Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
File:                     be1170a3-5a68-4c9c-8b51-b7efde64b945.roa (raw, json)
Hash identifier:          xAT9+47VyWrvbslSkp+A1vMWLjPQnqhUFZaLDXwlbok=
Subject key identifier:   6E:97:6E:90:DE:DE:CC:87:68:32:1B:CB:AF:B9:DB:93:57:23:AE:D6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       51862927E6DBE5D27912125709EAB968BA40E4F9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa
Signing time:             Mon 31 Mar 2025 20:40:15 +0000
ROA not before:           Mon 31 Mar 2025 20:40:15 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d071:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:86:29:27:e6:db:e5:d2:79:12:12:57:09:ea:b9:68:ba:40:e4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:40:15 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=c805581c55fbe1ecb1d5be9fe8cb388185f2a7ecb037b5dfa29d2c8ef37755c5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:ad:a8:29:e5:6e:40:6e:d8:ad:69:59:fe:
                    8f:dd:07:33:7f:23:4c:2f:75:50:a1:1a:f0:c8:f5:
                    c5:73:5e:1d:04:5d:88:4c:df:50:2d:97:cf:68:66:
                    f2:4e:1e:4d:aa:c6:b5:ca:5c:c7:8d:09:13:50:bf:
                    23:05:a2:d5:88:2e:8d:81:47:ea:cb:82:7e:81:85:
                    80:27:f5:c1:2d:6a:ed:98:21:bd:3e:9e:46:20:d8:
                    40:06:f4:73:49:e3:f3:2e:65:7d:a5:53:df:be:c3:
                    a6:54:f1:8e:87:00:a6:3c:e7:ab:14:96:97:46:93:
                    ea:f0:71:e5:2f:f3:d9:31:f4:19:1c:b0:4c:42:cb:
                    eb:dc:23:e0:80:09:40:3b:97:54:ac:0b:94:ea:a2:
                    69:0d:b6:7a:22:9a:8c:cd:c6:fd:b0:7b:78:94:b7:
                    8c:cc:8a:02:0b:43:8d:0a:c1:76:b1:af:fc:ab:41:
                    ad:eb:c4:47:c9:11:3a:16:be:0a:a7:83:53:72:3f:
                    e1:ee:12:04:27:06:5c:ea:f6:76:9d:c6:91:0f:ae:
                    db:5a:d9:35:33:b6:50:8c:db:f4:01:60:61:4f:6f:
                    af:25:7d:d0:7f:f8:61:2b:16:03:aa:81:af:a9:29:
                    42:eb:ce:a7:27:41:75:31:df:ca:86:7a:4a:9b:db:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:6E:90:DE:DE:CC:87:68:32:1B:CB:AF:B9:DB:93:57:23:AE:D6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/be1170a3-5a68-4c9c-8b51-b7efde64b945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d071:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:6b:b8:ab:28:cd:95:d5:4f:50:7f:1d:83:95:20:11:53:
         7e:5c:12:c7:06:f8:07:a9:03:2a:0e:9e:5e:91:55:23:f6:d1:
         dd:a6:d7:11:f5:01:7d:b3:d2:99:87:05:61:ac:24:c3:b3:40:
         f9:0c:fa:70:5e:00:06:a0:d3:3f:00:02:5a:e6:10:b4:78:55:
         cf:00:25:17:05:12:55:d8:5f:8c:ba:1b:81:71:e7:08:a9:b0:
         78:9d:6c:8e:a5:89:a5:a3:86:fd:9b:3e:2a:95:ea:12:4d:7b:
         0b:d2:49:9a:f2:23:d0:5c:04:53:43:83:ca:b9:7d:30:73:2d:
         94:f6:ca:b2:d1:91:4e:58:6a:79:1f:a0:5d:d4:ca:06:4a:2c:
         ae:d7:13:f9:74:d1:e2:dd:f9:af:4b:b8:10:16:bf:6d:03:2d:
         36:83:fb:46:64:6f:74:c0:a9:16:46:90:ab:ed:0e:6b:53:33:
         4d:c5:e1:7d:e4:df:4d:8c:56:fa:a7:9d:d7:0a:d4:e2:b9:f8:
         92:43:47:4a:ae:43:59:06:8d:23:72:53:96:e4:a7:5c:c7:91:
         71:64:08:e1:ec:82:70:99:3a:53:bb:e2:eb:57:8a:d8:fe:86:
         f6:a7:8f:7c:44:7a:57:9d:94:71:4d:72:f5:c0:f2:38:19:de:
         03:9a:ac:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----