Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
File:                     d7bd85bf-2af2-46a0-91d6-f945e7063231.roa (raw, json)
Hash identifier:          QjPyUA/3jYFY55OWEzD/zne56o1t3LP4//FWCFsdXrE=
Subject key identifier:   44:1F:BF:43:8F:65:97:C6:B5:4E:33:3B:87:8D:EE:29:E3:59:5E:82
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       62CBC61E5CCA9D1AEEF03A9BB256D9DFECC59A21
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa
Signing time:             Mon 31 Mar 2025 19:51:39 +0000
ROA not before:           Mon 31 Mar 2025 19:51:39 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:c080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cb:c6:1e:5c:ca:9d:1a:ee:f0:3a:9b:b2:56:d9:df:ec:c5:9a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:51:39 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=7141b19f670212c4c52dc81221f5c6fada8a770eb05f6c31d75d2e000ef9bfa5, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:d0:29:f8:c2:1f:0c:ca:61:ae:e8:c3:42:
                    60:ab:01:a1:b9:2d:25:c2:1f:8f:6a:21:3c:4b:64:
                    1c:87:fa:3e:0f:ec:d3:09:67:bb:a4:d5:3c:7e:57:
                    fc:c8:9b:ba:b3:7f:f4:25:d7:22:f9:da:23:81:08:
                    3f:67:a7:11:ec:40:9e:c1:58:ce:35:36:4e:b0:91:
                    ab:c5:68:6c:2c:c3:bb:6c:52:8f:80:d1:e2:52:54:
                    9a:27:d9:34:e6:9d:46:9d:85:bf:fe:7d:07:47:19:
                    a2:d7:42:cb:99:ff:ec:25:98:46:ac:46:9a:5f:ab:
                    6c:3f:18:c8:98:01:3b:27:0c:ab:ff:9a:2c:f6:ea:
                    99:3f:67:ff:eb:44:a5:48:ec:5e:e9:ec:67:df:f3:
                    e0:3d:a8:31:a8:d5:00:6c:f2:42:47:5e:fc:b6:02:
                    49:6c:a0:7a:6f:b9:3e:37:7d:f5:62:8a:24:81:31:
                    a3:d5:26:5e:51:3c:9c:bd:0f:f0:db:ba:50:dc:07:
                    08:3e:05:ca:be:74:fc:1b:5e:c5:d0:28:65:ee:51:
                    56:40:70:e7:66:88:36:0d:96:93:89:0c:c6:36:da:
                    1e:09:ab:06:d9:78:b6:05:70:a0:c9:07:eb:f2:9a:
                    f8:70:f4:8a:ba:02:0b:89:ed:2e:9b:1b:b6:19:ba:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:BF:43:8F:65:97:C6:B5:4E:33:3B:87:8D:EE:29:E3:59:5E:82
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d7bd85bf-2af2-46a0-91d6-f945e7063231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:70:a7:a5:a0:41:e3:cd:02:a3:e8:78:bf:9f:d5:66:a1:
         f0:ae:32:94:02:6d:9b:55:c7:71:46:b6:e2:90:15:2c:d6:59:
         b2:d2:3f:0a:d9:63:02:65:d6:03:82:bb:c9:34:72:3a:bb:98:
         4f:b6:07:48:6f:ec:90:df:4b:50:2b:bf:b7:6f:86:4d:b8:f2:
         c9:5f:fe:ab:5b:74:ab:86:3d:95:c0:df:30:8d:4d:90:cc:27:
         48:61:38:7f:03:68:e3:27:28:be:a4:1c:96:1c:4f:c9:45:0a:
         08:03:f7:61:f0:b6:81:96:1c:70:70:30:84:dd:6a:ca:d6:27:
         2f:4b:5c:8d:a8:52:f6:2e:6c:5b:8e:e1:b9:20:c7:18:0b:15:
         ea:1d:6e:7f:4e:fd:3b:8a:6d:11:f0:79:89:87:52:b8:94:14:
         9c:ed:a3:75:03:a4:76:3e:12:d4:e7:1a:18:c7:ea:82:73:9a:
         cf:ad:35:15:1e:fa:4d:8f:05:1d:40:6f:cf:7a:22:cf:fb:d0:
         0c:71:75:6c:7e:22:55:a7:bf:07:a2:d5:c7:a2:88:60:31:a2:
         9e:ee:4e:2b:08:8e:02:12:04:21:b5:4d:3f:60:ad:9b:06:a2:
         d9:41:63:04:44:c6:87:50:94:9c:e4:0c:0e:5a:30:7b:b6:97:
         17:04:f2:22
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUYsvGHlzKnRru8DqbslbZ3+zFmiEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTUxMzlaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDcxNDFiMTlmNjcwMjEyYzRjNTJkYzgxMjIxZjVjNmZhZGE4YTc3MGViMDVm
NmMzMWQ3NWQyZTAwMGVmOWJmYTUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1q0Cn4wh8MymGu6MNCYKsBobktJcIfj2ohPEtkHIf6Pg/s0wlnu6TVPH5X
/MiburN/9CXXIvnaI4EIP2enEexAnsFYzjU2TrCRq8VobCzDu2xSj4DR4lJUmifZ
NOadRp2Fv/59B0cZotdCy5n/7CWYRqxGml+rbD8YyJgBOycMq/+aLPbqmT9n/+tE
pUjsXunsZ9/z4D2oMajVAGzyQkde/LYCSWygem+5Pjd99WKKJIExo9UmXlE8nL0P
8Nu6UNwHCD4Fyr50/BtexdAoZe5RVkBw52aINg2Wk4kMxjbaHgmrBtl4tgVwoMkH
6/Ka+HD0iroCC4ntLpsbthm6CeUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBREH79D
j2WXxrVOMzuHje4p41legjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZDdiZDg1YmYtMmFmMi00NmEwLTkxZDYtZjk0NWU3MDYzMjMxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0H/A
gDANBgkqhkiG9w0BAQsFAAOCAQEAj0pwp6WgQePNAqPoeL+f1Wah8K4ylAJtm1XH
cUa24pAVLNZZstI/CtljAmXWA4K7yTRyOruYT7YHSG/skN9LUCu/t2+GTbjyyV/+
q1t0q4Y9lcDfMI1NkMwnSGE4fwNo4ycovqQclhxPyUUKCAP3YfC2gZYccHAwhN1q
ytYnL0tcjahS9i5sW47huSDHGAsV6h1uf079O4ptEfB5iYdSuJQUnO2jdQOkdj4S
1OcaGMfqgnOaz601FR76TY8FHUBvz3oiz/vQDHF1bH4iVae/B6LVx6KIYDGinu5O
KwiOAhIEIbVNP2Ctmwai2UFjBETGh1CUnOQMDlowe7aXFwTyIg==
-----END CERTIFICATE-----