Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
File:                     f6813853-40b9-46d5-be14-0208aaccf095.roa (raw, json)
Hash identifier:          ylKeDd2cxHqHlxuWx1KgF3H+P6XB+kc1QYq7sIvSE6w=
Subject key identifier:   94:4C:89:30:6F:30:84:AD:6A:C2:FD:47:9C:68:2C:CF:8B:D1:A7:A4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6CDAB6B8655A6D4057B5E21FC2E5FBFD96DE70CF
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa
Signing time:             Mon 31 Mar 2025 20:10:35 +0000
ROA not before:           Mon 31 Mar 2025 20:10:35 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d077:4080::/46 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:b6:b8:65:5a:6d:40:57:b5:e2:1f:c2:e5:fb:fd:96:de:70:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 20:10:35 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=8de3eb4b7d9595dce612c1b537c9d26714a2222b3faf5db146027672c272dcab, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c5:df:c7:80:62:a6:09:cd:6a:33:f6:82:5b:
                    e3:3c:b0:c4:4a:d4:9e:53:1e:65:1f:d9:c1:d0:9b:
                    3a:28:cc:a3:87:3c:7b:6f:08:3d:38:9d:ce:f1:56:
                    67:b2:36:d7:e0:29:77:93:d4:d0:76:1e:3e:3f:47:
                    8c:b5:c8:51:83:1d:64:00:96:16:45:a7:e6:a7:ff:
                    2a:e2:23:1a:c3:11:9f:e1:5f:65:31:20:78:18:29:
                    c3:f7:be:b2:42:20:a3:f1:8e:38:6d:06:a5:15:32:
                    ae:06:d8:cc:40:69:d9:e3:ab:64:5e:55:f2:18:ff:
                    37:a4:1c:40:ce:e5:56:0d:3d:80:32:d8:38:32:ec:
                    22:e2:74:08:a6:99:87:2b:56:e9:cf:74:17:a8:f3:
                    af:6e:68:c1:4b:63:c5:a5:6f:dc:63:24:99:ad:11:
                    4e:a6:dc:66:20:bc:49:88:c9:4d:cd:bb:2b:c5:d8:
                    54:3c:a7:96:84:eb:9b:26:0d:74:b8:d4:9b:be:3a:
                    40:7d:0d:74:e7:01:96:5e:79:e1:06:67:b4:7d:34:
                    e3:c7:48:b2:ac:54:22:92:78:12:8d:9e:f1:e6:30:
                    83:6c:dc:c3:59:75:0e:71:1c:7f:49:b1:6a:80:2e:
                    d9:20:7f:cf:c3:04:da:43:15:18:b0:b6:7d:78:49:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4C:89:30:6F:30:84:AD:6A:C2:FD:47:9C:68:2C:CF:8B:D1:A7:A4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f6813853-40b9-46d5-be14-0208aaccf095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d077:4080::/46

    Signature Algorithm: sha256WithRSAEncryption
         45:ec:2b:56:cd:29:64:f0:12:72:82:0b:5c:ed:fc:1e:8b:4e:
         5e:cd:1c:8a:6f:92:ec:be:c6:7f:44:92:2b:e0:da:a4:ee:29:
         c8:d3:18:92:47:35:0b:58:4e:d4:8e:95:e0:6f:53:c1:83:93:
         37:1c:10:0f:62:16:50:8e:1a:2b:c6:30:54:4a:47:8b:e4:13:
         93:f6:98:cf:73:0b:e0:ec:b6:13:42:a7:e0:7b:6d:77:92:f6:
         94:66:ef:3f:df:6f:fd:05:41:62:e5:e6:fa:db:c6:c1:51:4e:
         54:7d:37:6e:84:4d:84:60:1b:dc:72:8a:76:2e:a5:9c:a6:9b:
         22:d9:ee:0e:d9:41:15:8d:9d:8c:92:db:17:09:b5:8a:34:5d:
         db:26:f2:09:e3:90:74:bc:bc:97:de:83:90:c3:58:a3:f7:73:
         bb:5c:d7:d6:ae:e0:ae:66:c3:98:c4:36:be:87:e3:d5:58:7c:
         b0:cf:82:13:b1:91:65:78:68:61:52:08:6f:dd:44:37:e3:cf:
         ca:15:75:76:6e:2a:64:86:d0:23:5b:e7:3f:a9:df:fd:f9:10:
         4b:ba:22:b4:46:e4:49:44:61:a8:7e:bc:75:e3:f6:d0:b4:bb:
         f3:6a:f7:78:a1:41:b3:f2:ed:2f:43:be:9e:23:5c:a5:8c:d1:
         77:28:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----