Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa
File:                     f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa (raw, json)
Hash identifier:          jTTzCbLA2+X6U3LCto5P0EJ6sIdVy4BrH07rA9UvbCo=
Subject key identifier:   60:BA:8A:D8:9C:E1:E8:4C:29:DE:34:72:EB:62:04:F9:BA:83:43:33
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       19A0C0DD5E42D6042938E9616D6EE25D72B7996E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa
Signing time:             Mon 31 Mar 2025 19:41:22 +0000
ROA not before:           Mon 31 Mar 2025 19:41:22 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d000:9000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a0:c0:dd:5e:42:d6:04:29:38:e9:61:6d:6e:e2:5d:72:b7:99:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:41:22 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=db97509b23c56efe4c09211bd6f8b33f4a7354e0484699b87d96a7c0950b5a56, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:43:d5:bb:82:b6:5e:bf:6b:2a:c5:99:aa:21:
                    6c:c5:e1:99:2a:ba:cc:e2:63:1d:1b:a0:cb:12:f7:
                    fc:22:53:00:cc:e7:83:b0:4a:42:82:01:5e:7a:1d:
                    ed:86:d2:2e:b8:b4:07:8c:cd:c6:91:23:b9:ce:d2:
                    03:4d:88:33:10:83:ee:6b:ba:0b:4a:f2:d4:e0:40:
                    42:fc:f5:a5:16:7f:68:f3:63:09:2d:4c:7d:be:9d:
                    17:19:60:0c:89:11:2a:3e:70:50:61:ca:39:5b:76:
                    d6:09:ad:e6:11:9e:e3:8a:24:f2:60:4b:00:33:84:
                    77:e2:af:15:7b:37:d3:97:0f:fc:15:8e:13:e2:41:
                    3a:c4:d0:db:54:b1:c9:47:a7:a1:e1:35:37:40:dd:
                    0d:17:ef:bb:e7:0f:97:95:cf:86:cf:1a:f5:b8:a9:
                    71:c6:aa:3e:01:da:7c:17:7a:ce:d3:ab:a4:80:4c:
                    e2:64:12:4b:56:b6:e1:17:2a:f3:ff:53:67:05:23:
                    e7:f9:30:25:f4:5a:53:46:64:a0:1b:42:a8:01:8d:
                    ec:eb:5f:8c:1b:cb:4e:27:2d:f8:b8:9c:09:c6:35:
                    c4:38:26:08:69:1d:15:a2:0d:ca:91:53:e1:d2:df:
                    3d:92:72:31:2e:e4:a2:bc:af:8c:d8:70:07:a9:49:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BA:8A:D8:9C:E1:E8:4C:29:DE:34:72:EB:62:04:F9:BA:83:43:33
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f19a1ce3-3726-4d8d-8d3a-b2ec0509cc76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d000:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:a7:0c:2c:44:76:7c:9c:b2:63:6c:50:7e:cb:5e:d3:5a:
         4b:a4:31:58:ad:30:5a:b5:72:82:b6:4b:6f:a1:8b:7e:05:32:
         9b:cd:0c:dc:c1:92:7d:1c:06:f7:71:1e:fe:2d:0b:8c:93:b1:
         f5:cb:89:ce:ea:da:82:8c:18:a9:9d:26:68:a9:d1:ab:e3:02:
         9b:b6:06:c7:5b:49:17:f7:89:81:dc:3b:a1:cc:88:ab:e9:65:
         2a:4d:92:5e:f4:33:d1:fd:1c:dc:ac:f6:ea:50:30:59:62:07:
         06:4e:27:53:30:71:d5:12:98:71:ce:30:d3:93:78:cd:4f:9f:
         2e:82:47:69:bb:63:1f:22:d5:77:68:09:f3:e8:90:42:ca:4d:
         be:c0:6f:91:e4:eb:2c:b5:44:b1:22:86:73:0a:95:61:73:82:
         41:f4:ec:1a:db:a0:32:68:dc:db:bc:a7:54:cf:c6:13:d2:ef:
         e6:90:e3:9b:7b:41:f1:d4:b0:e6:d5:8b:a5:31:08:46:0b:65:
         37:3d:2c:3a:2e:db:54:47:ec:3f:e3:f0:0d:25:aa:f5:63:7d:
         df:0f:77:6b:27:b2:8e:ae:86:85:6b:e8:d7:ba:4b:82:da:97:
         9e:e4:45:72:2c:7c:72:b6:b1:c9:12:f5:89:b9:1b:69:aa:f6:
         b7:63:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----