Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
File:                     ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa (raw, json)
Hash identifier:          Kt0pwQ5EBqY7qaQDV+uWWxCnTOryIIWGY3Pk6kTDi94=
Subject key identifier:   90:18:F6:FC:65:58:F7:D0:E3:14:A2:C0:F9:C7:3F:05:98:CA:90:D0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       38843AF0CDDD3C5711CCFCEC36CA719673A90B21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa
Signing time:             Tue 01 Apr 2025 15:01:17 +0000
ROA not before:           Tue 01 Apr 2025 15:01:17 +0000
ROA not after:            Tue 06 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:a000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:84:3a:f0:cd:dd:3c:57:11:cc:fc:ec:36:ca:71:96:73:a9:0b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  1 15:01:17 2025 GMT
            Not After : May  6 23:59:59 2025 GMT
        Subject: serialNumber=bb9bf547f781078557c38be661c7f6864f1e6744adba71959242232dc3c14a3d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:33:c8:0d:b6:53:d5:79:e6:a4:bb:27:f3:
                    3f:7e:77:34:0c:48:30:51:1b:71:b4:80:8d:9c:b3:
                    20:f4:00:05:ac:dd:3d:c0:d9:bb:30:60:9d:fe:30:
                    80:8b:ec:66:7c:0c:2a:89:2e:72:6a:df:ae:6d:70:
                    e4:fd:2a:73:71:c4:09:6b:ec:91:74:44:3a:7f:2a:
                    09:ac:b8:96:3c:31:91:92:44:da:b1:17:8c:14:80:
                    6d:9e:40:06:1e:7c:d9:81:cd:fe:f4:fe:f4:41:19:
                    d7:83:f4:e6:28:fe:a0:4b:01:94:01:ec:16:92:9a:
                    9e:ef:78:21:dd:27:e5:47:67:00:a7:e6:97:22:21:
                    67:68:51:49:c1:c9:91:90:78:ce:13:43:1d:ca:c6:
                    f4:62:20:3c:50:b9:96:3e:5c:89:b4:03:a4:85:d6:
                    50:03:1d:15:4d:ee:d7:b3:7c:3f:aa:1e:8f:8a:2a:
                    53:05:b3:57:19:fd:d6:aa:66:02:fd:9e:0d:4f:66:
                    7d:d1:2e:49:9a:27:0a:da:3a:9a:dd:8b:5d:50:b4:
                    6e:5d:95:5c:a8:c3:2e:51:1f:88:d3:2f:8c:8c:0e:
                    79:94:6d:22:5a:31:af:b6:8f:cb:96:38:4d:bb:47:
                    cc:46:5d:39:ff:e3:05:37:06:21:c0:b6:b1:23:29:
                    76:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:F6:FC:65:58:F7:D0:E3:14:A2:C0:F9:C7:3F:05:98:CA:90:D0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ce2bc1d7-e429-4350-b9cd-a49158d2b118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:2a:a0:e4:ab:75:1a:97:20:27:5f:27:11:7a:e0:35:d0:19:
         72:f0:06:7f:87:1c:45:ab:0d:90:7c:05:cf:d0:a2:d2:35:5e:
         00:45:6f:31:5d:e9:e5:9f:a4:b1:95:48:ad:c4:60:d7:53:ec:
         71:30:20:63:4b:56:5c:91:5a:1c:84:9a:0a:b5:0f:59:71:e8:
         53:34:ef:5f:b5:92:0a:37:25:87:bb:50:ba:c4:ab:5b:0c:2e:
         c1:2d:11:b3:5c:d2:9f:63:a7:d9:e2:0e:5a:5d:11:61:63:ad:
         cc:a8:d2:42:87:f1:b7:14:8f:8e:90:c8:96:cc:cd:b5:1b:71:
         09:ac:7c:10:88:62:0a:a0:89:86:05:00:a4:53:a0:19:ef:db:
         61:4d:13:69:03:c2:c7:d2:90:cd:6b:fb:19:1c:d5:7e:ff:b2:
         c4:6d:1f:11:df:d4:20:0e:45:ab:d2:23:d6:4e:f9:3a:8d:61:
         37:2a:c3:36:74:a5:7d:b4:c0:35:46:00:8f:c5:76:d7:1a:b9:
         1d:a0:27:26:43:77:23:7f:46:78:df:77:9b:f8:3e:fc:6b:02:
         3a:c3:11:ac:1e:a0:ed:7f:68:46:3a:49:60:3e:7a:79:b8:f0:
         6f:d7:dc:3b:2b:1b:1f:13:0c:4f:b7:db:07:87:57:61:4a:cf:
         18:53:09:ad
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUOIQ68M3dPFcRzPzsNspxlnOpCyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTA0MDExNTAxMTdaFw0yNTA1MDYyMzU5NTlaMHoxSTBHBgNV
BAUTQGJiOWJmNTQ3Zjc4MTA3ODU1N2MzOGJlNjYxYzdmNjg2NGYxZTY3NDRhZGJh
NzE5NTkyNDIyMzJkYzNjMTRhM2QxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANNUM8gNtlPVeeakuyfzP353NAxIMFEbcbSAjZyzIPQABazdPcDZuzBgnf4w
gIvsZnwMKokucmrfrm1w5P0qc3HECWvskXREOn8qCay4ljwxkZJE2rEXjBSAbZ5A
Bh582YHN/vT+9EEZ14P05ij+oEsBlAHsFpKanu94Id0n5UdnAKfmlyIhZ2hRScHJ
kZB4zhNDHcrG9GIgPFC5lj5cibQDpIXWUAMdFU3u17N8P6oej4oqUwWzVxn91qpm
Av2eDU9mfdEuSZonCto6mt2LXVC0bl2VXKjDLlEfiNMvjIwOeZRtIloxr7aPy5Y4
TbtHzEZdOf/jBTcGIcC2sSMpdi0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSQGPb8
ZVj30OMUosD5xz8FmMqQ0DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
Y2UyYmMxZDctZTQyOS00MzUwLWI5Y2QtYTQ5MTU4ZDJiMTE4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dig
MA0GCSqGSIb3DQEBCwUAA4IBAQCvKqDkq3UalyAnXycReuA10Bly8AZ/hxxFqw2Q
fAXP0KLSNV4ARW8xXenln6SxlUitxGDXU+xxMCBjS1ZckVochJoKtQ9ZcehTNO9f
tZIKNyWHu1C6xKtbDC7BLRGzXNKfY6fZ4g5aXRFhY63MqNJCh/G3FI+OkMiWzM21
G3EJrHwQiGIKoImGBQCkU6AZ79thTRNpA8LH0pDNa/sZHNV+/7LEbR8R39QgDkWr
0iPWTvk6jWE3KsM2dKV9tMA1RgCPxXbXGrkdoCcmQ3cjf0Z433eb+D78awI6wxGs
HqDtf2hGOklgPnp5uPBv19w7KxsfEwxPt9sHh1dhSs8YUwmt
-----END CERTIFICATE-----