Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
File:                     bdd33562-2653-4549-84dc-25f96aa10a83.roa (raw, json)
Hash identifier:          bQwwSe/Ba+U4wWv1MFW9tjOgsbl9y9eV07sS42c4+XI=
Subject key identifier:   6F:9F:58:55:05:EC:6F:8E:CA:4A:E7:2B:E8:55:BB:A7:20:13:5B:F5
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4D5D465FF6CF84A6C539BE729EE1F535E88F145C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa
Signing time:             Mon 31 Mar 2025 21:20:20 +0000
ROA not before:           Mon 31 Mar 2025 21:20:20 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d021::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5d:46:5f:f6:cf:84:a6:c5:39:be:72:9e:e1:f5:35:e8:8f:14:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:20:20 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=160fb3c1c79b20d89d21e18ef0834ad4523192263b110d75afee999229d1f2fc, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5b:d4:e5:2a:50:87:5c:a7:a6:b9:2d:be:9b:
                    50:35:c7:2c:e8:a2:0e:15:ac:c1:e6:d7:f3:44:3c:
                    23:58:16:cd:ba:52:fe:5e:a8:4b:f5:9f:d9:89:f7:
                    2c:ff:c8:95:2e:fb:98:ad:17:97:4d:f3:c2:d1:4a:
                    94:fa:cc:07:39:b4:0e:46:f5:b1:5f:26:ab:a0:11:
                    75:b4:b3:04:84:e4:ae:40:08:d0:c9:11:31:8b:f1:
                    95:fb:b8:95:e3:38:47:b2:81:ce:ed:8b:61:ff:16:
                    1d:82:5c:b4:15:57:0f:5e:1e:c8:ac:90:7b:b2:27:
                    3a:e5:96:71:f5:18:ad:67:d9:e5:54:bd:af:b2:01:
                    11:c6:cf:96:f5:87:a3:e6:2a:aa:82:ea:23:fe:5e:
                    c6:d3:f6:06:6e:da:51:5b:07:77:10:08:9d:43:93:
                    25:3b:3e:c1:04:1c:e4:74:42:b7:2c:19:17:4c:77:
                    1b:c4:9b:8d:32:ba:c4:80:27:eb:ed:88:59:76:b1:
                    74:5d:d6:53:44:45:d5:3e:c2:b1:68:17:68:da:4d:
                    da:fe:d6:4e:1d:3b:ab:6a:ae:60:56:b8:e9:10:a2:
                    b7:f6:49:36:4d:52:c5:23:8e:b3:1a:d3:15:7e:9d:
                    47:47:66:92:0a:4e:6c:49:90:f1:2b:cd:9e:88:e7:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:58:55:05:EC:6F:8E:CA:4A:E7:2B:E8:55:BB:A7:20:13:5B:F5
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/bdd33562-2653-4549-84dc-25f96aa10a83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d021::/36

    Signature Algorithm: sha256WithRSAEncryption
         80:87:b9:77:cf:0c:8f:ff:02:d4:e6:3c:90:45:ad:9d:86:ac:
         fb:5d:a4:55:7f:73:43:41:04:1b:5a:4f:1c:e2:c4:e5:10:08:
         21:04:1c:2f:f1:99:21:06:aa:3d:0a:82:07:36:d7:3d:52:10:
         ae:5a:03:65:77:92:76:04:73:2c:5d:5a:c5:ea:f9:9a:db:b3:
         ba:fd:05:ed:d4:51:0b:9e:b3:44:99:6b:55:b3:4c:5c:64:ce:
         c8:f7:0e:6d:13:92:ac:86:e0:bd:51:0f:60:9e:30:eb:dc:77:
         cb:96:86:02:33:d3:48:bb:9d:00:bb:38:24:aa:41:71:47:ee:
         6e:8f:a8:e1:64:e6:92:82:c2:ac:bf:fb:d9:45:a2:ca:f1:bf:
         e8:d7:3d:9d:3f:79:d2:1c:ce:52:83:a8:39:16:2a:cf:00:6c:
         b3:7b:17:58:65:3b:b0:5e:51:6a:53:e7:1a:d5:09:d3:9e:c8:
         b1:96:0e:16:10:2c:0c:6f:9c:23:ad:ef:30:67:d9:41:66:4c:
         7e:85:c0:87:88:a9:47:ec:5f:e8:89:6e:e9:74:f2:f0:15:c0:
         56:78:4c:1a:98:02:b2:8d:b2:38:07:34:6c:82:2c:d5:b8:8a:
         88:c0:46:94:93:4f:0a:b6:28:6f:82:b4:47:38:b7:48:1d:43:
         31:dc:ea:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----