Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
File:                     cdc11efb-9ca2-4459-b55a-43b03e67b183.roa (raw, json)
Hash identifier:          B2dFiWyl6I+iESSZbdTfLnYC+izCPo8Lh7wwbQTG9Yw=
Subject key identifier:   34:DF:9A:68:E8:39:03:E8:95:64:78:4F:A1:15:C0:95:78:7B:ED:5E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2AC921FE02814202222DCFE00A7C9EC16DF943A0
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa
Signing time:             Mon 31 Mar 2025 19:01:21 +0000
ROA not before:           Mon 31 Mar 2025 19:01:21 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        176.32.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c9:21:fe:02:81:42:02:22:2d:cf:e0:0a:7c:9e:c1:6d:f9:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:01:21 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=73aec639599811b759bedacbf100733917be179ed91a05db8153ee00a05e27d2, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:21:75:f7:61:40:cd:8a:a4:08:0b:39:a8:
                    b7:cc:b4:85:8b:0e:0f:03:35:4d:fd:50:85:61:d9:
                    8f:6c:da:f4:1a:a6:7c:31:9f:3d:ca:5b:a7:99:d2:
                    17:be:23:8f:b0:40:6d:c2:12:04:93:d4:6a:50:1c:
                    be:3a:b8:73:4d:d4:e6:a2:68:fa:f7:6e:ef:dd:4b:
                    40:ea:09:88:76:f5:0d:79:a2:ef:ee:20:e6:6c:d9:
                    bd:a4:c5:e1:b2:c6:c2:4f:94:84:40:ef:4d:86:4a:
                    35:a4:76:f7:21:ad:ca:66:5d:30:8a:81:51:8e:1f:
                    2a:00:57:f2:65:75:72:9d:89:5c:74:3d:27:3c:9c:
                    96:6d:04:69:6e:d8:d9:d6:60:7c:c2:a9:11:1a:d3:
                    d9:2b:fb:82:53:56:7d:a3:97:0e:63:61:1d:cb:08:
                    eb:65:ac:e0:93:4c:73:80:71:1b:1d:9e:cc:19:4f:
                    05:a2:be:09:25:2b:f5:6e:32:ff:15:4c:b9:bf:a3:
                    6a:cd:12:9f:cf:f4:0f:b7:96:13:bc:8f:86:fc:94:
                    a1:8f:53:94:12:42:24:4d:62:e8:27:94:79:4d:8e:
                    ff:4f:ff:86:6f:bf:1c:04:4b:05:00:d6:b5:62:c7:
                    b0:87:ff:05:39:c0:f1:7a:c2:e0:cb:d7:9f:39:48:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:9A:68:E8:39:03:E8:95:64:78:4F:A1:15:C0:95:78:7B:ED:5E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cdc11efb-9ca2-4459-b55a-43b03e67b183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.32.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a2:c0:ee:1a:ae:02:de:b7:e2:94:73:47:24:00:19:cc:a5:a5:
         e1:27:45:01:65:c9:93:56:e9:2b:b6:a9:40:d9:59:ad:c5:70:
         fb:9a:2e:62:85:2d:8e:f2:9c:7a:1a:81:8c:b7:49:47:4a:2d:
         e2:29:e4:22:a0:11:f0:97:7f:bb:41:b4:46:e9:5b:25:e2:e0:
         1f:9e:6f:26:66:1e:b3:13:4e:ea:10:d7:64:3a:06:18:b8:7d:
         ec:87:e8:52:cf:f2:6c:94:7d:00:e0:75:bd:9a:71:34:01:a0:
         05:df:dc:24:d7:a8:e5:28:85:43:df:b3:c7:ad:f0:38:b9:53:
         fd:07:22:c1:b2:c9:bc:7f:8f:28:46:7e:b5:c8:43:12:b2:62:
         47:24:f7:e8:3e:b6:18:9b:22:01:b9:1c:d0:b2:a6:21:dd:bb:
         f2:41:9e:7b:2e:28:27:82:b8:c1:5f:e6:2c:04:8d:10:15:d6:
         bd:99:bb:c6:24:15:8a:30:dc:14:cf:d9:7b:5c:32:0f:10:f8:
         7b:52:df:2a:ac:57:1e:d3:79:fa:eb:3d:49:1d:42:3e:09:ee:
         b1:9a:2e:c0:0e:df:aa:6b:58:73:c8:d6:9d:bb:8b:8e:76:87:
         dc:73:c0:8d:39:e1:9b:b1:f8:03:5b:48:e2:b6:fe:8e:4a:ad:
         ce:0e:1a:fc
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUKskh/gKBQgIiLc/gCnyewW35Q6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTAxMjFaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDczYWVjNjM5NTk5ODExYjc1OWJlZGFjYmYxMDA3MzM5MTdiZTE3OWVkOTFh
MDVkYjgxNTNlZTAwYTA1ZTI3ZDIxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDFIXX3YUDNiqQICzmot8y0hYsODwM1Tf1QhWHZj2za9BqmfDGfPcpbp5nS
F74jj7BAbcISBJPUalAcvjq4c03U5qJo+vdu791LQOoJiHb1DXmi7+4g5mzZvaTF
4bLGwk+UhEDvTYZKNaR29yGtymZdMIqBUY4fKgBX8mV1cp2JXHQ9Jzyclm0EaW7Y
2dZgfMKpERrT2Sv7glNWfaOXDmNhHcsI62Ws4JNMc4BxGx2ezBlPBaK+CSUr9W4y
/xVMub+jas0Sn8/0D7eWE7yPhvyUoY9TlBJCJE1i6CeUeU2O/0//hm+/HARLBQDW
tWLHsIf/BTnA8XrC4MvXnzlIltUCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBQ035po
6DkD6JVkeE+hFcCVeHvtXjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2RjMTFlZmItOWNhMi00NDU5LWI1NWEtNDNiMDNlNjdiMTgzLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrAgQDAN
BgkqhkiG9w0BAQsFAAOCAQEAosDuGq4C3rfilHNHJAAZzKWl4SdFAWXJk1bpK7ap
QNlZrcVw+5ouYoUtjvKcehqBjLdJR0ot4inkIqAR8Jd/u0G0RulbJeLgH55vJmYe
sxNO6hDXZDoGGLh97IfoUs/ybJR9AOB1vZpxNAGgBd/cJNeo5SiFQ9+zx63wOLlT
/QciwbLJvH+PKEZ+tchDErJiRyT36D62GJsiAbkc0LKmId278kGeey4oJ4K4wV/m
LASNEBXWvZm7xiQVijDcFM/Ze1wyDxD4e1LfKqxXHtN5+us9SR1CPgnusZouwA7f
qmtYc8jWnbuLjnaH3HPAjTnhm7H4A1tI4rb+jkqtzg4a/A==
-----END CERTIFICATE-----