Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
File:                     b8a24699-2493-4e45-8227-bd2ec32f88ab.roa (raw, json)
Hash identifier:          BSmL3i0IYqOzqaw0UQF6oJKVCrjHLveaYIplAtNu/yI=
Subject key identifier:   00:02:D0:BC:34:78:A2:FF:27:89:1B:72:AD:C2:78:B2:42:EC:97:14
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6612F9771C5070A22602047B80FF292655FF5639
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa
Signing time:             Mon 31 Mar 2025 20:01:13 +0000
ROA not before:           Mon 31 Mar 2025 20:01:13 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:10c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:12:f9:77:1c:50:70:a2:26:02:04:7b:80:ff:29:26:55:ff:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:01:13 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=6a472732eee7c0a70aa067495f16b9eb81a3c032b4ca28e29648cf39f02bd6fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:e6:ba:99:7d:64:1f:de:77:10:aa:16:ae:
                    01:bc:30:02:de:81:ee:7e:bc:19:e5:58:e4:c1:7f:
                    1c:02:90:48:f2:81:26:8a:fb:e4:77:e8:cb:ef:e6:
                    ba:2b:f1:8a:0f:52:07:42:71:01:ea:10:44:eb:c0:
                    ac:62:61:a6:57:9b:c9:4e:8a:7f:f5:5b:b1:4a:ab:
                    e1:9b:26:6d:ce:d6:e8:13:92:d1:ae:4a:82:a0:3a:
                    4a:3c:3b:63:94:13:86:9a:dd:32:27:2d:d7:e2:5e:
                    f5:ec:dc:fa:99:f2:eb:24:52:1e:2a:40:0f:8c:59:
                    a9:b8:1c:87:ec:eb:32:1b:64:de:f1:b8:84:b6:b3:
                    e3:7b:5f:6c:55:8e:ea:f4:0c:e8:03:b8:85:49:cb:
                    8c:f6:74:4f:c0:a3:44:21:5e:04:d8:41:25:cf:10:
                    f6:5e:26:3f:8d:83:12:17:f2:1b:cb:2d:ef:ba:93:
                    23:39:1b:69:d1:3d:d4:12:9a:7c:75:5a:fb:d2:80:
                    b3:0e:51:34:eb:4f:af:d3:f4:4f:fe:06:94:1f:a4:
                    3e:0f:43:b2:02:9a:0f:40:99:65:a1:91:e6:6c:ce:
                    27:c8:e2:db:39:ab:bd:65:80:06:6d:4a:66:18:1a:
                    cb:37:4a:90:c6:2c:b7:33:1f:94:28:5f:da:a5:27:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:02:D0:BC:34:78:A2:FF:27:89:1B:72:AD:C2:78:B2:42:EC:97:14
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/b8a24699-2493-4e45-8227-bd2ec32f88ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:03:bb:8a:dd:a2:01:48:a7:5c:99:c9:83:7c:ee:75:32:
         75:35:94:bc:26:e8:29:0e:fe:09:2a:15:02:ca:8b:45:a2:bd:
         c4:12:9b:7f:79:cf:8c:ef:b9:2c:2a:16:5e:fa:10:2b:6c:bb:
         65:d1:ab:8b:bf:a6:7e:60:d3:8e:48:79:83:a7:ac:98:b7:6f:
         fa:08:d3:a2:eb:a6:27:ed:9b:2b:56:da:3f:e7:74:b4:97:38:
         a8:61:0f:86:17:61:a7:fd:8a:65:1f:4c:fb:4c:2c:67:cf:e5:
         9b:87:46:93:7d:2a:2a:d7:46:af:6c:b7:6b:7e:d1:09:aa:ad:
         50:c8:47:ba:fe:e2:81:bf:64:cc:9e:4e:ca:03:11:1e:33:14:
         59:0b:c5:b1:90:e4:50:82:42:58:8e:ee:e9:98:ea:fe:6f:8e:
         cc:6f:69:be:3b:91:80:21:e4:cb:5d:98:c3:d1:0d:d1:30:bb:
         4b:3d:d3:56:90:4d:ff:2b:2b:5d:c4:04:1c:ba:54:d1:97:08:
         cc:71:27:0e:bd:c9:dd:0c:7e:ed:f5:75:29:ab:c0:5e:5b:ae:
         04:a5:0f:40:25:39:3e:a4:9b:84:2d:af:ae:5a:30:98:ef:a8:
         fe:25:dc:07:7e:81:b5:f1:f1:89:a8:b1:98:60:0f:7c:57:b9:
         5b:22:b1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----