Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
File:                     cfca2455-b58e-43e0-a15f-276f8a5b527f.roa (raw, json)
Hash identifier:          koKs2A1lhPUgfD4QDEzgGmCPthmdyuqGXnFAu4ued08=
Subject key identifier:   33:A6:38:51:6C:0B:3A:B6:18:A2:FB:01:CC:9F:FD:66:AD:DC:24:BC
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       02672C78F254095B90812A96A3504B39A6D43A1D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa
Signing time:             Mon 31 Mar 2025 19:30:04 +0000
ROA not before:           Mon 31 Mar 2025 19:30:04 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:e040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:67:2c:78:f2:54:09:5b:90:81:2a:96:a3:50:4b:39:a6:d4:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:30:04 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=ab95780ecf48ab5d45f588f98dde0b44a6a782cadae5d9f66d8e688a54df3b59, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:e8:6e:25:ca:a0:b1:c3:89:01:09:2b:12:
                    c6:33:a3:be:db:3b:21:26:76:ef:bc:83:39:f9:e8:
                    7f:22:57:92:59:e4:ed:4e:35:7a:c3:aa:05:ff:a1:
                    06:25:6c:6c:5e:23:c8:dc:1c:a3:24:eb:4c:3f:7a:
                    e3:f9:51:30:1e:81:f0:cf:6a:ae:5b:9a:12:47:fa:
                    a2:3d:ea:39:b0:83:f0:d1:b4:3f:27:b1:8f:89:16:
                    a6:1c:cc:ec:6b:ef:ca:37:3a:69:c5:77:ae:99:4e:
                    7d:50:2f:26:69:19:80:a2:f7:e6:8b:50:be:d3:36:
                    7b:50:0d:c5:78:47:43:ba:97:b0:41:79:43:ab:b5:
                    1c:4d:48:cd:7a:8e:0b:8f:b8:a3:59:27:c6:1d:86:
                    e7:40:e8:fa:af:1a:1d:d1:98:18:12:16:5b:9b:5b:
                    fd:16:23:c6:85:7f:90:49:32:20:38:c3:df:56:97:
                    56:4e:ad:c2:d4:e7:81:21:f6:96:12:2b:b6:d8:26:
                    66:8e:03:00:63:1a:cd:4f:95:81:f0:22:ca:64:60:
                    a8:f0:01:d4:24:39:8a:ff:0c:81:fa:b9:6a:4a:44:
                    13:77:9b:91:0e:e8:5e:40:2b:43:8e:bb:c5:dc:76:
                    3b:98:60:36:07:d7:f9:08:f2:d6:6e:13:45:ac:05:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A6:38:51:6C:0B:3A:B6:18:A2:FB:01:CC:9F:FD:66:AD:DC:24:BC
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/cfca2455-b58e-43e0-a15f-276f8a5b527f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:e4:d8:ca:1c:fc:16:e8:10:10:a4:5e:9c:3a:2b:38:45:e2:
         85:4f:4f:d8:f1:20:79:11:ec:62:c8:af:ee:47:fe:41:96:4c:
         0d:24:a6:6b:aa:0b:cf:31:f7:88:78:04:9c:05:8f:f3:14:97:
         1c:20:1c:9d:87:83:50:5f:83:e7:5f:87:de:3a:0c:81:3d:d9:
         9f:31:41:3d:41:0d:79:33:6b:5a:e5:e4:ec:9f:19:2e:7e:80:
         b9:f8:d8:74:b7:01:35:1a:c8:67:f4:49:94:ad:c7:cf:6e:6e:
         43:79:3b:4a:16:4e:7d:fd:e8:c4:7e:af:db:00:33:95:30:33:
         19:35:65:83:85:3f:8d:f1:74:5c:cf:da:56:af:7b:21:e4:f6:
         34:9a:6a:6f:38:56:2f:a0:3c:7c:ec:a0:ef:f9:4b:11:e3:8d:
         12:93:13:27:64:0c:40:b1:5e:32:1f:c9:fa:a7:6e:b0:ab:49:
         08:38:7e:22:b9:b0:d9:d0:fe:e5:61:db:7a:be:5e:24:a1:4e:
         f0:7a:fa:e4:4e:23:0e:51:09:02:2a:31:bb:9f:ee:66:35:a8:
         62:ca:91:49:d6:30:27:b7:03:60:74:db:3f:92:07:08:78:21:
         d7:75:36:ff:0d:5f:73:68:68:2d:af:20:f9:61:3a:c2:cd:3f:
         df:13:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----