Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
File:                     2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa (raw, json)
Hash identifier:          l8QjAYWk/QxDXnAOUdzYnT5w3svAiwqqaY10kS+wNBM=
Subject key identifier:   DC:25:FE:C3:64:B3:B9:57:43:94:66:83:98:FE:77:FA:DF:F7:E5:DE
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       25D7D19ED475D877E22724C85EA542173FD9C7FA
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa
Signing time:             Mon 18 Nov 2024 00:00:00 +0000
ROA not before:           Mon 18 Nov 2024 00:00:00 +0000
ROA not after:            Mon 23 Dec 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        2a01:578:1080::/41 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d7:d1:9e:d4:75:d8:77:e2:27:24:c8:5e:a5:42:17:3f:d9:c7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Nov 18 00:00:00 2024 GMT
            Not After : Dec 23 23:59:59 2024 GMT
        Subject: serialNumber=2c7cbb11b0a125bbd5426a544fa4b896babe6e87a460aca460f4562ef86073ec, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:04:64:07:97:c3:c8:e0:5a:fc:4c:e0:bb:
                    24:cb:5b:d7:35:21:9c:d6:df:4a:b1:6b:7c:01:86:
                    d2:ad:f9:88:73:1c:cd:05:bd:51:90:e0:59:51:26:
                    bf:1c:87:a8:c5:85:07:aa:5f:a6:b6:00:03:de:e9:
                    2e:9d:07:68:ce:f4:8a:b2:fc:b0:d6:47:61:b5:8a:
                    ab:1c:83:6a:93:5d:ee:03:b3:b9:03:7a:1c:20:93:
                    92:ae:9c:43:d3:44:37:ff:6d:31:a7:0d:e3:95:e0:
                    14:60:ec:bc:a4:01:db:b3:cc:a6:3a:bf:70:df:10:
                    8c:21:37:df:18:97:e3:4e:13:0d:de:91:c0:2a:f7:
                    3e:f5:38:5a:d2:c6:25:d3:a5:cd:1d:f0:8b:b2:f3:
                    90:43:21:b2:02:1d:b1:24:2e:44:3b:64:90:d7:5c:
                    61:95:fc:bc:bd:53:fa:bd:09:aa:93:9b:fe:ca:fc:
                    d0:a2:1f:ad:28:38:dc:d3:d1:c1:f0:53:27:6d:4b:
                    75:c3:7e:22:f1:89:b4:c9:31:c8:b9:00:82:51:4b:
                    77:01:f0:cc:2d:f0:34:1e:0c:a5:8c:10:9d:7d:6f:
                    80:ba:b6:c7:99:aa:48:1c:ba:f5:13:15:33:5f:59:
                    a0:78:9d:54:81:7e:84:cb:4b:68:90:d4:94:3f:4a:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:25:FE:C3:64:B3:B9:57:43:94:66:83:98:FE:77:FA:DF:F7:E5:DE
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/2e4c2934-9e54-49b6-bb41-7c76b504d78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578:1080::/41

    Signature Algorithm: sha256WithRSAEncryption
         81:1e:f1:e8:28:ad:2a:7e:ba:d2:54:d2:21:c2:3f:0e:68:0b:
         d2:5f:7d:a9:b5:7b:f0:d9:69:4c:b0:21:4c:1c:f9:15:75:8e:
         5d:98:06:79:4b:e6:51:7f:af:d6:3f:e3:6d:de:8e:e4:b4:76:
         63:e1:69:e2:44:73:0b:c5:04:a0:82:6c:a6:61:7a:01:21:a3:
         4a:a0:42:5b:9e:3b:5c:b4:4d:41:2b:7c:da:c0:4c:19:60:d9:
         67:88:22:b7:45:18:e7:54:dc:7d:73:7f:50:64:d6:35:a8:90:
         88:11:b7:e8:cd:69:d9:a6:b2:7e:1c:6f:0e:b1:49:68:ba:40:
         7e:84:4b:a5:68:ad:36:3e:21:d8:29:8e:32:cb:08:0b:57:b7:
         1e:4c:58:f8:3c:bb:fd:fa:b1:07:ce:41:a9:14:ca:4e:d5:85:
         54:7a:4d:ae:58:c9:02:b6:b6:50:38:29:f3:d2:9d:58:24:b8:
         0e:4d:c1:ca:6c:f0:9c:6b:7f:e3:26:e1:76:44:6f:4a:38:f5:
         2c:b6:1d:09:18:7d:3b:8e:a2:4d:26:55:25:23:c0:89:42:0a:
         d2:03:a3:ed:ba:0c:3f:4e:ed:af:30:53:da:3f:c4:46:1f:cf:
         43:6c:53:15:25:d0:df:45:5e:6f:f1:f0:43:71:3f:21:74:3c:
         d6:91:77:88
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUJdfRntR12HfiJyTIXqVCFz/Zx/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDExMTgwMDAwMDBaFw0yNDEyMjMyMzU5NTlaMHoxSTBHBgNV
BAUTQDJjN2NiYjExYjBhMTI1YmJkNTQyNmE1NDRmYTRiODk2YmFiZTZlODdhNDYw
YWNhNDYwZjQ1NjJlZjg2MDczZWMxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOdMBGQHl8PI4Fr8TOC7JMtb1zUhnNbfSrFrfAGG0q35iHMczQW9UZDgWVEm
vxyHqMWFB6pfprYAA97pLp0HaM70irL8sNZHYbWKqxyDapNd7gOzuQN6HCCTkq6c
Q9NEN/9tMacN45XgFGDsvKQB27PMpjq/cN8QjCE33xiX404TDd6RwCr3PvU4WtLG
JdOlzR3wi7LzkEMhsgIdsSQuRDtkkNdcYZX8vL1T+r0JqpOb/sr80KIfrSg43NPR
wfBTJ21LdcN+IvGJtMkxyLkAglFLdwHwzC3wNB4MpYwQnX1vgLq2x5mqSBy69RMV
M19ZoHidVIF+hMtLaJDUlD9KNq0CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBTcJf7D
ZLO5V0OUZoOY/nf63/fl3jAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MmU0YzI5MzQtOWU1NC00OWI2LWJiNDEtN2M3NmI1MDRkNzhjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHByoBBXgQ
gDANBgkqhkiG9w0BAQsFAAOCAQEAgR7x6CitKn660lTSIcI/DmgL0l99qbV78Nlp
TLAhTBz5FXWOXZgGeUvmUX+v1j/jbd6O5LR2Y+Fp4kRzC8UEoIJspmF6ASGjSqBC
W547XLRNQSt82sBMGWDZZ4git0UY51TcfXN/UGTWNaiQiBG36M1p2aayfhxvDrFJ
aLpAfoRLpWitNj4h2CmOMssIC1e3HkxY+Dy7/fqxB85BqRTKTtWFVHpNrljJAra2
UDgp89KdWCS4Dk3BymzwnGt/4ybhdkRvSjj1LLYdCRh9O46iTSZVJSPAiUIK0gOj
7boMP07trzBT2j/ERh/PQ2xTFSXQ30Veb/HwQ3E/IXQ81pF3iA==
-----END CERTIFICATE-----