Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
File:                     b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa (raw, json)
Hash identifier:          NaG4eqFR9K88I6Pg+1Qx6v9j3fgWQ7IvbpzANflr8gg=
Subject key identifier:   4A:7E:3D:CA:EE:81:C2:80:8A:7C:0A:B5:E1:62:DC:9D:A6:7E:95:06
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       084489865D2F1172356AF0678698A72826CD49F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa
Signing time:             Mon 31 Mar 2025 19:40:17 +0000
ROA not before:           Mon 31 Mar 2025 19:40:17 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d074:5040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:44:89:86:5d:2f:11:72:35:6a:f0:67:86:98:a7:28:26:cd:49:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:40:17 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f227707fcce4886b43c93c959109f441217fe8994a1639fc5b160c661d7d73f0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:99:e7:d3:10:dd:0a:2c:08:17:1e:82:b0:
                    7d:99:33:ae:ec:af:5a:0d:3a:32:b5:f2:45:8a:c1:
                    9e:ff:7c:b3:94:2f:1b:9a:78:3b:c3:ff:b5:9a:1f:
                    40:a7:97:78:00:41:9f:c1:51:2d:cc:46:31:3e:07:
                    46:55:f1:62:8e:82:50:93:6d:a3:07:55:82:99:ef:
                    0e:e3:cc:92:ae:92:65:b4:8c:e9:a2:34:4d:28:0e:
                    eb:dc:3b:96:62:59:21:80:bd:b1:3c:b6:48:7b:0c:
                    e9:b5:8f:3d:43:83:9b:67:11:61:49:12:78:40:58:
                    12:4c:4b:61:fb:40:0c:4a:c4:67:78:f1:b1:bc:0a:
                    bf:e8:9d:76:f8:1a:08:8d:c5:af:95:18:55:cd:4a:
                    c8:89:52:db:0e:1e:29:31:f5:dc:f3:50:49:2c:92:
                    cc:5b:d7:f6:e4:d5:df:84:a0:94:c1:12:97:9f:bc:
                    9a:5d:ef:57:e1:17:d6:d1:d0:29:f3:4b:36:f6:72:
                    af:15:aa:8f:f4:e7:43:c8:da:3d:d3:d7:32:b8:e9:
                    cd:0c:c9:22:8b:01:31:f4:30:89:75:c1:fb:90:cb:
                    e8:6c:e5:97:8a:0a:04:f0:ea:04:8e:34:f2:37:b5:
                    7e:78:30:b3:38:e5:cd:96:37:be:da:60:75:39:d2:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:3D:CA:EE:81:C2:80:8A:7C:0A:B5:E1:62:DC:9D:A6:7E:95:06
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b5d84c54-c2c8-424e-8ae9-879a4fa44dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d074:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:00:d3:d0:3e:8e:08:d7:16:06:d4:b0:b1:0f:a3:ca:94:3d:
         c2:18:da:20:28:bb:4f:83:f9:47:15:74:b0:c4:ef:64:6e:58:
         2a:28:54:76:47:f0:37:6b:24:7a:7d:48:30:35:0d:4d:b1:92:
         1e:23:15:da:85:7e:b4:18:20:ce:3e:ae:f8:3a:3a:54:c7:71:
         ff:94:2c:b1:dd:b6:fb:a5:06:f0:ed:41:fc:dd:ab:f9:bc:4f:
         85:60:78:a4:2c:b7:79:95:1e:de:a3:47:c6:df:80:6e:52:eb:
         68:db:47:f2:46:30:36:6e:ad:33:d5:d9:e2:fb:af:37:69:11:
         26:8e:89:15:60:da:de:85:7d:d6:8f:c2:bf:db:8e:15:d9:85:
         de:be:4d:4b:9a:15:bf:ca:8f:74:f4:61:64:06:2e:ca:47:bf:
         70:cb:03:3d:df:d8:35:cd:79:6e:1d:2a:ef:89:66:3c:79:ad:
         6f:55:07:1e:95:f8:8a:77:4d:0d:9f:e3:9a:5a:91:7d:3b:5c:
         1f:43:62:ec:bf:2f:84:94:60:f7:ad:63:96:28:b4:d7:4a:aa:
         f3:d4:e5:6e:b5:0e:0f:4d:8b:f9:63:c3:1f:6e:d7:83:c0:f9:
         38:63:45:d1:51:a3:f4:8f:c9:e2:4e:66:cc:32:58:56:a9:f1:
         b1:38:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----