Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
File:                     b3515426-a058-439f-a8fc-e68eaafc8806.roa (raw, json)
Hash identifier:          qGvy/ZYo0gSi4FsF3SyccowxsNKT5VncKaTSCRenxGQ=
Subject key identifier:   95:AC:99:44:24:1F:BB:01:D7:73:22:08:81:95:28:AF:6D:51:B5:AE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       77883F625DE5AF9B0717D95EC55BE72CB9AE48FA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa
Signing time:             Wed 02 Apr 2025 00:30:05 +0000
ROA not before:           Wed 02 Apr 2025 00:30:05 +0000
ROA not after:            Wed 07 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:8000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:88:3f:62:5d:e5:af:9b:07:17:d9:5e:c5:5b:e7:2c:b9:ae:48:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:30:05 2025 GMT
            Not After : May  7 23:59:59 2025 GMT
        Subject: serialNumber=3dfff7eb81b68bdf7c36b4ca7e2b3dd48f3149e559b0be40fc894a3a6e9c6233, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:a3:60:ff:12:09:8f:65:b6:a9:ce:40:a7:
                    f2:ea:84:2d:ed:91:1a:6f:e0:71:7f:f3:1c:6a:09:
                    ab:1c:9c:87:92:42:08:dd:d4:a0:c3:fa:10:f0:08:
                    da:06:e3:98:d9:4e:a6:c5:7a:a6:1b:ae:ae:d4:e1:
                    24:3b:96:ce:f3:48:73:f0:c5:49:48:c4:bf:24:ee:
                    fc:95:cf:1b:5a:74:c1:00:dc:66:51:36:97:1b:7e:
                    b3:f8:a2:b5:d1:ab:ad:79:8c:ce:b9:a9:01:f8:32:
                    d1:e6:c8:32:7b:67:1a:b4:75:4c:d5:23:5d:4e:b9:
                    9f:fa:ae:a9:ae:fc:d4:35:fd:54:33:db:ec:2d:8c:
                    38:ee:3d:69:ca:19:1d:ef:2e:e0:b1:cb:df:b5:1c:
                    e7:97:2d:ab:3e:03:40:a8:2d:e7:16:43:d4:ed:2c:
                    73:61:08:2d:3e:f4:51:ac:3e:23:a9:58:41:10:d4:
                    43:e6:8f:7a:42:44:56:71:f3:99:9c:f7:b3:b4:cb:
                    45:28:6d:ee:44:67:50:59:1e:18:6d:70:b0:11:6a:
                    b3:19:06:b3:d6:8e:0b:53:46:ca:37:0f:dd:a4:6f:
                    d5:1d:74:86:43:ff:81:c0:b9:e5:52:04:99:62:48:
                    ab:86:ba:fd:7a:0b:9f:55:00:63:69:50:c6:a2:86:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:99:44:24:1F:BB:01:D7:73:22:08:81:95:28:AF:6D:51:B5:AE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b3515426-a058-439f-a8fc-e68eaafc8806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:92:53:11:fd:ca:d5:29:4f:56:98:48:a2:8b:8e:65:fb:67:
         9c:0a:cf:e9:25:ec:e9:8c:b1:69:14:a7:6c:b9:3d:2a:70:b1:
         74:3a:9d:be:ef:de:66:36:07:54:98:34:22:4d:a6:3f:b6:a0:
         a0:15:2b:ec:d7:d6:5b:2f:f6:3e:b0:28:2d:e6:a6:19:ff:0b:
         02:e4:1b:31:87:3c:c4:ef:3c:49:40:48:19:ab:07:f6:67:d2:
         4c:6c:26:b8:73:35:86:3a:c0:38:93:ae:77:a7:86:93:2e:f0:
         2e:8e:a6:36:76:a9:6b:1d:57:e8:13:7b:b8:a9:80:e8:59:87:
         2c:9c:08:4b:16:72:95:a7:74:1f:a5:a5:71:24:9e:e1:9a:ca:
         80:82:10:a5:18:92:12:51:eb:32:ff:4c:64:ba:65:07:0d:3b:
         cf:48:04:f9:00:5c:cc:a0:86:e8:02:05:15:47:c0:da:31:1d:
         24:ef:31:bb:34:20:25:e8:f3:f6:ae:f0:48:c8:68:63:ee:a6:
         89:04:6c:fe:b0:b0:80:1b:f5:7c:95:56:bd:a6:a3:61:0d:38:
         6b:32:0f:e6:c4:9f:68:12:cb:4d:bd:2c:0c:8a:54:10:6c:f3:
         9a:cd:ef:be:c1:1b:6e:2d:7f:30:ae:b6:c1:44:44:4d:6e:ef:
         e1:3e:21:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----