Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
File:                     ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa (raw, json)
Hash identifier:          6zo8lunzdBjE0ieuZ3QgszKeoEAu3GzZCoHqx4zgAoc=
Subject key identifier:   03:4A:A8:23:22:39:AC:8F:B4:E7:F4:13:B9:10:D3:56:36:35:A7:1C
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2D461C7D99A761C887875C17B768A2EB3211037D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa
Signing time:             Wed 02 Apr 2025 00:30:38 +0000
ROA not before:           Wed 02 Apr 2025 00:30:38 +0000
ROA not after:            Wed 07 May 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d06f:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:46:1c:7d:99:a7:61:c8:87:87:5c:17:b7:68:a2:eb:32:11:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  2 00:30:38 2025 GMT
            Not After : May  7 23:59:59 2025 GMT
        Subject: serialNumber=2f4993a75b9f5c4229728d9f960608b623f5adc3a9b434dfbbc13db3436ab529, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:3a:a3:ef:7b:26:75:93:d6:48:3b:3b:1a:
                    42:7b:5a:c0:1c:09:f3:5c:b8:7c:83:26:7c:8d:1c:
                    2b:5b:70:e5:f3:9b:ea:8e:f9:93:e8:a4:88:e7:53:
                    c7:1b:5b:19:4a:b1:18:b8:7a:dd:cc:ba:b3:ee:b2:
                    98:e5:84:98:79:04:d5:7a:a0:53:69:ae:cb:5e:40:
                    42:2a:13:ee:6c:b6:05:2d:b5:c1:99:16:20:d4:61:
                    f1:25:16:63:23:8f:7f:e7:23:c4:3d:d5:56:c7:3f:
                    0e:c6:27:6d:e0:46:1d:6e:ed:d8:be:71:bc:b0:e6:
                    c7:e5:8f:e2:12:c7:47:fd:e0:ce:71:5d:8c:0a:1b:
                    6b:6a:d6:a3:7e:e2:26:74:b0:3b:e1:1d:57:65:2a:
                    62:24:0d:d7:8c:da:95:2a:6f:45:00:fc:1c:a4:af:
                    a0:91:ac:c9:85:69:cc:1b:26:48:c6:a4:3b:5b:e5:
                    60:87:f3:b4:65:7a:a8:81:e6:3b:70:08:37:5d:9b:
                    ea:8e:9f:e6:28:bf:b7:eb:1b:21:a5:17:e2:66:48:
                    e8:a9:1f:f6:f5:dd:68:08:c7:ef:aa:ff:37:ea:88:
                    32:70:7d:59:ac:48:71:be:7c:02:69:11:eb:24:1a:
                    a3:7e:64:b0:52:46:b4:c6:ad:7a:fb:de:08:68:17:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4A:A8:23:22:39:AC:8F:B4:E7:F4:13:B9:10:D3:56:36:35:A7:1C
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ba2d5a01-fa17-4fb3-97e7-c21c6e89f9fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:15:48:f7:63:94:70:2b:d8:fc:54:67:74:90:7c:c8:63:5a:
         d8:31:ea:7f:44:1a:0b:ff:78:35:66:98:cf:ee:75:84:04:75:
         ed:66:d6:62:a0:96:5c:92:99:9c:29:14:fd:95:ea:6a:31:ad:
         66:bf:92:ad:b7:73:b7:2a:1e:b5:7f:d1:10:e2:58:e1:b8:ea:
         4b:6b:2d:ce:bf:ed:a9:00:bf:cf:a8:ea:b8:0d:82:ee:b9:f9:
         ae:0a:de:d1:e0:c6:ce:95:c0:2e:48:ba:13:60:bd:19:e3:db:
         e0:62:74:56:1c:13:46:30:78:09:28:cd:e4:7c:30:f5:1e:2a:
         9a:78:bf:6d:4e:bb:dc:c7:4a:32:41:b4:5e:c2:0f:8b:8b:9c:
         4a:a4:24:81:c7:31:22:0b:52:a6:f0:63:cb:c1:08:19:1d:0e:
         e4:89:eb:74:17:52:32:f8:7c:75:7c:7f:5a:61:e1:7e:8c:c7:
         0e:23:28:74:e2:31:74:dc:f3:89:65:31:44:4f:a7:51:b1:0c:
         1b:ed:f3:4e:f3:78:74:ee:d5:d3:08:e4:dc:b1:16:cc:f0:42:
         8a:81:d0:3a:f5:77:77:a0:94:c3:ac:7c:9f:10:4a:18:91:0b:
         af:3c:59:6a:d4:f2:54:ba:33:d6:f4:ff:1f:d6:45:90:e0:9d:
         69:27:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----