Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
File:                     0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa (raw, json)
Hash identifier:          6klx11FHeImDE1hY0gZQxMlegENb0F9mS7dE+atd/kk=
Subject key identifier:   C1:25:86:A1:C2:EB:56:3E:D6:D0:13:90:ED:95:55:A7:C8:E8:B8:BE
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       2775901A26B87B57F36435C9DFD18A5D0C395DFC
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa
Signing time:             Fri 11 Apr 2025 00:40:04 +0000
ROA not before:           Fri 11 Apr 2025 00:40:04 +0000
ROA not after:            Fri 16 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        178.236.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:75:90:1a:26:b8:7b:57:f3:64:35:c9:df:d1:8a:5d:0c:39:5d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr 11 00:40:04 2025 GMT
            Not After : May 16 23:59:59 2025 GMT
        Subject: serialNumber=e4fea149ce6c884391f567d93f01e457f77391742e8800eb2f7e310ffaf23e1f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:8f:38:f3:be:da:f7:98:56:92:07:f8:25:
                    f7:a3:88:80:51:de:0f:94:59:d4:c0:0b:f0:e0:69:
                    4a:43:c7:34:68:55:6f:4e:b8:c5:20:3b:67:d1:50:
                    e7:9b:ae:68:30:12:57:ba:1e:6c:b0:b1:10:d8:b5:
                    9c:e1:ad:60:55:1f:1b:0e:9a:3b:f3:49:af:32:3a:
                    ae:15:4b:4e:fe:63:2c:de:fb:72:21:d7:e7:e2:d7:
                    33:d5:2f:bb:b4:a2:16:71:29:14:57:db:c2:56:39:
                    f4:91:5e:3f:b6:c8:00:db:10:10:b9:3c:13:12:76:
                    9b:44:b0:8a:2c:bc:77:35:67:e3:b2:99:3e:11:5a:
                    c8:79:36:71:fb:d9:ec:7e:0f:64:cd:4d:26:ad:e9:
                    06:a6:8b:9e:89:16:80:70:7a:2e:0a:a0:7b:14:e4:
                    33:67:27:f9:d3:f6:9e:60:80:20:72:b3:2c:8d:7d:
                    83:b1:ba:ec:66:0c:7e:d2:fa:51:69:5d:fd:62:b8:
                    1f:8e:1a:c9:cf:f5:fa:c5:d3:71:0e:d3:77:63:2a:
                    81:5a:2d:3e:b7:20:3b:53:c6:f1:53:97:23:1f:6f:
                    d2:0d:7f:dc:82:3b:45:0b:e7:ce:75:0a:ac:d9:b8:
                    6c:00:de:fb:95:31:ac:a2:34:0f:1e:60:8e:a3:19:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:86:A1:C2:EB:56:3E:D6:D0:13:90:ED:95:55:A7:C8:E8:B8:BE
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0992c8f3-91b8-483e-82a3-3c5c9c1a9e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:8e:f1:05:fe:6b:58:c2:23:7e:a5:36:12:ad:33:f3:f2:bf:
         1e:ec:1b:fd:27:0d:8a:61:97:f0:b3:ff:99:43:ce:75:91:d8:
         b9:e3:c3:40:68:44:0f:9d:a9:3b:ef:30:4c:51:00:92:9f:9a:
         3f:94:3a:8b:70:c5:52:ee:12:b1:5b:81:3e:20:87:bd:2c:74:
         93:d8:3b:17:b8:36:2b:da:3c:d0:ae:87:ff:5b:e3:97:a5:cf:
         d6:24:94:86:a1:9f:74:ee:5d:f5:26:f5:72:3d:f2:ea:a4:c5:
         d3:d7:74:e5:fc:27:a4:49:0b:ee:2e:8a:a7:1d:f1:ee:81:94:
         2f:4d:03:6b:2b:e6:5a:73:3b:92:91:02:c9:80:00:17:69:7b:
         47:ea:b9:31:fa:13:e0:9e:de:dc:b6:fa:cc:9a:e5:a9:a2:6c:
         11:eb:13:26:46:61:d7:6d:aa:a9:83:c0:78:1a:9b:cb:ec:a5:
         29:6f:a0:1f:8a:cc:66:4c:4b:5c:c7:51:20:28:62:8c:bd:0d:
         39:30:42:8e:4a:ad:a2:86:41:32:c2:12:90:c7:ae:06:68:df:
         ef:f1:49:f4:39:c8:1c:cf:3f:05:1d:a9:d6:8b:ab:3e:36:6b:
         73:29:87:c2:0a:66:c9:07:8f:1e:d6:84:6f:c3:85:03:d6:cc:
         74:26:f8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----