Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
File:                     ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa (raw, json)
Hash identifier:          kZB+qa19aLKe6AUEV3wR8D0x72IlrZMVo6BHvQ6VIRg=
Subject key identifier:   CD:71:EF:27:48:BB:E3:2A:C3:13:A5:08:78:4D:42:6C:68:45:8C:FD
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       614624F62A5601ED7553226F216959C7A17FB765
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa
Signing time:             Mon 31 Mar 2025 21:10:53 +0000
ROA not before:           Mon 31 Mar 2025 21:10:53 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d011:800::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:46:24:f6:2a:56:01:ed:75:53:22:6f:21:69:59:c7:a1:7f:b7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:10:53 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=804cfb3ac748f5e7434b4100c54c23ac37355e2889113593d14d405d1fc2bdaa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:4f:65:03:8f:6a:8c:16:0e:2f:41:55:05:
                    66:62:fb:7d:ac:8b:4b:b7:6f:e0:e4:46:5d:25:72:
                    0a:6c:6f:09:40:b6:49:11:dc:06:71:b0:0d:de:68:
                    52:aa:03:b8:19:78:c9:3f:e0:c5:29:da:1e:59:87:
                    fe:0a:46:70:a5:d2:4f:24:24:9d:f2:f1:96:10:d4:
                    aa:b8:cc:ae:3a:eb:44:68:b5:0f:23:13:08:ee:85:
                    9b:a3:2a:94:5a:85:5d:27:f5:b5:10:8e:9d:6a:63:
                    e7:8a:88:7b:5c:d7:f1:ea:e7:09:3f:6a:5a:bc:cd:
                    cb:e3:4a:66:24:03:6b:df:d2:46:e6:7c:57:62:31:
                    68:58:f0:13:84:f4:93:57:fb:93:c7:9c:59:d0:bc:
                    c6:18:9f:ea:5e:86:14:50:0a:64:b4:79:f1:d9:c4:
                    67:0f:50:e5:64:12:b9:31:9a:ce:09:15:5c:40:09:
                    ac:fd:40:65:51:49:01:40:a0:9c:fc:20:08:1d:69:
                    20:5d:ad:11:a9:99:67:30:68:c6:3e:ae:e5:2a:7e:
                    98:d7:2d:f6:53:06:ea:3c:83:13:ae:62:d5:57:1d:
                    02:4c:31:6e:61:bc:9d:39:07:60:76:af:c5:cb:bb:
                    a3:31:10:63:e2:1c:49:90:9c:03:c9:89:34:7f:60:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:71:EF:27:48:BB:E3:2A:C3:13:A5:08:78:4D:42:6C:68:45:8C:FD
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba0e6993-e9bd-44c0-aa48-4765708e5ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d011:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         1b:4e:07:8a:1e:72:10:fd:a4:bd:0b:b3:b1:ee:7c:ea:25:a8:
         16:2f:44:b8:41:a3:2a:0b:07:28:6e:2b:6c:cd:f4:a0:60:4f:
         f4:46:59:b0:99:e2:3e:ed:f7:e0:4e:b6:03:c8:f0:a3:b5:df:
         42:ec:dc:72:07:c0:07:5d:23:f4:0f:de:c6:51:d3:6d:33:60:
         33:cd:cd:a1:68:3b:59:fa:71:4d:b5:31:dc:d0:ab:bc:d4:d9:
         d6:23:db:9b:0a:95:70:07:41:80:9d:a3:ab:e9:37:e1:46:76:
         c8:ef:be:e2:28:5a:d3:0f:3d:03:3c:0e:0d:82:23:50:a4:42:
         7a:30:dc:e4:d0:63:61:cd:40:92:f3:03:00:55:33:39:f6:6b:
         ee:9e:94:b0:eb:45:d3:37:69:a2:4f:07:12:79:fa:c1:39:57:
         18:a6:e6:63:71:0e:f2:c4:11:af:82:f4:c4:34:98:17:39:ba:
         57:3f:fd:5b:1d:23:42:08:19:38:27:51:e1:02:81:36:c5:74:
         d9:61:85:89:08:3d:e2:fa:98:ad:dd:ac:31:bf:dd:ba:65:26:
         9b:fc:91:63:57:ef:ba:65:7b:e6:a6:36:c3:60:0e:62:11:d9:
         1a:d7:16:31:b5:ba:58:7a:da:e2:05:4d:10:c0:53:e8:30:2b:
         64:be:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----