Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
File:                     aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa (raw, json)
Hash identifier:          x0SD4SAus1y6gxDTIBlNsdieGiUZQVWea67Rt/ozKiw=
Subject key identifier:   0D:2F:D0:88:DB:9A:1D:A2:99:50:2F:42:E5:7C:5A:D6:92:E7:21:95
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0A5109AC6139C0B22235503511CE9AA3AC524B02
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa
Signing time:             Mon 31 Mar 2025 19:21:12 +0000
ROA not before:           Mon 31 Mar 2025 19:21:12 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:9080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:51:09:ac:61:39:c0:b2:22:35:50:35:11:ce:9a:a3:ac:52:4b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:21:12 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=de5444115532817e882e376f187b156fe84a3839bb6881b303c44175df476927, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a4:23:97:7e:77:e1:43:9d:1f:52:10:51:e4:
                    8a:3d:d7:28:ce:4c:96:61:b5:52:02:87:a9:27:05:
                    41:fc:f2:bd:6c:59:8b:d2:50:26:15:d9:58:e7:a4:
                    65:9b:86:bd:af:a5:ba:a2:ee:8f:6c:2f:4a:35:33:
                    fc:04:92:29:b3:07:46:ec:00:f6:f9:06:f4:34:e6:
                    14:a1:18:6f:18:f0:26:3d:e8:5d:d6:fd:52:e4:20:
                    ea:7f:cd:af:18:58:4c:e3:e0:38:95:57:e0:03:93:
                    c0:9b:f5:9b:49:e0:d2:19:8a:b3:58:d0:e1:98:e1:
                    3c:dd:b3:2b:3a:c6:11:00:15:79:28:4b:4f:9c:43:
                    99:7d:fb:bb:ba:7b:99:76:34:3c:9f:ae:8e:1f:eb:
                    0a:74:1b:db:8d:78:10:d0:2c:8d:ad:ab:72:ca:2c:
                    db:24:47:55:35:9a:36:27:5c:4d:c6:26:bb:71:f7:
                    e2:d4:b5:b8:ff:aa:4e:c9:cb:e3:99:7c:30:cf:2e:
                    a0:91:ed:f6:c6:bf:52:12:fc:e2:c9:8f:3b:ea:52:
                    9f:ab:b3:d4:b6:22:fc:d3:ab:8a:af:34:72:54:38:
                    86:55:f6:85:fb:c5:f8:22:1d:fd:69:b8:c8:72:fe:
                    90:e4:ad:08:40:4f:a5:9c:2c:ea:d1:84:fe:03:de:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2F:D0:88:DB:9A:1D:A2:99:50:2F:42:E5:7C:5A:D6:92:E7:21:95
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/aff52575-8887-44f7-8b7f-44fbe4ddcd4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:9080::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:47:85:e1:13:fd:ea:aa:0f:f0:99:aa:cb:d0:a5:03:f9:9a:
         8d:6d:ef:f9:3b:91:13:dd:a1:ec:57:d7:a5:25:8d:23:e1:f8:
         ae:da:38:fe:a7:94:67:fd:4b:70:ee:d8:b7:61:72:1a:e7:95:
         55:84:90:b4:d0:23:31:c6:87:2d:1f:1b:43:e9:e6:d7:37:40:
         e9:df:cb:1f:01:8d:d9:10:cf:0c:ca:e3:cc:2c:78:46:41:d5:
         de:d6:59:20:9b:43:00:74:9a:c3:de:af:04:b0:cc:5a:b3:85:
         77:3e:4b:ce:5a:67:e2:af:86:02:3d:f0:91:7a:ff:14:f7:be:
         c4:89:97:af:32:be:60:53:37:54:68:bc:c1:63:4f:f6:b5:a8:
         17:29:e2:41:5a:8b:6d:f5:2b:58:a4:34:4f:a2:2e:d3:77:89:
         5c:d9:b2:02:18:ac:a2:b0:fc:97:91:f8:a3:c9:5c:a9:ac:3a:
         87:e9:fe:80:02:8a:7b:fd:cc:0c:52:04:49:2f:c0:ca:c3:b5:
         36:2e:46:0f:e3:0b:65:a1:62:74:cc:14:b3:d1:e7:74:07:8c:
         ff:6e:86:b9:5d:55:1e:f7:05:0c:87:95:60:ad:c6:c3:90:62:
         e9:da:df:28:2c:0b:e3:17:e8:bf:a8:dd:24:ac:4f:da:2e:56:
         19:e8:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----