Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc93f38-5896-4a75-87cd-091473542cb9.roa
File:                     2dc93f38-5896-4a75-87cd-091473542cb9.roa (raw, json)
Hash identifier:          sWM/mmD2OYEzp8CfEVlM/P1rpg/WI8Nmc/UI+NUQ1PQ=
Subject key identifier:   AA:C8:98:C9:C2:77:FD:F0:63:CF:ED:A3:CB:A3:4D:C9:F2:8C:78:66
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       0F01DAD9E2B91734136B8FEBAF423B8D1BF04936
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc93f38-5896-4a75-87cd-091473542cb9.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d076:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:01:da:d9:e2:b9:17:34:13:6b:8f:eb:af:42:3b:8d:1b:f0:49:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=2696b2053e90eff92f0b15fe0294d568992076701c1454df4db7196ee2d6a1cb, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:3b:96:ee:75:37:02:01:de:05:45:6e:9b:
                    c3:e4:f3:33:9a:09:88:a0:a3:03:17:28:75:16:98:
                    37:83:3b:0c:bb:8d:39:40:80:c5:b6:7f:5a:27:24:
                    28:fc:8a:e0:a4:fa:2d:21:2f:b1:a2:e4:6d:44:15:
                    db:38:ff:0b:17:d9:aa:0f:52:2b:0c:9f:d0:f5:22:
                    d4:b1:af:86:1d:38:0c:ed:5d:1c:6f:5a:68:55:c7:
                    4d:92:d8:33:2c:b8:e4:28:3f:98:1c:c2:39:6d:d2:
                    3e:76:e0:1e:87:11:26:d2:4a:8d:1f:de:7c:ab:d3:
                    df:94:f4:93:85:5c:85:29:bb:26:32:cc:dc:43:68:
                    8b:90:e4:5c:d7:60:cb:89:0d:b6:26:79:3d:32:95:
                    7c:be:a6:7a:5f:db:30:ce:e1:c4:ed:bf:4a:42:52:
                    4b:bc:29:30:85:58:2d:ba:49:72:b5:c6:cd:bb:3a:
                    1a:62:10:59:e9:10:ce:0b:90:a7:d3:59:a9:ba:45:
                    e3:6d:5f:9f:55:c1:6e:6b:99:34:fc:c2:8d:ce:3a:
                    f2:e5:ac:26:4d:46:78:9d:3e:19:97:c0:f0:5a:fd:
                    e1:03:79:ba:b1:e9:f8:b5:d6:83:56:00:d2:30:8b:
                    43:f1:d1:3e:c3:81:2e:4c:0b:2c:01:fb:ff:54:ab:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C8:98:C9:C2:77:FD:F0:63:CF:ED:A3:CB:A3:4D:C9:F2:8C:78:66
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/2dc93f38-5896-4a75-87cd-091473542cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d076:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:81:17:c9:78:8c:10:01:94:fc:97:dd:79:d3:a3:fa:74:
         4b:ea:f6:b1:7b:f0:27:cb:7b:3b:ea:af:74:63:1e:9b:5f:6c:
         ab:e2:e3:79:27:ec:d0:da:0f:bc:3b:b0:8b:c8:57:9c:36:24:
         3e:9f:08:83:7d:09:cf:8a:ed:87:71:54:71:84:5c:b9:85:b6:
         c9:05:3e:a7:11:19:44:36:d7:97:83:16:39:06:35:93:82:55:
         7e:b0:8c:02:25:67:59:8f:20:c9:2e:6c:9b:75:05:fc:18:df:
         db:16:7f:7a:1d:04:10:b7:3b:43:26:ce:d0:ed:27:7d:61:96:
         ca:1b:f9:64:74:12:47:78:5e:a8:ff:2a:5e:db:85:75:e0:3a:
         92:3c:79:d6:50:7f:da:fa:49:b3:b6:25:8a:ac:74:b3:ca:e7:
         21:51:db:8f:a7:3b:f9:62:1e:d9:72:54:85:63:49:3a:2c:8d:
         3f:50:45:5a:a1:b5:17:5b:d4:27:ab:1e:48:3f:cc:d1:91:77:
         4e:9f:e4:6e:2d:20:32:5d:20:75:a1:ad:d6:67:24:78:66:3f:
         b2:a2:92:5a:13:26:92:96:86:f1:a3:c4:67:16:67:71:ac:c1:
         ba:94:d6:cc:9f:ff:58:f9:0f:56:aa:8f:92:37:9d:1e:35:86:
         52:21:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----