Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa
File:                     d7bcc124-bcd8-42ec-911f-1b551dceda68.roa (raw, json)
Hash identifier:          /VJRSg5DGvaw2tzx8uTuaKOzYswjmPYzXNqJQNmw3Cg=
Subject key identifier:   DC:1C:77:01:45:21:B5:96:EC:E3:AF:BC:FE:B9:78:73:F2:D0:3C:76
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0CDB9EF552E5E1E8040932C6D35278A2B267EA53
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa
Signing time:             Mon 31 Mar 2025 20:41:10 +0000
ROA not before:           Mon 31 Mar 2025 20:41:10 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:db:9e:f5:52:e5:e1:e8:04:09:32:c6:d3:52:78:a2:b2:67:ea:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:41:10 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=6dc9ce0b18294b2144ff630f6fa34c19b2c64f445fbae537cc438a5810858b9a, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:23:d8:6b:13:0a:81:5d:44:10:77:c6:49:
                    26:0c:fa:83:dd:93:89:fc:eb:e5:49:73:0e:14:cd:
                    f8:6a:9d:7d:ad:11:8b:c2:f4:d6:3b:8e:0b:b5:b4:
                    07:62:a2:eb:85:87:58:05:a1:7f:19:74:78:2c:3e:
                    ea:4f:0c:54:37:00:20:15:79:3f:22:2c:87:19:0f:
                    48:eb:f9:63:b1:5d:8a:61:55:a1:df:0f:12:c1:c3:
                    1d:94:b6:5a:55:99:22:bb:99:87:8f:87:ba:c6:d6:
                    0d:b7:06:8f:0c:05:d4:ed:c3:0b:5d:0e:a5:d7:d8:
                    6b:3e:b0:88:78:d7:03:53:11:11:62:9a:0e:2e:65:
                    02:b9:12:e4:9c:cb:40:85:3b:a7:a6:69:68:7b:f5:
                    d8:5b:9c:65:dd:3a:04:a7:2d:1a:62:87:9c:a8:44:
                    b6:47:ca:6c:56:d1:f5:17:a7:a4:f9:ab:1c:e0:e5:
                    45:57:af:b8:22:1b:3d:df:4a:48:19:81:91:81:d8:
                    6b:65:68:c6:a1:4d:0d:b8:71:85:5e:c1:8c:62:8d:
                    57:4b:54:dc:51:23:95:3e:b6:93:96:68:da:99:b6:
                    a7:69:41:bb:92:61:08:a1:16:66:15:65:9c:1a:36:
                    ad:c5:cd:d3:73:e7:e9:af:d5:16:a5:7b:c5:50:97:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1C:77:01:45:21:B5:96:EC:E3:AF:BC:FE:B9:78:73:F2:D0:3C:76
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bcc124-bcd8-42ec-911f-1b551dceda68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:92:63:f8:d5:91:45:85:f1:07:b2:34:95:83:1b:05:04:5a:
         78:26:ae:ad:9e:af:88:3f:59:96:31:69:ca:12:f0:b4:b9:d4:
         ae:dd:f9:2a:26:e2:2a:69:23:ff:db:c7:54:9b:36:26:e7:59:
         88:c5:5f:ee:7c:6d:9b:0d:17:f5:f7:e5:23:fb:3d:62:54:b0:
         0c:89:a2:98:2e:d0:77:51:33:21:a9:fb:f7:b1:10:ac:f9:9a:
         2f:47:10:92:d5:8a:01:1d:a8:7b:7e:7b:3f:d2:5b:ee:b1:d6:
         ea:8b:30:b1:9d:30:18:6d:0f:d7:85:eb:23:e2:06:4e:13:59:
         35:03:1b:4f:ec:64:34:8d:64:de:55:42:f5:89:27:02:32:42:
         1d:e3:cf:c5:9b:37:5d:d5:51:ff:cb:49:69:ae:7f:36:e5:f4:
         3a:64:24:10:b2:ab:77:71:9e:7b:91:7f:e0:01:83:73:57:42:
         f3:8c:6e:61:26:3f:c9:16:7e:3e:27:5e:7d:d7:8c:87:f4:12:
         20:d9:ea:d6:4f:af:a0:34:ed:8d:c6:ff:39:b1:fc:9c:c6:a0:
         92:b7:30:d6:5d:66:bb:8b:10:5d:f4:f3:5f:53:92:a1:a1:6f:
         bc:a1:61:2b:c3:cd:61:b3:3e:53:2d:3b:65:6d:60:a7:6a:4e:
         a5:cc:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----