Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
File:                     fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa (raw, json)
Hash identifier:          DUW0MbU5s+wst+jMWR3zKsZNSPvXsMXbKHmkKepYyQA=
Subject key identifier:   43:07:DD:1E:75:F0:2C:C0:75:95:96:19:B0:49:F2:2A:54:85:C3:E3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       6374CF38DA9BF4E52B4EE8E6E8FAF191BF5502B3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa
Signing time:             Mon 31 Mar 2025 19:41:20 +0000
ROA not before:           Mon 31 Mar 2025 19:41:20 +0000
ROA not after:            Mon 05 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:2080::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:74:cf:38:da:9b:f4:e5:2b:4e:e8:e6:e8:fa:f1:91:bf:55:02:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 31 19:41:20 2025 GMT
            Not After : May  5 23:59:59 2025 GMT
        Subject: serialNumber=0185c11b783d35ed355481f277096c7b3e4b289129246a1569f5782b58c3897d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e2:51:88:64:33:70:09:3b:53:79:4e:45:c8:
                    8e:63:0c:44:9e:aa:36:26:d1:63:1e:73:a5:4c:1c:
                    1d:db:79:17:a6:4f:11:08:02:97:16:b6:34:4f:ee:
                    f3:b7:ce:5a:cf:1b:88:de:b6:b2:97:e9:97:45:d8:
                    5b:3b:e0:e4:59:d9:5b:b1:8b:b6:2d:ea:ff:5a:68:
                    71:51:f5:14:79:18:ed:e8:ce:0f:57:1b:35:77:d4:
                    05:ff:97:d8:c7:5b:22:a4:c6:9d:37:c3:8b:0a:2a:
                    12:59:26:36:4c:02:b8:be:e1:d0:88:ce:1b:1c:99:
                    71:fb:d0:f4:f3:17:24:e6:93:75:0a:58:36:f5:15:
                    7d:45:f6:a6:55:51:2d:96:f5:44:18:19:9f:35:c8:
                    13:1b:2e:87:a6:76:d7:51:d4:0f:d3:b7:1a:e0:96:
                    e2:b0:3d:b9:b4:a8:fd:ff:09:c2:ff:38:4a:70:3c:
                    90:df:44:40:7e:2a:81:09:fc:ff:b3:cc:09:1c:4e:
                    d5:ba:6c:f4:94:70:e0:c0:08:45:8a:8e:5d:7c:77:
                    17:3c:72:d3:51:91:4b:6c:9d:5f:6e:02:a0:b7:7d:
                    8d:af:91:09:2f:95:e4:96:a9:33:7c:fd:7c:38:c0:
                    5a:1e:e8:25:31:34:64:50:99:67:56:9b:d6:7d:a3:
                    1c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:07:DD:1E:75:F0:2C:C0:75:95:96:19:B0:49:F2:2A:54:85:C3:E3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/fb9d4716-bf0f-40e5-beb1-4ea5ef01bd1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:21:31:b4:e1:0c:52:b6:26:6c:57:c5:28:32:55:dc:ef:d4:
         88:e8:30:eb:88:b7:c8:e3:f4:54:e6:e6:7e:b8:54:8d:46:09:
         b3:e7:22:87:d0:7f:b5:e0:98:1b:9d:28:f9:15:e9:9c:78:83:
         ee:ef:0f:16:47:79:68:d5:ed:bd:79:bc:49:8a:ce:f2:1d:7d:
         13:38:06:54:9f:13:12:14:6b:9f:ae:78:f7:ba:ad:7a:13:5f:
         4a:7b:b8:24:fc:ee:d7:00:b8:fc:65:94:71:f9:e4:32:5b:45:
         da:77:80:8d:38:d1:06:13:ff:9b:a8:9a:23:08:f9:89:c4:ec:
         01:ac:e6:67:17:84:df:c1:2e:cd:85:78:a8:9c:32:ba:52:d9:
         05:9c:df:d8:81:f2:d5:bf:c9:39:79:54:b7:c0:81:c9:85:1b:
         d9:64:c8:81:04:21:e2:18:f1:67:30:e3:11:04:b9:48:a6:38:
         cd:db:4a:53:bd:bc:cb:93:42:db:07:69:78:5c:4a:89:4f:98:
         f5:5a:45:49:da:fc:b6:84:29:a5:f7:e8:f8:5d:3b:ab:c8:03:
         04:03:b3:70:bf:f6:83:9f:8d:97:8e:b5:42:5f:1c:2c:3c:82:
         f4:a9:90:62:57:29:2f:76:09:97:43:92:82:c6:87:1d:85:47:
         d7:84:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----