Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cc411bf-a46d-4b37-8b71-f707d9d5a299.roa
File:                     3cc411bf-a46d-4b37-8b71-f707d9d5a299.roa (raw, json)
Hash identifier:          q43xbUtwxDBGHbuEH7YPUm+gefb2SlC9Yc4nq2U+c04=
Subject key identifier:   1B:07:01:F9:74:56:F1:21:9E:2C:52:2C:46:D7:5A:BD:D3:D5:F8:1D
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       52D368AF31C66FC58FCB83A1137698CA4373454D
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cc411bf-a46d-4b37-8b71-f707d9d5a299.roa
Signing time:             Tue 17 Dec 2024 00:00:00 +0000
ROA not before:           Tue 17 Dec 2024 00:00:00 +0000
ROA not after:            Tue 21 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d036:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d3:68:af:31:c6:6f:c5:8f:cb:83:a1:13:76:98:ca:43:73:45:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 17 00:00:00 2024 GMT
            Not After : Jan 21 23:59:59 2025 GMT
        Subject: serialNumber=d7359c3071268237c9548c673726973e223d56b075962b696676ae6be1ebf2de, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:28:22:16:c0:63:1d:58:38:b8:ea:14:25:
                    1b:96:4c:59:b8:af:fe:ff:80:e2:0c:64:d7:c3:6d:
                    9d:b4:0c:89:b7:5c:4e:55:bc:32:8b:9a:1e:9e:38:
                    d5:ed:74:32:38:9c:ed:ee:e4:f8:35:35:48:69:4a:
                    64:20:25:5e:b1:6a:f1:e9:0e:7a:1e:e1:2b:8c:aa:
                    74:b2:45:cc:82:74:d3:6c:59:fe:20:fd:d8:90:2b:
                    55:95:ef:92:06:f3:1e:68:35:78:d3:54:97:81:d5:
                    11:36:e5:c1:12:e6:9c:a6:80:da:28:30:44:cb:22:
                    19:fe:ed:fb:b2:13:3f:b3:ea:37:ee:b1:be:8b:a9:
                    26:08:e0:af:da:9c:40:a3:43:f2:11:b6:a7:74:02:
                    a9:57:22:5e:c3:0f:dc:20:07:88:83:f3:27:b6:81:
                    2b:a1:18:68:1d:f4:e7:f9:3a:1e:21:2f:db:ba:75:
                    c4:60:4d:51:02:39:3b:aa:34:db:9b:3b:1c:26:00:
                    b6:8c:8e:d2:8a:0e:a1:f9:57:ad:45:5b:6f:4e:ca:
                    d5:51:68:33:ba:bb:00:57:f2:cd:35:f4:4a:01:1a:
                    c3:a7:c1:ee:d9:27:8e:c5:dd:59:d5:22:ce:f4:d8:
                    d1:75:aa:b9:b4:d4:d5:79:8c:36:e8:e9:04:45:de:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:07:01:F9:74:56:F1:21:9E:2C:52:2C:46:D7:5A:BD:D3:D5:F8:1D
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3cc411bf-a46d-4b37-8b71-f707d9d5a299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d036:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:38:c5:52:94:4f:70:0e:21:38:4d:a0:5d:6e:88:e3:c5:
         92:ef:47:1b:cc:c9:8e:0d:69:49:e6:6e:94:4a:33:3c:8d:56:
         18:f2:fd:51:1d:53:06:c0:9b:1e:b1:e5:9b:de:e8:e4:78:56:
         80:94:f7:3a:b4:0a:72:53:50:cc:c8:9e:13:25:8d:42:f1:4e:
         f5:ca:b9:10:04:b9:56:e4:84:62:3f:fe:b9:e0:1a:5f:ff:2e:
         4a:8b:57:dc:31:0e:9f:2f:81:3c:50:42:44:69:e7:84:c3:69:
         0b:5e:2e:61:6d:cb:88:07:e8:df:21:ad:e7:04:74:49:14:21:
         3f:21:55:61:6c:6b:c7:22:ad:eb:2f:05:af:d6:4f:f5:ec:40:
         59:77:80:e8:26:9d:e0:4a:f1:cb:b9:cd:cf:f1:7b:d6:a6:80:
         bc:c9:0b:60:1a:b6:68:d9:6b:2d:9d:76:6b:7b:31:5e:78:2c:
         e3:a5:0f:37:eb:fa:98:16:4e:38:cf:94:38:2c:03:85:f3:c5:
         f5:a6:6c:8a:df:09:75:42:5d:c8:63:16:d6:50:9e:0a:5a:61:
         27:51:c0:d8:12:ec:dd:4a:86:c3:69:ef:3d:da:eb:c3:da:0d:
         cd:f6:d1:b4:88:6a:3b:54:ea:f9:8a:61:23:94:94:ba:64:b3:
         60:33:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----