Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bf2a24c-942b-480a-ae17-c534fb5a88ac.roa
File:                     3bf2a24c-942b-480a-ae17-c534fb5a88ac.roa (raw, json)
Hash identifier:          PSIqmx9gZwLCsWD35W9pPeLMDD9yAINCKiUkZwn9rqc=
Subject key identifier:   7E:52:40:68:03:14:0C:D8:E8:BC:A8:AC:D1:19:E4:DC:63:EB:41:DA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1BC972578EB157D49823E2083D76FAF18B8CC0C7
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bf2a24c-942b-480a-ae17-c534fb5a88ac.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:e000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c9:72:57:8e:b1:57:d4:98:23:e2:08:3d:76:fa:f1:8b:8c:c0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=a19266b91bf16bbe15c35b9639ed6cd9f5a80f76fbd2d8198021bc0b55aff726, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:8d:32:2e:ca:50:e2:c3:c2:7e:dd:75:be:
                    b5:bc:ba:b9:4d:b6:88:1c:37:28:45:29:48:6c:47:
                    9a:70:e2:cb:ea:88:44:99:77:57:52:00:c4:34:8e:
                    54:19:8f:09:f1:8b:ba:96:c0:78:11:a6:2f:34:0c:
                    f5:80:a2:b4:aa:ee:39:b0:43:53:94:ad:39:77:af:
                    60:12:ee:20:3d:31:24:bf:5b:90:e8:b0:f9:3d:8f:
                    97:e1:62:1a:3c:29:a6:3b:c4:47:6d:f4:4b:74:78:
                    88:11:b3:78:70:58:52:12:7c:4b:ac:54:19:51:b8:
                    89:c0:30:f1:b4:6a:f7:bc:13:79:71:be:dd:20:31:
                    8c:5f:17:d1:70:a0:42:42:c0:b2:b2:b0:28:81:61:
                    00:c3:2a:1c:18:74:73:f9:26:43:ba:fc:53:b7:88:
                    93:46:9d:4e:0b:d6:a2:bb:b8:d8:ac:a7:8a:96:94:
                    17:8a:83:a2:a4:0e:59:03:c1:7a:48:f7:ee:e8:33:
                    77:5b:39:6b:9e:d4:8a:6f:69:83:ad:4e:28:4c:4e:
                    39:84:5a:2c:55:fd:f2:49:2e:13:8f:c7:32:27:3d:
                    ad:df:9a:a6:4c:ae:51:78:b5:4d:a1:50:ac:77:5c:
                    ce:0b:e6:00:3f:fd:3b:32:e2:69:bf:6b:46:01:95:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:52:40:68:03:14:0C:D8:E8:BC:A8:AC:D1:19:E4:DC:63:EB:41:DA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3bf2a24c-942b-480a-ae17-c534fb5a88ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:b9:51:f2:d8:3e:bc:2d:aa:81:69:ed:f7:58:94:a1:14:
         6d:60:7b:5d:37:d7:3b:51:11:3b:e0:2b:61:b5:b8:de:0f:83:
         1a:0d:e9:0e:de:fb:d6:94:8b:e4:06:ea:86:20:0b:c7:d0:57:
         1b:ef:25:2d:07:2a:ce:a4:bf:a2:1f:4d:6d:7f:7c:31:69:c7:
         8e:4e:79:6e:da:a5:a3:cf:68:af:79:d1:2a:66:0a:17:fe:98:
         c8:72:87:fc:bf:dc:d7:46:c8:5d:8d:c4:a8:8f:29:14:a7:bf:
         b8:02:4e:4f:8f:d4:41:e7:b2:0c:e3:55:82:59:4b:9d:6b:10:
         7b:a0:8c:45:58:a3:65:12:8b:f6:cf:17:d2:47:f3:89:e4:11:
         65:05:b3:25:4b:ff:af:75:b3:05:a3:ef:cd:f5:3e:80:16:84:
         80:46:28:6e:19:3e:8f:aa:c7:48:48:78:60:1f:51:d0:82:ee:
         f9:a2:12:51:02:cc:6f:ae:d2:e2:f2:ed:f1:ac:50:41:10:d9:
         4b:2b:ea:1a:0f:a5:91:4a:75:c1:e6:91:b0:be:9a:aa:2f:2c:
         65:9e:c8:65:3a:f8:4d:7b:e7:2a:3e:85:16:69:59:7c:c5:86:
         ae:39:33:c1:c3:32:b7:2d:f5:50:06:6c:b0:fc:14:be:07:9b:
         af:9c:27:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----