Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa
File:                     f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa (raw, json)
Hash identifier:          H/E6iD+ceB3+NoDSggfJ/GAI8qllzzrtVsTJ+w9OjNI=
Subject key identifier:   F8:B7:D3:FE:3A:D1:9C:9B:16:FF:05:05:E0:32:35:85:34:6F:AB:69
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       47119BB09485A8C3E80B808C72DADAC16C65D9CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa
Signing time:             Mon 31 Mar 2025 20:31:10 +0000
ROA not before:           Mon 31 Mar 2025 20:31:10 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:4040::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:11:9b:b0:94:85:a8:c3:e8:0b:80:8c:72:da:da:c1:6c:65:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:31:10 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=43464e41c4486f47eab101498dbdddcb0cdc928ec80c9461ffff06208dd6adff, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:5f:59:04:80:a2:0a:22:15:20:f0:dd:d1:
                    24:7a:85:2c:ee:eb:4b:1f:47:67:5e:75:7c:00:61:
                    dc:02:5b:98:68:01:7b:9c:2e:cd:cd:41:6a:5e:7d:
                    98:03:fd:3f:fc:c0:49:47:de:4a:53:62:54:87:c8:
                    08:cc:e6:b9:ac:4c:6e:a5:c7:4d:da:d4:51:8e:bc:
                    bd:f9:b2:33:c4:a2:44:b8:89:2c:2b:af:ca:76:e6:
                    c0:59:b9:f5:0a:c4:03:4d:20:5c:43:6a:ac:b3:11:
                    b2:48:9b:ee:6c:74:9f:e1:e5:b5:5f:79:ff:fe:29:
                    ee:05:0f:db:e9:83:10:57:7d:f9:76:2d:d2:14:c1:
                    2d:45:32:6b:3d:e3:60:bb:ba:63:60:c3:1c:88:70:
                    5b:09:7a:e7:8a:95:f6:b3:47:00:3f:11:b6:b2:1f:
                    a7:21:96:b8:0f:51:d7:03:11:6e:26:8e:68:0b:8a:
                    6c:c4:f1:87:fb:80:9c:58:f5:1a:54:55:ce:bb:74:
                    13:78:88:8b:23:3e:77:7f:39:15:c1:78:6e:77:90:
                    4a:c9:9e:26:6a:96:34:78:f8:49:e5:bb:ac:75:00:
                    69:ad:34:7a:2b:b8:c4:b0:9b:b2:7a:0b:b1:8b:3c:
                    28:1f:79:f7:b5:06:30:01:b1:0f:e6:ea:65:d7:60:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:D3:FE:3A:D1:9C:9B:16:FF:05:05:E0:32:35:85:34:6F:AB:69
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5848fa6-ac6d-40a4-82b6-9f25776b23df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:4040::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:06:48:da:02:ee:92:7f:b8:c0:a5:57:02:a6:0b:95:b5:
         1d:39:09:22:7f:d1:5b:de:c4:a6:21:74:82:10:dc:a1:60:18:
         c4:59:4a:2a:27:71:0a:68:42:65:7b:9c:e5:ab:ba:fa:69:f5:
         69:71:8d:0e:fb:c8:af:74:66:6e:fb:b4:fa:ac:92:7a:80:1b:
         8d:e4:b4:7a:7c:69:dc:6e:bc:0e:62:22:bd:6a:be:7f:a9:b7:
         08:02:f9:da:28:eb:5f:d5:ee:73:38:a9:df:a8:18:87:81:68:
         08:19:9d:32:d7:9c:99:7a:bd:76:38:c6:74:f9:04:59:a3:d9:
         f1:3e:04:60:ad:df:15:df:df:8d:ce:bb:a6:e9:d8:35:f5:62:
         3d:3f:d0:5d:f8:88:e4:7a:7d:f6:d3:a3:49:bc:1f:aa:68:f0:
         9c:90:0b:05:14:04:1f:19:37:89:10:3b:27:8d:14:57:1e:cc:
         f0:5c:3d:3d:fb:98:45:50:66:f0:a8:43:c7:55:46:20:ac:68:
         a9:05:6f:14:e5:32:a0:de:60:b8:d3:5c:bd:7a:16:02:72:be:
         ae:35:c3:13:ea:9a:81:e9:c5:0f:d1:a1:a6:47:ce:ad:ef:df:
         df:05:db:95:52:5f:29:31:5e:43:8c:4c:8d:90:28:7b:aa:f8:
         86:41:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----