Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa
File:                     f9b7f141-37c5-41bb-af51-7e778b1a9376.roa (raw, json)
Hash identifier:          J173QWMuzoIVxf0yJ5+4q5WKG6KwlMyjt7wrPBvUAfE=
Subject key identifier:   1F:49:4A:44:E5:B4:1C:68:3F:63:21:31:5C:92:89:DD:E9:D2:B3:9E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       18A91A060492207F309C318487372FE6F99A9B74
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa
Signing time:             Mon 31 Mar 2025 21:00:56 +0000
ROA not before:           Mon 31 Mar 2025 21:00:56 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06e:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a9:1a:06:04:92:20:7f:30:9c:31:84:87:37:2f:e6:f9:9a:9b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 21:00:56 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=95a556a53e4c8f908131d002e296becc97f9fb35303d757592734d494088c671, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:c7:58:eb:b4:a7:d5:3f:a2:33:5d:be:66:
                    1e:8b:c9:4d:c9:ab:15:5b:b1:09:04:7f:07:b9:08:
                    b2:71:e0:a2:18:0c:62:71:5f:e3:3c:50:eb:2b:f9:
                    8a:89:ad:f7:e5:a7:8d:89:27:b8:64:32:c1:98:e6:
                    c1:f5:95:8c:49:c3:11:3a:51:fc:6b:e6:44:4e:ea:
                    9a:a9:f0:72:32:37:99:28:7b:91:9d:72:f3:72:bb:
                    dc:1d:cb:d4:7c:43:64:14:ef:05:10:76:7b:7c:b2:
                    94:da:5c:da:60:e0:3f:ed:c3:9f:a9:c7:52:ae:55:
                    61:84:65:3d:2c:e9:10:72:ec:b2:72:90:59:15:61:
                    e5:f4:c1:be:c3:26:ef:7d:2c:dc:51:64:53:d8:b3:
                    5c:b9:8a:3d:0e:61:5d:24:72:f9:f4:4e:63:89:fb:
                    20:46:1e:3b:65:e5:40:43:7b:e9:cd:2d:fe:d3:05:
                    0c:ce:db:3a:c1:59:11:26:3f:c4:75:6c:16:4d:3a:
                    2b:02:a5:13:e0:c4:d4:b1:35:96:8f:99:14:1d:5c:
                    f0:b4:64:6c:26:40:b4:1c:ac:40:56:2e:26:2e:ec:
                    22:b4:2c:87:6f:2f:5f:df:ae:e4:3d:cf:32:46:7a:
                    95:9a:3d:67:db:1f:09:38:d2:3b:5b:27:58:78:77:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:49:4A:44:E5:B4:1C:68:3F:63:21:31:5C:92:89:DD:E9:D2:B3:9E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9b7f141-37c5-41bb-af51-7e778b1a9376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06e:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:66:4a:78:de:65:50:dd:85:2d:3d:a4:57:b0:59:af:54:3e:
         32:5d:5c:f1:99:79:86:72:8e:f9:ce:5c:99:db:cc:bd:0d:ca:
         96:fe:ae:9f:33:5f:5e:9e:4b:b8:c4:9c:a9:49:12:bc:fd:65:
         f7:1e:49:82:b7:b5:76:e9:23:ad:f6:76:27:61:7b:c4:8a:03:
         bb:6f:e4:fa:89:5d:48:6d:c6:87:b7:0d:88:48:a4:02:48:e3:
         3f:fc:48:8b:ed:8e:61:a4:bf:0d:7d:bb:0a:7c:f1:be:e0:89:
         4a:14:5c:81:62:77:70:2a:55:97:4c:7e:62:bb:2a:cc:c1:7e:
         5a:c1:1d:1a:ca:ec:5c:64:3a:f2:f7:0d:0e:74:43:6a:95:a8:
         c8:d0:95:47:b9:bc:6c:c1:62:1e:8c:7f:81:83:6d:9a:f9:18:
         64:be:eb:56:30:c0:fc:a4:ae:46:19:29:e6:50:44:c5:e1:8c:
         a3:4a:d9:95:c4:e7:15:fb:c2:9e:05:2f:47:51:da:20:e5:a0:
         1f:60:79:71:a1:4d:79:39:af:10:af:44:21:57:c3:52:d3:be:
         4e:ca:ee:f6:b4:ee:f1:e8:69:ba:a5:20:75:da:80:1d:1e:63:
         c8:b5:bd:11:31:ea:00:00:ba:32:73:42:01:ba:25:4e:23:a9:
         f5:96:f7:83
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGKkaBgSSIH8wnDGEhzcv5vmam3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzEyMTAwNTZaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDk1YTU1NmE1M2U0YzhmOTA4MTMxZDAwMmUyOTZiZWNjOTdmOWZiMzUzMDNk
NzU3NTkyNzM0ZDQ5NDA4OGM2NzExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALyZx1jrtKfVP6IzXb5mHovJTcmrFVuxCQR/B7kIsnHgohgMYnFf4zxQ6yv5
iomt9+WnjYknuGQywZjmwfWVjEnDETpR/GvmRE7qmqnwcjI3mSh7kZ1y83K73B3L
1HxDZBTvBRB2e3yylNpc2mDgP+3Dn6nHUq5VYYRlPSzpEHLssnKQWRVh5fTBvsMm
730s3FFkU9izXLmKPQ5hXSRy+fROY4n7IEYeO2XlQEN76c0t/tMFDM7bOsFZESY/
xHVsFk06KwKlE+DE1LE1lo+ZFB1c8LRkbCZAtBysQFYuJi7sIrQsh28vX9+u5D3P
MkZ6lZo9Z9sfCTjSO1snWHh3bJ0CAwEAAaOCAiMwggIfMB0GA1UdDgQWBBQfSUpE
5bQcaD9jITFckond6dKznjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjliN2YxNDEtMzdjNS00MWJiLWFmNTEtN2U3NzhiMWE5Mzc2LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0G4Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBgZkp43mVQ3YUtPaRXsFmvVD4yXVzxmXmGco75
zlyZ28y9DcqW/q6fM19enku4xJypSRK8/WX3HkmCt7V26SOt9nYnYXvEigO7b+T6
iV1IbcaHtw2ISKQCSOM//EiL7Y5hpL8NfbsKfPG+4IlKFFyBYndwKlWXTH5iuyrM
wX5awR0ayuxcZDry9w0OdENqlajI0JVHubxswWIejH+Bg22a+RhkvutWMMD8pK5G
GSnmUETF4YyjStmVxOcV+8KeBS9HUdog5aAfYHlxoU15Oa8Qr0QhV8NS075Oyu72
tO7x6Gm6pSB12oAdHmPItb0RMeoAALoyc0IBuiVOI6n1lveD
-----END CERTIFICATE-----