Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
File:                     78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa (raw, json)
Hash identifier:          xB9CAMD/b8pgRYqnOBtXyYIr6fW+zpQ5NrwkQqbfrkY=
Subject key identifier:   56:F0:60:15:94:55:1F:74:43:BB:55:3C:62:F3:09:9D:D2:90:D5:18
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       63C298898F3C91471D37B2D3B09D0BB759D217C8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa
Signing time:             Fri 21 Mar 2025 15:10:09 +0000
ROA not before:           Fri 21 Mar 2025 15:10:09 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2a05:d030:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c2:98:89:8f:3c:91:47:1d:37:b2:d3:b0:9d:0b:b7:59:d2:17:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 21 15:10:09 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:50:4c:64:42:0e:d6:ba:e5:e2:2b:58:7d:8b:
                    41:87:ff:df:1b:3d:4a:77:f3:c2:e5:0b:b7:61:c7:
                    c9:f8:43:9d:48:0b:a0:fd:12:65:77:69:fd:e4:c2:
                    66:17:14:35:e0:fc:78:dc:80:f6:98:8f:33:91:bf:
                    fa:c1:db:3f:c5:84:bc:ec:d5:60:8b:20:14:d4:4a:
                    ac:1f:1b:52:e8:ce:1d:61:55:38:44:5d:ee:fa:6d:
                    f2:8c:9d:69:32:ba:f3:ee:f6:6b:99:df:15:34:9f:
                    f3:7c:49:85:07:91:ce:55:f9:9d:f6:a9:ec:5e:3a:
                    fd:ee:1a:ac:61:69:78:db:66:c6:0a:4a:69:fe:f1:
                    7a:21:a6:07:bb:2c:05:f8:48:0a:fb:1f:19:f9:0f:
                    51:d9:96:04:04:ed:80:85:ca:7a:d8:d2:6b:ac:77:
                    ba:2c:36:f0:95:64:45:55:be:2a:ff:e5:12:41:6e:
                    f8:dd:34:ef:e1:59:e7:4a:c2:84:17:ab:4b:31:b3:
                    0e:0e:68:36:70:4c:27:9c:f4:11:5f:52:8c:c7:b1:
                    7f:91:26:e6:bc:69:4d:e2:a3:58:cb:1c:22:dc:62:
                    bf:fb:09:66:5d:54:04:b9:ab:81:81:0a:d1:40:eb:
                    e0:d2:96:31:c7:ab:38:a7:f2:66:81:ec:d4:8b:e4:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:60:15:94:55:1F:74:43:BB:55:3C:62:F3:09:9D:D2:90:D5:18
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/78085d0a-f1ac-43b7-ac6b-a8afcf9782f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:54:ad:9b:71:8a:29:54:37:4c:96:3c:3b:04:69:3d:1f:
         0f:0e:88:ab:34:64:ec:ed:26:c3:72:67:d1:e0:8b:a3:96:ee:
         8b:2f:ee:d2:80:65:98:95:3d:4d:d2:29:74:fd:ad:a1:08:36:
         c5:2c:4e:c4:7d:8e:1c:9b:a5:f7:ad:fa:d9:aa:df:d9:d2:4a:
         94:35:4b:98:1f:79:c9:30:c5:7a:d3:ae:3c:9a:c4:60:7e:22:
         ab:3a:43:5f:aa:0b:74:b6:42:3c:df:bd:60:da:6c:ca:8f:7e:
         ee:d7:98:e3:d3:9a:f1:d3:43:b8:e3:23:fb:e3:2d:e5:ab:d6:
         d3:61:a6:fa:ba:2c:50:23:3b:16:da:58:db:d5:41:5f:b1:f6:
         9c:c4:b7:64:21:a2:af:d1:42:39:41:74:ed:1e:9f:3b:34:c9:
         b8:74:04:e5:02:37:54:05:09:80:89:ea:41:96:48:ae:94:17:
         03:ac:bb:83:42:44:43:70:79:0c:75:7d:86:f6:63:ba:29:18:
         23:33:2a:4e:e2:03:0c:87:53:ae:a7:35:7a:e1:fc:42:8c:ab:
         ed:cf:9f:6a:5f:c5:11:e4:35:6a:18:7c:07:c9:20:c9:26:64:
         77:a7:d1:21:bf:e4:64:fe:e2:97:21:a2:c0:f4:0e:3e:56:2f:
         32:4c:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----