Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
File:                     e9508335-e447-4b74-99f5-98b04a3a6b2f.roa (raw, json)
Hash identifier:          xmL+vQuyWe9u1EkDqLnZltxOfQExaZu50VokdK7hTYc=
Subject key identifier:   5C:83:59:92:5E:2F:09:D0:A5:05:89:F3:A8:3C:44:54:6B:1F:62:B1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       71BEDE342F3E8F2F51E18E4C4F4E82A5C7133398
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa
Signing time:             Mon 31 Mar 2025 20:00:48 +0000
ROA not before:           Mon 31 Mar 2025 20:00:48 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:40c0::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:de:34:2f:3e:8f:2f:51:e1:8e:4c:4f:4e:82:a5:c7:13:33:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:00:48 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=ed66a9d758a2c0d68ce637748f83e0cc0239c3a6982376a1f99e50c730b9a6cf, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2e:5a:8b:3e:fa:4a:af:00:56:ca:30:dc:aa:
                    02:d6:b8:d7:b9:54:4d:81:c1:71:3a:c8:17:81:09:
                    db:fb:66:01:08:fd:73:98:ee:e4:06:a9:2d:f6:36:
                    aa:ab:eb:86:ab:f3:93:b8:a5:53:ae:ff:1c:4a:74:
                    be:f8:60:82:17:47:9f:b9:d0:e1:69:a0:ca:89:20:
                    a0:85:6a:e9:46:c3:e3:3a:0a:e6:a6:e7:68:af:4e:
                    ab:9b:87:ce:ef:9d:74:0d:dc:df:d8:16:35:e0:01:
                    4b:3d:45:5d:7a:1d:d2:b3:f0:c5:51:65:e3:6c:73:
                    77:51:ac:c4:8f:86:7a:e5:80:7c:58:bd:90:58:1c:
                    1c:02:0f:7c:f1:0e:fe:40:91:e3:02:6c:87:61:0e:
                    af:7a:32:19:d2:ac:20:8a:69:44:6b:16:bd:f0:18:
                    90:f1:fe:88:39:fc:74:8b:42:ae:d3:8a:98:06:9e:
                    73:af:ac:fd:b8:88:80:f3:21:60:50:87:76:9b:e3:
                    ea:9f:49:0f:f0:ee:6d:3c:62:8f:a9:3a:f5:ed:fc:
                    91:c0:a4:91:34:3f:88:a3:b7:47:e9:71:56:89:17:
                    38:96:5d:76:e2:06:09:d1:a6:ad:42:fb:2b:80:dc:
                    74:87:35:fa:15:6c:c9:b0:5a:79:1f:83:b9:10:58:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:83:59:92:5E:2F:09:D0:A5:05:89:F3:A8:3C:44:54:6B:1F:62:B1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e9508335-e447-4b74-99f5-98b04a3a6b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         60:42:ce:b4:42:a8:0b:d0:ac:c9:07:3b:13:84:77:e2:9b:ab:
         6f:1f:62:bf:be:a9:a0:ba:73:58:7d:85:26:11:da:1d:fd:c2:
         38:17:c8:c1:5f:d5:a8:ae:e4:5a:e7:df:30:e1:5f:6a:23:18:
         7a:a0:57:ec:68:30:1d:e1:3a:b9:ff:49:29:26:fe:4c:f4:82:
         51:63:44:54:16:13:2c:f2:a2:6f:f8:23:34:5e:ff:f5:92:98:
         1f:64:d9:78:a3:dc:e5:1b:28:d8:4c:71:4d:e8:73:ff:26:0b:
         78:08:4a:0d:d1:e6:65:ed:34:76:3c:e7:1c:b9:cf:54:59:9c:
         d3:54:1f:14:e8:af:4c:8b:03:65:3c:b7:a6:b3:6e:c2:40:c0:
         7e:da:09:3f:75:ce:36:ec:19:fd:fc:22:a0:5c:55:e1:d5:8f:
         bf:b9:c8:ae:94:88:8b:74:54:41:a5:65:e0:ed:bd:4a:60:33:
         95:14:40:ec:f9:c7:2d:79:89:13:3b:0a:25:dd:8d:c1:10:a5:
         b0:80:db:76:74:a3:2b:de:89:0f:df:67:82:9d:75:67:c8:f5:
         38:e9:58:53:2d:94:58:2a:0b:d7:b3:e3:75:bd:72:35:ab:cd:
         7c:03:09:70:e0:98:d0:3e:09:cf:11:9d:36:ea:36:8a:53:0c:
         18:67:96:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----