Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
File:                     fa3b401f-ea91-45a9-8182-d567cfac077a.roa (raw, json)
Hash identifier:          4m+axzAyVG9uiwAaFBdGlqMEn+bij1fi+Fup1HAvW5Q=
Subject key identifier:   17:05:AE:74:F9:B5:26:CE:42:63:EF:BF:E8:4C:E2:F9:37:33:B8:80
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0C103DB3FBBF8ECE9000EA887FF36DC9A2325771
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa
Signing time:             Mon 31 Mar 2025 19:10:41 +0000
ROA not before:           Mon 31 Mar 2025 19:10:41 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:b080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:10:3d:b3:fb:bf:8e:ce:90:00:ea:88:7f:f3:6d:c9:a2:32:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:10:41 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=2e14925cc08abef9286a7137bf2167b331515be0f55b63b48f04324006c5f32d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:e2:4c:e0:56:a5:ca:21:49:0b:b4:05:bf:
                    0c:3f:e0:7e:6c:c7:e1:29:c7:f7:49:c7:f7:2b:03:
                    0c:3b:71:4e:1e:af:d4:3e:46:2d:f9:80:cd:a2:fb:
                    4b:0e:61:0f:2d:65:c9:d0:53:45:3b:c4:14:b3:56:
                    ca:d7:5c:8e:85:21:23:2d:b6:4c:7c:88:b8:70:de:
                    1d:00:1d:e0:5b:af:42:49:b3:48:9a:ad:da:5b:74:
                    10:02:9a:71:04:aa:a2:73:7f:d0:e3:dd:7e:6b:7b:
                    76:74:79:00:53:69:83:c9:94:d9:3f:dc:bd:58:67:
                    b7:6c:87:1e:c7:1f:51:de:e7:af:e4:34:70:4b:4f:
                    17:fc:a8:cb:2e:de:bc:2e:ab:1f:23:49:f9:b8:be:
                    e6:22:6d:da:06:74:bb:09:58:41:62:75:9a:1a:ab:
                    2f:1a:1c:3a:c3:56:07:28:bd:36:92:b9:fa:7b:16:
                    8a:4d:0f:c2:ab:3a:56:97:3b:88:a5:94:51:5d:ce:
                    30:f2:a9:ad:d3:0a:50:a5:55:ed:06:62:2c:eb:e8:
                    e8:2d:b9:ba:84:6e:99:91:0a:4d:a3:13:73:91:08:
                    73:a7:ec:8d:d6:b5:1d:0e:53:ca:5f:28:e9:de:79:
                    22:75:e1:33:38:5b:04:34:59:85:fb:bc:97:a6:7e:
                    a5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:05:AE:74:F9:B5:26:CE:42:63:EF:BF:E8:4C:E2:F9:37:33:B8:80
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fa3b401f-ea91-45a9-8182-d567cfac077a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:18:a0:cc:cf:ba:42:9d:04:fc:ce:71:b5:6e:3e:25:98:3b:
         3f:af:d4:62:f5:8d:cd:49:a3:89:8c:59:4d:4c:a6:9f:bf:71:
         4e:8c:a9:7b:df:37:24:a0:28:53:20:ba:f7:c5:3a:c9:ae:6d:
         57:9b:2e:e8:3b:b6:f1:05:d7:6a:af:ed:69:29:ce:bf:ad:67:
         cd:8c:7d:44:57:1d:a0:42:8b:ec:bb:68:62:79:fa:c5:4f:e4:
         66:03:c6:db:54:ea:f1:b0:97:2d:03:45:b0:2c:ee:78:26:95:
         4c:7c:20:78:b6:9d:31:99:de:1f:85:50:3b:ba:56:e9:6e:8f:
         71:4e:52:7f:fd:2e:15:de:10:0b:4e:b3:b1:ad:93:b4:95:ab:
         92:74:f3:5a:9c:c6:86:0f:48:c0:c8:94:f7:f2:40:d5:ec:e4:
         63:43:f5:f2:9b:3b:d9:f7:80:8a:ab:93:7f:e4:f4:fd:62:ed:
         41:60:9d:6f:5b:b7:28:2d:dd:bf:6c:46:e8:8a:97:ab:7f:08:
         30:11:0f:d3:ea:77:63:fe:98:ed:e0:2b:8f:8c:38:ea:5b:fa:
         e7:20:b2:95:a4:3c:75:64:3e:d9:71:c1:c9:26:58:d1:c3:66:
         77:d3:c4:e8:ca:c0:e2:c8:fa:33:20:98:0d:90:bc:a4:42:b1:
         ef:d0:2b:b2
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUDBA9s/u/js6QAOqIf/NtyaIyV3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAzMzExOTEwNDFaFw0yNTA1MDUyMzU5NTlaMHoxSTBHBgNV
BAUTQDJlMTQ5MjVjYzA4YWJlZjkyODZhNzEzN2JmMjE2N2IzMzE1MTViZTBmNTVi
NjNiNDhmMDQzMjQwMDZjNWYzMmQxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANkD4kzgVqXKIUkLtAW/DD/gfmzH4SnH90nH9ysDDDtxTh6v1D5GLfmAzaL7
Sw5hDy1lydBTRTvEFLNWytdcjoUhIy22THyIuHDeHQAd4FuvQkmzSJqt2lt0EAKa
cQSqonN/0OPdfmt7dnR5AFNpg8mU2T/cvVhnt2yHHscfUd7nr+Q0cEtPF/yoyy7e
vC6rHyNJ+bi+5iJt2gZ0uwlYQWJ1mhqrLxocOsNWByi9NpK5+nsWik0Pwqs6Vpc7
iKWUUV3OMPKprdMKUKVV7QZiLOvo6C25uoRumZEKTaMTc5EIc6fsjda1HQ5Tyl8o
6d55InXhMzhbBDRZhfu8l6Z+pZUCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBQXBa50
+bUmzkJj77/oTOL5NzO4gDAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZmEzYjQwMWYtZWE5MS00NWE5LTgxODItZDU2N2NmYWMwNzdhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0DGw
gDANBgkqhkiG9w0BAQsFAAOCAQEAnBigzM+6Qp0E/M5xtW4+JZg7P6/UYvWNzUmj
iYxZTUymn79xToype983JKAoUyC698U6ya5tV5su6Du28QXXaq/taSnOv61nzYx9
RFcdoEKL7LtoYnn6xU/kZgPG21Tq8bCXLQNFsCzueCaVTHwgeLadMZneH4VQO7pW
6W6PcU5Sf/0uFd4QC06zsa2TtJWrknTzWpzGhg9IwMiU9/JA1ezkY0P18ps72feA
iquTf+T0/WLtQWCdb1u3KC3dv2xG6IqXq38IMBEP0+p3Y/6Y7eArj4w46lv65yCy
laQ8dWQ+2XHBySZY0cNmd9PE6MrA4sj6MyCYDZC8pEKx79Arsg==
-----END CERTIFICATE-----