Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f870cd2-3211-4d48-b083-dc34ba1cf991.roa
File:                     0f870cd2-3211-4d48-b083-dc34ba1cf991.roa (raw, json)
Hash identifier:          4aR/6YXKtcvu6n2GeqCczQFFBeX2npZT+bFBJnX30Zg=
Subject key identifier:   52:F6:47:14:A9:6E:57:70:F7:FE:59:92:4A:7F:D9:35:66:0B:29:C0
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3215C1418E53FBE99FD94DA707103040CD676CBD
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f870cd2-3211-4d48-b083-dc34ba1cf991.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01a::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:15:c1:41:8e:53:fb:e9:9f:d9:4d:a7:07:10:30:40:cd:67:6c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=b3a68ba5f286d4bebfdc65d7abfdb4d5912e3357051f43e62230fe8ecff61639, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:c9:26:b9:71:55:29:55:5c:ba:17:53:21:
                    b4:57:eb:51:5c:34:4f:45:7c:8e:a1:43:95:85:eb:
                    e0:4d:f0:df:f7:62:ce:21:46:21:5c:75:44:ba:d3:
                    5f:85:76:df:96:06:e8:69:c9:c8:86:86:09:67:62:
                    f0:7d:c3:49:99:dc:e6:c8:84:7c:8f:a5:a8:ad:2b:
                    30:82:da:ee:2b:d8:bb:83:0e:a2:13:8c:60:27:94:
                    16:6a:9b:2f:43:04:73:2d:f8:23:b7:f4:e5:9c:6b:
                    91:3d:0c:eb:78:b3:fb:2d:87:58:97:f8:24:cb:d7:
                    ac:91:ab:9d:5d:10:79:14:a0:c5:7e:5f:38:fd:94:
                    3c:19:63:f8:5a:d5:94:04:f3:04:40:12:60:e4:0b:
                    00:96:34:20:f3:6b:95:a4:ea:03:a3:20:7e:35:23:
                    ae:b3:71:74:9f:ed:27:94:9e:01:a4:9a:1b:1f:70:
                    82:77:a4:a8:e9:b1:3a:8b:26:5b:d4:c2:c6:3d:07:
                    11:20:1f:43:49:c0:f6:bc:7d:09:85:6d:a4:80:5b:
                    68:e5:af:d3:08:5e:3c:f2:55:15:db:c0:2b:93:ee:
                    32:c4:36:ca:72:9e:a8:fa:72:51:3e:7f:3a:5e:ea:
                    78:b8:d2:f0:1e:38:d8:15:83:d9:74:99:cb:0d:bc:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F6:47:14:A9:6E:57:70:F7:FE:59:92:4A:7F:D9:35:66:0B:29:C0
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/0f870cd2-3211-4d48-b083-dc34ba1cf991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01a::/36

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:cf:74:49:44:60:1f:80:b0:2c:84:cf:bf:89:1e:3f:f9:
         e2:71:c2:38:6c:f8:5d:69:38:33:a2:ff:01:d2:4f:3a:4b:77:
         eb:da:e8:19:6c:b1:bb:0f:30:83:91:49:46:ae:5a:c9:35:d1:
         d3:f8:e1:35:a5:81:68:3b:08:f0:54:bc:44:18:94:a4:1c:9f:
         16:9e:7f:d4:c0:9d:ff:63:98:d0:da:c5:c8:8b:e2:de:f4:4b:
         3e:cb:37:38:72:92:4c:2a:fb:18:24:f0:8c:80:34:49:65:76:
         5e:e7:cb:37:e8:93:a5:6d:72:4c:1c:5d:21:9b:b5:25:d8:cd:
         72:7f:ac:40:dc:81:7e:9e:b2:72:75:f0:6a:6d:3d:a1:90:b0:
         b3:35:b7:77:40:e5:2b:45:a7:45:22:45:87:6d:65:c6:65:85:
         40:82:9f:d7:66:29:b4:7c:b1:f1:0b:76:de:54:66:f3:f0:f9:
         66:40:c2:db:4f:67:5e:ca:9f:4b:24:73:5e:15:f9:e3:a7:ba:
         bf:1b:87:25:af:9d:98:96:26:06:8d:4b:97:f8:71:0e:56:d9:
         5e:3a:54:80:a2:fd:cf:f9:09:9c:c9:ed:c8:f7:ff:00:5b:fb:
         25:fd:1d:9a:9e:2c:c5:a4:2d:dd:f3:d7:cf:0a:71:46:30:05:
         fe:3f:30:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----