Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1c4376-0fb0-4887-b90e-22d84c8cfb7c.roa
File:                     ab1c4376-0fb0-4887-b90e-22d84c8cfb7c.roa (raw, json)
Hash identifier:          u8S/HdC08jirygBwlfy9nZH9lqa7QF7YZ4qfyma/vok=
Subject key identifier:   05:FB:D5:1D:D9:07:A7:B4:F7:FF:3E:4B:6D:CC:1B:D7:F8:EC:CC:94
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       477493E2FEBB2AE8B6E63B6AD79DCEDB9F6B567F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1c4376-0fb0-4887-b90e-22d84c8cfb7c.roa
Signing time:             Mon 31 Mar 2025 21:20:03 +0000
ROA not before:           Mon 31 Mar 2025 21:20:03 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d027:800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:74:93:e2:fe:bb:2a:e8:b6:e6:3b:6a:d7:9d:ce:db:9f:6b:56:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:20:03 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=cdbf006baa352e0441ea5ccee30e23d5cf1c067178568f1a98c58027902b6a42, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:82:c1:78:e0:83:22:aa:8b:1a:5c:01:fc:
                    63:f8:90:47:de:35:20:8c:e8:ba:16:f9:42:49:21:
                    c0:d6:a9:f5:ad:15:1a:27:e2:c7:ca:5e:c2:7b:bc:
                    39:09:f0:c2:07:4a:89:d3:90:0d:34:b9:e6:ba:93:
                    d6:c0:2d:9a:1a:b3:58:f2:6f:fb:22:ac:b0:9a:8a:
                    d7:38:db:b4:84:4e:3a:d7:35:54:7a:2c:14:78:0c:
                    5c:01:96:07:03:2d:e0:89:be:20:75:20:e6:0a:75:
                    18:d3:67:5c:ae:2f:3e:84:01:65:9f:46:8a:ad:de:
                    98:ed:3a:e4:28:ea:a7:af:e8:1a:6d:8c:47:8a:95:
                    db:f6:ac:44:bd:b3:54:46:e6:d7:ea:36:48:c2:59:
                    b4:cf:7a:46:d4:73:ff:54:68:dc:ed:99:a5:91:4e:
                    ea:6d:5c:e1:6c:94:e4:8e:92:d5:3f:b8:40:f6:32:
                    c6:f8:b1:93:0e:b5:fa:fb:c5:79:f1:87:34:d1:c4:
                    a4:4b:93:30:f8:a4:13:0d:05:73:a5:ff:e5:0a:e1:
                    17:32:16:d7:c6:90:bd:86:46:89:aa:92:16:39:8b:
                    5b:38:96:4d:7b:74:eb:f7:99:f7:0b:f2:59:5c:eb:
                    c5:4c:db:8f:a4:92:d9:bf:57:48:23:bb:93:64:ee:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:D5:1D:D9:07:A7:B4:F7:FF:3E:4B:6D:CC:1B:D7:F8:EC:CC:94
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ab1c4376-0fb0-4887-b90e-22d84c8cfb7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d027:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         5f:31:2b:7c:91:08:d0:a2:f3:04:01:21:5b:c8:d9:e8:1c:9b:
         04:1f:43:09:35:78:7d:12:d3:19:78:50:fc:f6:d7:29:08:e2:
         d1:b8:13:bf:88:aa:8b:16:c3:46:d9:c2:81:71:6c:09:ba:46:
         ee:b5:a1:18:69:27:ea:e3:63:a5:6c:f1:ef:28:0d:f7:ca:f2:
         85:9e:fe:1c:27:3e:35:cc:84:e0:cc:17:17:13:5e:53:ef:80:
         cd:90:0d:5b:f7:52:ee:12:3c:cd:62:f4:50:2e:68:b7:cc:45:
         67:c7:8e:39:b9:48:c0:4c:88:c3:5d:a1:7f:a1:a6:6b:51:6f:
         18:17:fa:b5:5b:36:5c:3a:ba:94:01:dd:7d:52:3c:5a:08:fa:
         f8:fb:ff:81:3c:4f:36:20:73:8f:ac:af:c8:50:ab:a8:be:61:
         f4:90:f3:ff:6b:49:f4:1b:bb:e2:3c:34:d4:82:3f:00:c6:f8:
         a9:2d:50:a7:63:0f:b4:0d:30:46:a3:46:30:e0:0b:49:0c:2f:
         c6:53:64:13:35:46:d9:f0:80:de:c0:ac:4d:94:b6:c8:ff:0b:
         ff:ac:e7:49:d2:d1:8b:35:cf:d1:5d:b3:2a:5e:cb:83:0a:91:
         23:bf:03:28:b5:59:4b:3d:a7:a5:7c:8c:bb:f7:01:3b:de:88:
         90:c6:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----