7:d0:47:9f:1e:39:71:97:03:62:9f:ec:
                    80:02:30:12:6a:f1:91:1e:15:cd:b8:f7:6b:16:ad:
                    93:ec:bc:0c:c3:7d:6c:4d:40:a9:35:d2:6c:57:0b:
                    a6:1e:ef:82:6a:8d:ba:3c:0c:ab:62:af:f5:db:98:
                    09:8f:02:19:69:2e:1a:b4:9c:56:65:59:90:d1:ea:
                    66:64:62:51:a8:33:67:99:c7:8b:c6:fe:4b:8e:8c:
                    92:15:f0:9d:c6:f0:74:7e:73:b4:7e:23:2b:33:2a:
                    4f:00:1c:4a:d3:e1:b6:3f:d7:d2:05:29:d8:70:88:
                    c8:8b:9e:cc:fa:53:c9:8a:fe:c7:22:ca:d6:18:37:
                    6d:44:cd:44:f8:f5:f4:41:ea:06:fb:12:34:80:0f:
                    f7:09:9b:21:bb:a4:61:c2:a2:6b:22:42:cb:3d:3b:
                    22:d4:7f:a8:19:b0:f4:f7:7d:81:34:4e:2d:7b:1e:
                    ad:76:0a:79:97:96:35:39:e9:c8:5b:81:29:d7:e3:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:05:26:54:D9:1C:DA:7F:9C:32:8F:44:D7:17:33:66:24:F5:EC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a8cd111d-bddb-47e0-af43-fc5a8d930376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:b4:4a:8f:67:a0:65:30:03:1f:11:03:b8:99:b2:a9:bf:c6:
         7c:13:5f:b9:a9:80:54:92:41:d1:6b:a5:a2:91:79:50:01:82:
         59:14:3e:c2:ad:51:c4:ef:6e:3c:d1:51:81:60:c8:c7:70:9d:
         5c:3b:23:58:df:bd:f8:2d:2e:62:9a:4f:e6:3e:9f:cd:9d:c6:
         c4:a0:a7:df:e4:32:38:6f:ab:32:33:8e:2c:e1:6d:a1:ad:13:
         a9:37:f1:9f:8f:5f:cd:13:c8:2e:db:7b:b0:f4:e7:35:9b:0e:
         7a:ef:11:e4:a1:53:37:8d:68:7d:30:a2:e8:a8:e5:8b:15:4a:
         ce:9b:bb:41:53:07:5a:d6:71:f7:8e:09:10:7d:14:e5:77:d9:
         54:cc:5d:30:c7:e2:0a:85:7b:55:c9:13:5c:f1:5f:cb:9f:30:
         df:d1:94:b1:d8:92:d9:4e:6f:26:e8:37:d8:fe:b4:08:f4:b5:
         e7:1f:67:96:66:81:5f:7e:27:d0:22:68:48:d6:5e:b8:a0:73:
         d7:9c:45:4f:67:d3:a5:36:07:36:58:06:fe:4f:4a:83:a8:e5:
         77:bf:2b:c3:69:32:37:cf:de:17:bd:da:e8:2f:48:8c:55:ca:
         9f:e6:e1:58:05:16:a1:f4:e2:36:22:e3:4c:e4:42:54:81:c4:
         94:59:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----