Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
File:                     ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa (raw, json)
Hash identifier:          z31kmC5ukc35wxWnjScUNWz5khGjKm5w1F5PvUdU2Sg=
Subject key identifier:   DD:B1:90:CC:F9:C9:2E:E6:83:8D:D9:6A:6A:60:CF:B2:13:D2:54:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       95B0E56E1FD35171F3F0725D9A1339A390FD7A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa
Signing time:             Mon 31 Mar 2025 20:01:15 +0000
ROA not before:           Mon 31 Mar 2025 20:01:15 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            95:b0:e5:6e:1f:d3:51:71:f3:f0:72:5d:9a:13:39:a3:90:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:01:15 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=a70714973c8abc29d7025ac45504437ed4b392904b44997f851fdfaa3482c75e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:11:f8:00:0f:66:b6:90:fe:c5:cb:4a:b0:9d:
                    df:a5:1d:b7:5e:93:a3:1a:7e:3a:81:17:a0:99:d8:
                    cf:a4:41:3a:82:23:f2:65:58:1c:a5:91:c2:1d:15:
                    9f:1d:2c:99:2f:64:47:27:ac:a5:37:2b:c5:03:a4:
                    d1:8e:c2:71:72:f3:0c:aa:f6:fc:5f:55:6a:ef:30:
                    5e:db:86:88:ed:2e:d7:32:6b:b7:c7:5f:54:1b:31:
                    6b:a6:a3:67:7e:cd:5f:4b:64:b2:38:ae:f0:7a:ae:
                    db:7b:11:8a:b9:86:b3:e2:55:6f:3e:01:43:de:18:
                    bc:27:b7:b6:68:36:7e:99:65:a0:67:da:c4:a3:b3:
                    ca:e3:8d:2c:96:69:b6:07:f1:11:dc:20:8b:0c:7d:
                    2d:3e:32:4e:56:79:9e:4d:45:0c:b5:03:f5:34:1b:
                    14:d2:a4:fe:14:e0:a0:6c:ca:ff:57:ef:78:86:24:
                    d1:82:b6:24:c7:f5:19:41:8e:0e:63:e2:d3:6e:7c:
                    cd:2f:92:90:ae:e1:89:7f:28:a1:20:5a:fd:a5:fe:
                    c3:97:60:6c:4c:11:0e:e3:b8:01:11:aa:d2:3f:e6:
                    ba:56:47:d7:55:ab:49:85:d0:06:5b:5a:77:cb:18:
                    6b:68:ca:11:32:c7:97:29:dc:2c:20:f8:a1:ad:b2:
                    4b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B1:90:CC:F9:C9:2E:E6:83:8D:D9:6A:6A:60:CF:B2:13:D2:54:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ca3f4d11-dc6b-4a82-be61-68f1d7838f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:ba:91:fd:b2:9a:27:ba:2c:fe:ea:90:22:9c:48:c8:14:de:
         70:81:3d:53:76:7c:78:40:6c:7c:5a:84:1e:42:58:6b:56:b0:
         e9:83:f0:a4:5a:a6:cd:e8:8b:d3:35:49:8f:bf:24:c6:34:90:
         6b:a7:4d:2a:ed:c4:d9:6e:29:b1:9f:e6:e3:48:31:93:a5:91:
         31:52:1e:89:a7:17:1b:7f:f1:9f:88:a6:f9:4c:36:dc:00:2e:
         96:e8:3d:71:68:de:cd:ef:e7:b9:1d:22:7d:ac:fa:82:ac:dc:
         db:96:52:f3:cf:a7:e8:5a:87:41:c0:8f:32:30:df:a6:62:65:
         c6:96:f3:59:fb:bd:16:9a:ef:56:e5:14:e2:a8:c6:21:df:84:
         7c:fb:e1:ac:a0:e6:9b:90:cc:e3:e0:99:3b:96:35:52:d7:e4:
         51:df:80:ca:1f:0b:68:d4:3f:e8:99:55:df:e5:df:06:09:1e:
         cb:28:a5:d1:42:f5:6b:59:e1:f3:c0:6c:f8:31:c4:d7:e9:32:
         19:a8:5f:c9:ba:32:25:3f:bd:f5:55:59:37:31:94:45:76:0f:
         ce:98:9c:03:29:a6:92:62:8d:d2:9b:02:99:2a:6e:a9:0f:e3:
         fd:6c:da:5e:03:41:4d:48:6e:a3:63:c5:93:0d:1e:a6:54:23:
         a3:11:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----