Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
File:                     81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa (raw, json)
Hash identifier:          kqTX6U/7hY64XlIfMWGlwu1EOV1YKv5SjLjeCFLBMHs=
Subject key identifier:   67:77:82:F8:05:AC:2A:24:8A:B0:DC:FA:DF:A0:A4:92:32:E7:7F:FF
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       226C8EDC8842066AF7D697682F48B7C6FE4AEB33
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa
Signing time:             Fri 11 Apr 2025 00:50:11 +0000
ROA not before:           Fri 11 Apr 2025 00:50:11 +0000
ROA not after:            Fri 16 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a01:578::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6c:8e:dc:88:42:06:6a:f7:d6:97:68:2f:48:b7:c6:fe:4a:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Apr 11 00:50:11 2025 GMT
            Not After : May 16 23:59:59 2025 GMT
        Subject: serialNumber=91a12d9a79203fdc93ad095e278abb2949f9e05194a32476194d6f089e444267, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:0b:d8:4b:71:0a:9f:a7:63:00:ba:09:5b:
                    15:54:4e:a5:f6:f1:d8:1c:a6:ae:93:8d:2c:28:ca:
                    5e:17:3d:e3:3f:e9:83:d5:73:4e:3d:49:3f:0e:15:
                    90:7b:5a:e1:60:87:15:22:03:9d:e0:e7:79:30:e4:
                    96:35:d7:33:e6:62:97:4d:91:d7:92:21:be:57:51:
                    f4:0b:aa:dd:a5:d5:a4:96:b5:5c:d9:be:2d:84:9f:
                    d0:3a:de:f0:16:97:ee:c9:33:75:e3:c8:bb:15:08:
                    3f:1b:49:f2:e2:70:d2:9d:ef:d8:0f:8b:d3:d9:4c:
                    95:00:2a:d7:37:b6:56:02:6a:41:4d:6e:60:ed:c1:
                    46:ae:25:8e:6b:2c:45:2e:66:f1:3c:73:09:b4:13:
                    ba:de:1f:2d:6b:16:65:9a:ae:0c:46:f7:66:de:22:
                    7f:dc:73:6a:96:c0:bf:44:5b:58:33:f2:00:03:b8:
                    1d:c9:52:d8:cf:f5:22:75:83:7b:ba:2a:18:6c:5f:
                    b2:3e:60:77:05:90:93:3a:9c:fa:b6:28:59:6b:b3:
                    41:ca:50:e8:b3:2e:fa:07:b4:6c:51:e9:38:9d:c1:
                    db:59:72:f1:ef:6a:5e:47:3f:c8:4f:b6:ad:9a:4e:
                    7b:2e:ab:5c:29:bc:48:aa:08:1a:b2:f9:fd:d4:6e:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:77:82:F8:05:AC:2A:24:8A:B0:DC:FA:DF:A0:A4:92:32:E7:7F:FF
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/81bd2649-ad60-4c6a-bdf9-7b775e3d060e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:578::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:78:03:06:88:52:8a:b0:18:d3:bd:20:52:d4:16:f1:5a:aa:
         07:a2:fd:d4:f6:91:e3:b2:38:a2:c5:e2:94:ba:62:c0:a5:51:
         21:ec:ea:40:4d:f9:80:bb:35:4c:64:18:85:68:42:18:1f:34:
         cc:35:cc:c4:dd:b7:46:e0:9d:14:6f:b5:0a:6a:f4:66:19:a4:
         72:a3:03:ac:3d:0a:9c:a9:ea:78:61:51:5f:4e:bb:70:bd:b3:
         02:a0:a8:d7:22:96:45:3d:be:21:81:e0:ef:7a:91:32:7c:a9:
         2e:34:84:fc:b5:3b:b4:bb:bb:a3:13:5b:e8:06:10:5e:c0:57:
         8d:9a:87:99:42:f1:42:aa:41:fb:df:57:3a:d9:f1:17:1d:44:
         46:cc:c1:eb:0c:13:88:9e:52:3c:90:64:f3:db:9b:69:ee:28:
         16:f5:c6:9e:4a:41:b6:02:ef:26:87:d0:86:02:66:ef:4b:0e:
         bd:12:12:2c:c6:34:5f:e3:77:73:73:a8:cb:59:12:23:5d:b3:
         61:9f:01:e2:ca:91:7b:95:61:dc:a3:b4:44:dc:2f:eb:84:83:
         08:e9:90:7f:5b:0c:49:6f:7c:6e:7a:31:8e:02:b1:ec:34:77:
         59:40:c6:dd:98:aa:f9:f3:11:e1:d4:f2:80:03:8e:41:be:f5:
         9e:b6:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----