Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
File:                     decd4459-2e9b-442e-a3bd-6633fdd0250b.roa (raw, json)
Hash identifier:          GkVlnzM5Q9FvlwtINwmZLS7PEn/iy+GxR5b2YCSK+9U=
Subject key identifier:   3B:42:DC:2D:FB:60:BC:F6:B6:DA:D1:F4:DE:89:77:47:D5:CE:76:0B
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       26973C80BDACBFABFECB964FF9A451F5C11A2376
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa
Signing time:             Mon 31 Mar 2025 19:21:02 +0000
ROA not before:           Mon 31 Mar 2025 19:21:02 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:a000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:97:3c:80:bd:ac:bf:ab:fe:cb:96:4f:f9:a4:51:f5:c1:1a:23:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:21:02 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=7906fb60c9c1b535a3ca16b95b1c09ad8deb868b71eefcaf94b717c283360a65, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:66:a3:4e:58:a4:69:ce:82:bf:ef:32:54:
                    26:03:68:10:8a:e1:6b:02:f4:aa:77:17:02:6e:4e:
                    a6:b0:78:c5:b7:fe:7f:11:27:33:4e:00:5a:90:38:
                    fc:da:b7:50:a4:42:b0:33:62:2a:1f:d3:2a:88:93:
                    a8:a9:69:a6:e1:9b:19:a9:1a:aa:8b:ae:8b:aa:1f:
                    b6:f3:b9:82:9a:e0:d4:50:16:f1:fa:3a:f0:16:4e:
                    e5:3d:4e:f2:e9:e8:0d:02:26:7d:e4:38:b1:5f:5e:
                    47:6b:b2:11:3e:52:8e:99:d6:64:4c:0b:a8:cb:50:
                    cc:df:fb:c9:2e:d1:d7:a2:4f:a7:5c:d2:a4:e7:43:
                    77:7a:98:9b:ad:59:47:76:51:4b:c4:9d:0d:01:90:
                    e6:d0:4b:52:f8:f7:ed:21:18:a8:f4:d6:de:0a:a1:
                    83:21:11:b2:53:8d:3a:07:24:6f:85:53:70:38:3a:
                    dc:0b:76:50:ec:54:65:da:92:e6:4f:fa:e4:c6:6a:
                    f7:6b:0a:97:63:d6:74:a4:26:92:77:11:52:2f:9e:
                    9e:26:c6:ae:c1:29:76:dd:c4:8d:00:8e:8a:a7:21:
                    56:81:d4:fb:50:ff:66:3f:7d:44:9e:0b:ff:a8:83:
                    d8:4c:e4:78:b2:86:70:4b:94:ae:3b:d9:e6:3d:5b:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:42:DC:2D:FB:60:BC:F6:B6:DA:D1:F4:DE:89:77:47:D5:CE:76:0B
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/decd4459-2e9b-442e-a3bd-6633fdd0250b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:b3:3d:da:a3:0b:3e:ce:ae:14:d4:f2:84:da:99:3a:7a:
         97:8b:fd:54:be:32:e1:cd:fe:61:39:28:bf:a2:2c:55:04:51:
         87:be:10:3b:e6:a9:56:b6:53:c5:c4:27:2e:dc:bd:63:99:a3:
         b2:bd:fd:0c:a6:87:fc:fc:0d:d0:aa:ce:a9:84:4c:e9:74:0d:
         8b:0d:2f:8c:62:ee:75:95:cb:f5:82:85:fc:83:b6:e2:bc:7b:
         e2:ab:30:85:88:0d:89:e3:71:e5:aa:89:57:df:60:14:1d:c8:
         e5:3c:e3:a6:82:81:9f:bc:a0:bb:8d:34:87:44:40:70:fd:62:
         1a:46:44:64:a2:2e:76:66:b9:f6:da:f2:28:f2:d7:c9:48:80:
         dd:00:3f:75:bc:4a:ba:f0:a3:33:70:d0:07:71:05:f5:ba:fd:
         67:74:e0:75:e5:87:89:7b:bc:e7:30:45:a9:77:be:fa:3d:e9:
         7e:cf:35:69:20:ef:7b:d1:58:b2:0c:8a:9a:5d:d4:48:d2:26:
         ed:c5:00:99:30:87:08:f6:31:7b:95:d8:42:26:9c:e5:af:01:
         79:40:7a:f9:a6:50:3b:5f:f3:89:3d:f4:0a:5e:d7:14:88:dc:
         23:62:ce:85:69:1c:03:8d:79:8a:a5:f2:11:57:ed:01:cf:84:
         5d:ab:92:94
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUJpc8gL2sv6v+y5ZP+aRR9cEaI3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTIxMDJaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDc5MDZmYjYwYzljMWI1MzVhM2NhMTZiOTViMWMwOWFkOGRlYjg2OGI3MWVl
ZmNhZjk0YjcxN2MyODMzNjBhNjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMleZqNOWKRpzoK/7zJUJgNoEIrhawL0qncXAm5OprB4xbf+fxEnM04AWpA4
/Nq3UKRCsDNiKh/TKoiTqKlppuGbGakaqouui6oftvO5gprg1FAW8fo68BZO5T1O
8unoDQImfeQ4sV9eR2uyET5SjpnWZEwLqMtQzN/7yS7R16JPp1zSpOdDd3qYm61Z
R3ZRS8SdDQGQ5tBLUvj37SEYqPTW3gqhgyERslONOgckb4VTcDg63At2UOxUZdqS
5k/65MZq92sKl2PWdKQmkncRUi+enibGrsEpdt3EjQCOiqchVoHU+1D/Zj99RJ4L
/6iD2EzkeLKGcEuUrjvZ5j1bH0UCAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQ7Qtwt
+2C89rba0fTeiXdH1c52CzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZGVjZDQ0NTktMmU5Yi00NDJlLWEzYmQtNjYzM2ZkZDAyNTBiLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0HKg
MA0GCSqGSIb3DQEBCwUAA4IBAQBosrM92qMLPs6uFNTyhNqZOnqXi/1UvjLhzf5h
OSi/oixVBFGHvhA75qlWtlPFxCcu3L1jmaOyvf0Mpof8/A3Qqs6phEzpdA2LDS+M
Yu51lcv1goX8g7bivHviqzCFiA2J43HlqolX32AUHcjlPOOmgoGfvKC7jTSHREBw
/WIaRkRkoi52Zrn22vIo8tfJSIDdAD91vEq68KMzcNAHcQX1uv1ndOB15YeJe7zn
MEWpd776Pel+zzVpIO970ViyDIqaXdRI0ibtxQCZMIcI9jF7ldhCJpzlrwF5QHr5
plA7X/OJPfQKXtcUiNwjYs6FaRwDjXmKpfIRV+0Bz4Rdq5KU
-----END CERTIFICATE-----