Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c644691f-ef91-42d0-84d4-c0fcd233d563.roa
File:                     c644691f-ef91-42d0-84d4-c0fcd233d563.roa (raw, json)
Hash identifier:          mSwEhUZI47JOHTGqnobjP72aAVPgNgJ+F+AORddbbc0=
Subject key identifier:   9E:80:34:13:70:54:9A:51:4D:70:E0:55:EC:D3:18:71:7E:2A:4F:90
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       53CAADDBABCF9F9AE94D79AD40B3438F37F41472
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c644691f-ef91-42d0-84d4-c0fcd233d563.roa
Signing time:             Mon 31 Mar 2025 20:41:16 +0000
ROA not before:           Mon 31 Mar 2025 20:41:16 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06e:4000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ca:ad:db:ab:cf:9f:9a:e9:4d:79:ad:40:b3:43:8f:37:f4:14:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:41:16 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=6c02197a57831af980021d9c18ee6297edb48b8ea2037db6081ff9f494214f12, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:a6:87:84:3a:3f:74:61:c7:8a:2d:97:9f:
                    40:2e:90:86:02:d5:28:1d:88:dc:f1:87:48:57:84:
                    e2:61:55:1c:e3:0a:29:f9:2b:2c:ae:dd:0d:e6:a2:
                    bc:2b:a0:14:37:e9:30:2a:40:d7:43:b9:4d:29:d1:
                    68:16:d6:5a:bf:5a:40:14:e1:1a:33:32:8d:1e:7b:
                    05:e7:b5:36:3e:ee:0e:94:2e:b5:6e:bc:67:b5:46:
                    eb:45:1a:5f:5c:14:e1:b0:ca:b1:7f:a7:2d:13:83:
                    93:3e:e8:88:82:b8:47:c4:5e:79:10:fb:1f:5b:76:
                    59:26:fb:d8:4d:57:be:fa:64:30:49:9f:36:bc:e7:
                    28:05:6f:dc:d5:04:ac:66:c2:d8:54:ab:e6:34:3c:
                    e6:e1:c3:eb:c7:53:e1:47:ad:7e:3a:2d:43:1e:96:
                    01:13:0d:00:a9:ae:ca:41:e7:95:30:32:a3:0f:f2:
                    11:b2:18:2f:86:f7:bb:51:f0:da:00:d2:5b:81:ba:
                    fb:fa:e5:ea:5a:af:78:8d:b2:a6:71:fe:b0:be:81:
                    3e:94:05:57:2b:a6:59:2e:aa:79:3c:f9:16:4f:6a:
                    91:ba:78:4f:d9:35:22:cd:5f:81:a2:47:b9:89:1d:
                    87:28:04:47:71:74:3d:1c:ba:34:ac:79:eb:2a:b7:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:80:34:13:70:54:9A:51:4D:70:E0:55:EC:D3:18:71:7E:2A:4F:90
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c644691f-ef91-42d0-84d4-c0fcd233d563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06e:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:77:bc:e3:c6:cb:4f:e7:64:c8:92:73:39:3c:da:e0:52:
         ac:8f:d4:1b:6a:76:b4:96:7a:d5:8d:6c:a5:f3:63:a6:eb:36:
         66:d0:f4:7c:ae:62:6b:5a:e5:81:8b:9d:2e:9c:73:3e:02:41:
         35:49:26:97:32:7b:85:5e:7e:2b:ec:f7:01:28:97:73:78:62:
         0a:2d:30:ff:2f:70:f1:ec:07:79:85:0e:37:04:1d:42:98:35:
         c9:c3:30:0e:f9:e6:a1:2d:2d:5f:22:62:d5:6a:eb:a5:de:e4:
         8c:12:f3:1a:10:a7:f3:26:cf:37:b4:a6:23:36:94:72:70:82:
         2e:c9:49:6f:e3:73:58:be:47:c3:65:c9:fb:9c:f2:28:c8:19:
         4e:5b:40:9f:02:05:51:0a:9d:80:aa:81:9d:f1:ef:d3:63:e9:
         1b:1b:26:93:24:8c:37:b0:ae:ce:24:d6:c0:c7:31:72:54:fc:
         fa:46:8f:a4:e5:09:ef:11:7a:8e:7f:04:45:18:5f:a6:fd:28:
         5a:41:d7:02:5f:8b:16:03:1b:be:3d:2b:8b:cf:05:19:95:62:
         5e:e8:9a:da:77:7e:6e:a5:97:d2:2b:65:ea:7d:e3:dc:cd:78:
         6b:a9:57:0b:cb:89:99:e4:b6:b8:df:7f:e1:cd:e5:d7:a8:98:
         2c:24:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----