Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
File:                     dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa (raw, json)
Hash identifier:          ywe3LiWyzA33JBswM2u4/z9hj0tHz1g3bu/SEhelv00=
Subject key identifier:   01:F0:B3:0A:C5:21:35:70:5D:0C:7B:66:C3:D3:C3:1D:DF:41:0A:D3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5A59ACF0AAEA14223138EFF282A5A4C025CD4008
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa
Signing time:             Mon 31 Mar 2025 20:01:27 +0000
ROA not before:           Mon 31 Mar 2025 20:01:27 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:59:ac:f0:aa:ea:14:22:31:38:ef:f2:82:a5:a4:c0:25:cd:40:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:01:27 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=7b4cdf12f947480ab1a463631fac56b7d3525e30bd8d061682a50640df6bf1e6, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:0c:04:a8:6d:69:e1:b9:2c:59:09:a1:02:
                    6b:c2:0b:93:62:1b:8c:99:7b:31:a7:51:9c:4c:22:
                    3a:a8:e7:26:85:46:51:ee:5c:61:8a:bc:af:e1:bb:
                    f0:e0:9e:b1:4e:23:5c:11:b7:9b:c5:69:37:cc:b5:
                    c3:81:fa:19:58:4e:40:18:05:fd:e7:dc:2e:a4:40:
                    e5:8f:03:e1:63:69:04:ee:69:aa:8a:ae:61:36:92:
                    42:24:2b:bf:08:35:c1:eb:06:3b:46:8d:03:11:76:
                    14:78:8d:49:97:3e:30:8e:98:fd:a3:bd:5f:38:3d:
                    f6:b6:8c:f0:08:2e:bf:cf:ea:08:19:28:77:21:41:
                    45:3a:7d:ec:01:95:f7:5c:ef:29:15:4b:7c:d9:f9:
                    b2:8c:83:a8:25:51:2c:8e:1b:36:c1:0b:c6:0a:f0:
                    ce:83:57:96:bd:1e:09:1c:f5:f3:c6:eb:c9:54:66:
                    fb:2a:09:58:a8:f5:bb:80:f2:45:7c:3b:fd:4b:64:
                    b1:fa:e7:98:67:af:e1:ea:c6:07:12:47:ce:d2:10:
                    e8:92:d0:46:b1:05:63:4f:ae:75:ac:84:67:47:8d:
                    ea:e4:a6:79:9e:5c:e4:8e:fc:e8:46:0a:bb:6d:e5:
                    0a:de:85:c1:d6:dd:d5:a7:54:0d:66:bd:64:fa:89:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F0:B3:0A:C5:21:35:70:5D:0C:7B:66:C3:D3:C3:1D:DF:41:0A:D3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/dbd2d56a-b699-4b33-a153-fa826b6b80c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:6b:9e:fa:00:b6:66:ed:8d:f8:fd:b1:f1:6a:31:d9:4f:
         38:57:d0:b9:67:71:64:23:e7:c7:f2:a6:b8:8c:b9:e1:6b:c8:
         80:b6:b1:c7:2e:18:d7:6e:9e:47:a2:f8:e2:c0:fc:5d:2d:3d:
         b3:a2:c7:a3:16:3e:df:36:d0:5f:69:ea:c2:ad:94:e1:15:16:
         13:3a:7e:48:d8:5b:84:5c:16:5a:6f:76:39:cb:ad:7f:13:85:
         80:e7:06:69:b9:aa:3e:b5:00:53:17:51:7c:b9:0d:a4:7c:8a:
         de:7f:72:2b:38:96:fc:46:b7:6d:a9:67:7b:45:83:f4:3f:9b:
         bf:e5:00:7e:77:05:62:cb:ea:b4:84:c7:c3:cb:03:06:3a:d6:
         4b:76:74:de:63:d9:67:a1:12:ea:08:71:5f:c5:60:03:6a:54:
         2a:46:f5:a9:49:d5:14:bd:22:69:2f:bc:77:bf:0f:a7:f0:7d:
         bd:b9:11:09:f7:2e:3a:03:0d:35:a6:a8:5b:33:f4:5d:37:10:
         25:fc:65:05:58:f2:44:e4:4c:9a:02:6e:47:1b:b4:b9:3f:2e:
         ba:3c:fc:5c:8c:08:9e:76:b9:60:b5:15:8f:6b:d1:cc:d4:ef:
         5a:00:86:84:d2:7f:79:9c:87:41:ec:b5:b4:99:2e:3d:5c:5f:
         19:91:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----