Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa
File:                     bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa (raw, json)
Hash identifier:          JRPStsiUViA8r7k4qDUxZsxQ/CJnVC/uxKJVZq5ijZA=
Subject key identifier:   2C:CA:37:7A:E7:BC:E1:B2:50:65:CB:F0:DF:FE:75:E7:52:61:83:51
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       59104BA364BE3829A731BDC15FDFF06BCFA5EFB0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa
Signing time:             Mon 31 Mar 2025 20:20:12 +0000
ROA not before:           Mon 31 Mar 2025 20:20:12 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:c0c0::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:10:4b:a3:64:be:38:29:a7:31:bd:c1:5f:df:f0:6b:cf:a5:ef:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:20:12 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=5ffb7ea22f116d6be1418f22c0e67962d790d7a54c5b6c0551a769bcae101a60, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:85:13:3d:ad:2d:b9:e8:50:90:a6:81:9d:
                    1b:15:b5:3b:ab:b1:b5:14:4f:39:aa:55:1f:e2:6d:
                    84:67:42:86:19:b8:e6:c5:5f:23:82:41:2e:53:39:
                    1b:c1:01:7f:8b:87:55:0c:26:5b:3f:13:ec:0b:cd:
                    fd:57:cd:c1:dd:9e:92:fc:e6:65:8c:c5:25:42:f0:
                    3b:f9:9b:60:c0:72:9b:93:f0:43:32:d1:45:ab:b0:
                    42:87:36:a1:fb:67:f9:42:bd:b8:69:46:86:b3:4e:
                    e2:a6:5b:0c:f7:ea:a9:17:fd:75:52:e2:24:70:c3:
                    ed:9a:28:23:0a:21:3d:0b:37:e1:03:9f:db:36:98:
                    d8:88:d3:cc:21:bc:57:c2:93:09:81:b7:96:32:68:
                    b7:be:39:b5:a1:c8:d4:56:df:61:48:bf:db:90:35:
                    1d:6c:53:1c:15:d8:51:19:74:7f:99:4c:bc:66:dd:
                    6d:61:08:73:fe:95:05:14:c7:10:1f:27:9e:fd:e1:
                    d7:e7:aa:ff:e2:cf:05:e0:a3:56:70:f0:0e:b8:d7:
                    5c:48:63:98:66:1f:a7:13:71:41:ea:f8:ec:45:ad:
                    6e:b6:75:78:a1:a8:45:e3:8a:c6:92:43:f1:53:b3:
                    0f:c1:8c:02:89:b8:cc:70:8c:18:f1:d5:3e:56:d5:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:37:7A:E7:BC:E1:B2:50:65:CB:F0:DF:FE:75:E7:52:61:83:51
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bd2e1e8c-032c-4ce2-be27-6b9391bd9722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         00:2f:9d:e3:74:66:49:56:c7:ca:32:c8:ff:fd:64:36:53:29:
         77:72:77:0a:90:ee:8e:86:c7:16:e1:39:b5:5c:b6:7b:80:8f:
         eb:9d:0c:5c:a4:37:b4:41:f6:27:0f:82:f3:d4:e0:ca:fc:69:
         d5:7c:9c:eb:5d:02:e2:f7:0a:ec:1c:df:e5:e4:34:0c:19:c3:
         6c:7b:db:6d:a7:c9:ab:b9:fb:b6:37:8f:82:a5:9c:2f:f4:5a:
         cb:be:c5:45:a7:f9:6e:5f:55:e5:a1:a7:c7:9e:45:dd:b6:36:
         0a:81:7d:06:6a:0e:03:10:14:77:d1:78:cc:fe:0a:d5:c0:2d:
         a3:96:c0:5b:97:17:c7:51:a9:71:77:f5:58:0c:c3:9a:4f:8b:
         9b:f4:27:1a:e3:03:92:30:6a:11:c5:17:60:56:35:99:b6:70:
         74:b3:78:31:b9:74:ee:fa:12:96:e9:87:e9:67:6a:7c:7d:0e:
         f7:4e:06:a1:6a:b2:2a:c8:ec:9a:d6:01:86:31:52:6c:14:17:
         b3:0e:30:b6:16:5b:02:4b:6d:2e:30:65:e5:05:da:e4:82:59:
         f1:81:27:58:bf:b1:e9:12:72:24:3a:4f:d8:2a:20:f4:ef:45:
         93:b8:ac:96:50:41:14:1b:2d:2a:e7:e9:33:08:a4:ae:2c:1a:
         58:b8:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----