Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
File:                     b176a187-5863-4413-a001-74ccc0321be5.roa (raw, json)
Hash identifier:          y31Bha+btm4zG8RBXNuO9G4IP2b4EuznhyIQ032e+EU=
Subject key identifier:   F6:84:0C:88:5E:53:A1:2F:1B:BD:34:72:9C:90:0F:FF:57:43:A1:19
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1ADC9A6447525E3F4FA6866D062FCF4BA3672089
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa
Signing time:             Mon 31 Mar 2025 21:20:15 +0000
ROA not before:           Mon 31 Mar 2025 21:20:15 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d02c::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:dc:9a:64:47:52:5e:3f:4f:a6:86:6d:06:2f:cf:4b:a3:67:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:20:15 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=92427b5474ab74c5ed0a5de1c7d0c2113431ae3440585dc76877b71d5bcac849, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:f5:9a:d1:94:05:fd:8c:96:13:37:ac:41:
                    02:87:e7:58:a9:04:fb:9b:ff:7f:0e:22:6a:05:3c:
                    d7:68:d7:da:1f:5d:f8:62:bd:74:02:2e:e8:99:9c:
                    61:b4:f7:f2:9b:1c:d6:86:17:15:8a:8c:80:8e:d8:
                    2f:2c:f2:b7:85:fc:21:57:2c:9f:94:fb:84:9f:5c:
                    1f:19:8b:7b:2b:57:b0:6f:57:0c:4a:53:7d:b0:f4:
                    d4:4a:2a:25:ad:cf:9b:70:37:1f:2c:b6:de:45:aa:
                    91:35:73:53:2d:00:8e:86:87:f4:b2:c7:b0:6d:1c:
                    0c:a3:c6:ca:c3:a2:84:be:e1:e6:59:97:f0:fe:e1:
                    e3:e3:9b:c8:79:15:d1:b0:c6:e9:88:cc:38:02:f7:
                    08:ef:14:f8:81:17:a3:43:51:4c:fa:02:6d:c7:e6:
                    30:09:2d:66:5f:6b:06:b5:3c:6b:05:e5:0f:34:61:
                    e7:e7:42:71:90:50:fc:1d:6f:59:6b:94:3e:a5:e4:
                    1d:7d:a7:ec:d5:72:ce:75:67:68:e9:8c:da:04:51:
                    e5:35:02:3b:cd:24:48:20:9c:6e:7a:e3:dd:ba:61:
                    cd:e4:97:ad:bf:6b:d5:22:01:23:8b:7a:9d:76:42:
                    ef:4f:68:bf:01:9e:da:7b:56:3d:7c:8c:cc:45:92:
                    28:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:84:0C:88:5E:53:A1:2F:1B:BD:34:72:9C:90:0F:FF:57:43:A1:19
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b176a187-5863-4413-a001-74ccc0321be5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d02c::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:2c:7d:5c:a6:20:58:7c:16:95:bd:e9:cf:5f:0c:44:c8:
         38:5f:4c:2e:60:cf:e5:12:5d:3e:08:6d:4e:dd:66:05:f0:97:
         05:0e:c8:ec:03:c5:4b:57:33:e3:7c:40:f2:ea:f0:7f:2b:0a:
         c8:00:d9:24:aa:e4:b5:ac:a8:6b:cc:8f:08:c1:59:14:9e:4b:
         2e:68:de:3f:ab:98:6d:fa:46:46:ba:e9:76:1c:ab:4d:4c:c3:
         17:e8:f7:87:89:48:9a:d5:9b:cf:a2:a9:c7:62:8e:ea:9a:63:
         e3:08:86:8d:b5:41:4d:99:6d:1d:0d:ff:a5:46:05:39:30:c5:
         27:11:c5:40:8c:31:18:29:97:17:d0:bc:74:9d:e4:77:98:a2:
         29:df:25:46:d0:71:f4:da:9a:9c:5f:e9:93:a4:0d:97:2b:ac:
         e0:2a:25:50:06:0c:1e:4e:8f:93:60:d6:2a:5d:79:38:3f:82:
         e1:41:dc:9f:73:02:79:a2:c8:69:90:f9:fa:c9:09:1a:88:ba:
         26:b2:d7:eb:3c:a1:36:84:d3:24:88:bc:73:87:2b:2a:2d:e7:
         db:a9:8d:a7:09:91:f8:f5:b2:c3:ee:4c:22:89:54:b4:7e:a2:
         b6:dc:cb:5d:4f:9d:22:0c:52:77:50:82:6f:d6:05:a3:97:0e:
         58:e4:ed:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----