Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
File:                     c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa (raw, json)
Hash identifier:          RIqAmLCWUiOdzrS1H/Zwrfg+8b8gSB7+RO0SZNNaAjw=
Subject key identifier:   36:58:8F:8A:4D:96:BE:03:AC:2F:7A:F5:E0:E1:E1:01:B8:4A:DB:31
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       440559A73EFC3C0F939A0E43FCBC9C7DFD99CD2D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa
Signing time:             Mon 31 Mar 2025 20:51:10 +0000
ROA not before:           Mon 31 Mar 2025 20:51:10 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:05:59:a7:3e:fc:3c:0f:93:9a:0e:43:fc:bc:9c:7d:fd:99:cd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:51:10 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=7721551448780388ac0fd441554fabbe19737b59546160e5176c2eea202d9080, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:ea:90:e8:cb:0e:d3:0f:f7:71:c2:b2:c6:
                    d6:66:9c:dd:f4:af:0f:d8:ed:43:94:ea:95:bb:a5:
                    f2:31:51:ef:64:da:18:44:7d:cb:17:52:34:75:3f:
                    1c:2b:3a:56:eb:35:87:b5:39:c2:15:fa:84:5b:b6:
                    d0:31:de:a2:8a:56:73:c1:f8:ee:51:49:10:d7:4b:
                    6a:56:53:04:46:88:ef:39:4f:ea:67:56:0a:8b:19:
                    6b:d5:37:58:cc:f8:f2:f3:95:55:d1:58:c0:be:51:
                    dc:5f:01:69:3c:89:92:af:f9:db:24:93:39:91:af:
                    3d:b1:42:8b:54:c4:b8:bb:08:50:ed:df:b6:e2:db:
                    07:bb:2c:fb:e5:ac:7c:af:7a:ab:a1:79:55:55:fc:
                    f0:d4:c3:43:f3:f5:fa:b6:54:81:e5:04:4f:12:cd:
                    77:68:c1:ef:73:f8:2a:85:30:1e:1c:33:c9:be:41:
                    16:00:6e:35:ee:91:ca:b6:c1:66:64:54:5d:af:dc:
                    7c:a8:2f:9f:48:02:fe:57:4a:47:bf:fd:a3:07:99:
                    0a:29:cc:16:42:b4:59:36:f4:76:ac:b0:8d:2a:d8:
                    ff:27:0d:44:50:4f:f9:44:2d:06:f5:9b:6e:78:35:
                    17:f1:15:41:2b:6d:29:6e:83:4e:7b:ed:da:c3:b0:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:8F:8A:4D:96:BE:03:AC:2F:7A:F5:E0:E1:E1:01:B8:4A:DB:31
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c6a5acff-b5d8-4c80-9ecc-9415406576f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:e3:85:e1:63:bb:2a:9c:88:1e:cc:b8:39:27:37:0b:62:71:
         47:bc:c1:62:9c:07:47:21:c6:36:5f:b2:5c:6b:70:1c:f5:92:
         77:b4:ae:d8:cd:b0:b5:5a:2a:8f:58:04:5f:c8:44:79:23:05:
         1b:ff:2d:1d:13:5e:0d:fa:4b:5e:02:6a:e9:07:53:00:b8:03:
         bb:be:87:51:2e:0d:0e:41:fe:f3:da:a1:68:e7:49:51:cc:d5:
         a8:7e:dc:fd:13:1e:8e:19:03:f0:3a:69:3b:4e:da:c5:1d:60:
         86:dd:0e:af:2f:59:68:4b:d5:e1:b3:4e:a6:57:c7:38:d1:e3:
         71:2e:d0:3f:9f:0b:bc:e5:fd:57:72:8b:18:2d:45:06:76:02:
         8e:97:ba:e7:42:5b:c4:20:b0:65:a1:4a:97:cc:7c:1a:39:1d:
         8c:2b:60:fc:62:03:38:be:5c:b8:3f:9d:91:47:77:68:d2:9a:
         2e:af:0e:a8:19:0b:14:3c:20:84:9d:e1:29:df:de:5b:1e:f3:
         14:c5:ec:88:08:da:dd:c0:f2:30:62:9f:62:ab:c2:a9:93:f8:
         88:f6:4c:37:d3:3c:21:78:d2:91:32:55:47:84:86:f4:f9:60:
         a7:05:56:e0:8c:66:5f:4b:b4:f1:e9:b5:5b:4a:85:73:f6:63:
         7a:18:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----