Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
File:                     ea31a166-ce12-4108-9868-894ac9df0e65.roa (raw, json)
Hash identifier:          ZpfP/E6rI6ls+szosy4lXYrywC0g1RI5jiCD+cBsSEQ=
Subject key identifier:   00:0A:A6:D9:D9:04:A8:9A:8B:32:07:1A:D9:AD:4A:B3:38:59:AB:98
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       20347C0E72B1B876880CE4F5914AA87C9D389003
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa
Signing time:             Mon 31 Mar 2025 19:21:31 +0000
ROA not before:           Mon 31 Mar 2025 19:21:31 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:b080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:34:7c:0e:72:b1:b8:76:88:0c:e4:f5:91:4a:a8:7c:9d:38:90:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:21:31 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=f9912473014ffc3d696ac6a2660f89aee5fe377eec961dd99df6d5870e6aa823, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:88:04:9c:16:76:6c:2b:ee:af:6e:d6:a5:aa:
                    77:a7:4f:16:07:b2:8b:a1:d1:12:20:91:ef:a5:14:
                    14:53:7d:4d:5f:32:af:c9:9f:a0:a3:13:3c:b8:3b:
                    f6:ce:3e:54:85:99:d3:f1:bf:4f:87:33:9e:d6:32:
                    fe:b4:d7:10:01:2d:17:f3:b4:1d:c4:db:ce:1b:3e:
                    97:7b:fa:19:1b:a6:18:39:b0:94:34:71:90:d0:0f:
                    84:99:93:66:50:20:60:28:c3:dc:3d:e7:5b:bb:ee:
                    82:db:53:5a:37:6f:72:ae:e2:26:88:b5:ce:3d:0a:
                    cd:ac:ec:b7:48:32:d5:de:34:17:58:05:77:a5:dc:
                    36:4b:17:ee:6d:f7:13:23:9d:27:92:a9:05:61:a0:
                    0e:55:22:e7:94:90:16:af:dd:93:a1:b6:ec:ce:1c:
                    31:7b:aa:56:6f:f4:4a:99:7e:b0:04:01:c5:d6:f5:
                    2e:99:e8:55:28:01:eb:4e:4b:86:21:34:0b:0d:08:
                    1c:02:49:99:dd:23:2e:b3:27:28:51:3d:23:ef:52:
                    61:75:6d:4a:fe:eb:6c:08:1c:45:5b:d4:41:2a:dc:
                    c9:a7:5b:ac:84:61:ed:45:14:19:27:17:e9:ec:9c:
                    cd:e1:c5:3a:ca:1e:d9:25:32:43:bd:ba:0b:f0:ea:
                    cd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:A6:D9:D9:04:A8:9A:8B:32:07:1A:D9:AD:4A:B3:38:59:AB:98
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/ea31a166-ce12-4108-9868-894ac9df0e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:24:7c:d0:8b:f8:df:ac:f1:d7:34:57:20:37:99:07:24:11:
         03:2c:9d:e4:e3:c3:45:b7:af:71:15:b3:02:9d:c9:29:40:32:
         e8:8e:02:c6:ab:a9:e4:ad:3f:dc:7b:20:94:b6:70:03:36:c2:
         b0:89:79:ca:29:56:7b:e7:a2:44:db:80:e0:1a:71:ba:6c:c5:
         8c:93:b9:92:38:12:12:8e:e8:0c:59:27:b7:20:2c:36:e4:ce:
         e5:5a:44:f2:28:55:91:4d:88:e9:c0:76:b7:9e:02:46:08:bb:
         dd:a4:9d:66:c9:8b:05:e5:51:22:c6:9a:75:84:ae:3a:ff:c7:
         68:88:01:df:f5:0a:5f:b6:f8:98:4d:14:50:d9:d2:c2:5c:97:
         5c:95:bb:85:2a:22:40:4d:24:76:b1:bf:a9:a1:79:56:30:f3:
         6d:5c:4f:b1:ac:49:93:df:75:a1:4a:90:51:e2:89:8a:0c:ea:
         6f:e9:19:08:ff:d9:0e:66:07:83:a0:6d:d8:6c:b9:bd:04:0b:
         fd:ad:b4:7f:be:00:b5:34:aa:de:f9:56:6d:2d:8a:67:6c:0b:
         31:52:f9:c5:fa:29:1b:28:1a:d6:3b:f2:07:ad:67:1a:f1:c9:
         97:1e:9f:2a:73:70:22:ff:e5:06:36:cf:97:14:d0:53:a6:4f:
         24:82:7a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----