Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f6e3ef9-620e-492b-a475-8d26fd8e0020.roa
File:                     3f6e3ef9-620e-492b-a475-8d26fd8e0020.roa (raw, json)
Hash identifier:          gfVEc/6zWqs7pqdnXXu5mnnawQnOyaR14K4utcBssno=
Subject key identifier:   5C:8B:22:E2:74:99:D4:28:6A:12:DF:1E:51:57:8D:47:86:CB:D7:26
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       4D158EAD25EA97A1E10A6E216C3A5C04EC7FC3B6
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f6e3ef9-620e-492b-a475-8d26fd8e0020.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d016::/36 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:8e:ad:25:ea:97:a1:e1:0a:6e:21:6c:3a:5c:04:ec:7f:c3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=7e614adc024ad806ba1c1dad1ff32e7c7b261b3cfe8c4810e9163bf0e18bfb49, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:c4:13:39:f3:2a:39:5f:11:fc:23:32:a8:
                    01:19:3e:6a:70:a0:25:21:3e:98:ef:22:03:cb:f9:
                    e2:61:da:0e:85:b7:0f:c6:73:6e:01:1a:2b:3e:2a:
                    fa:74:38:b4:cc:16:cf:97:0e:ff:ec:fb:e2:46:c2:
                    52:e7:52:8c:79:b7:ce:19:43:5b:75:38:76:7c:1b:
                    5a:55:d9:31:58:70:39:40:00:4e:9f:d0:3f:8a:4f:
                    d5:87:bf:be:3c:5a:24:a1:b4:39:0c:15:b6:18:3c:
                    51:d5:25:83:3b:b9:a9:1d:8f:26:e6:80:1c:46:7b:
                    17:5b:cc:00:ef:f1:5b:f1:5e:f7:33:aa:72:28:f0:
                    22:45:98:a3:44:6f:e5:47:53:37:3c:30:2a:14:f0:
                    4f:55:29:ae:ca:08:d8:24:8c:98:bb:57:7a:18:ba:
                    5a:9d:6b:4d:73:12:47:e5:69:e5:9d:22:e9:0f:c7:
                    ca:52:79:66:73:97:70:6c:a8:90:47:89:26:c6:da:
                    60:1b:7c:39:53:8d:d1:1d:be:8f:c1:21:30:f2:ed:
                    4c:5c:6f:ac:f8:8d:db:4c:7d:ff:56:31:d4:9b:34:
                    6b:b0:7b:60:89:c3:91:85:6d:45:71:10:3f:68:fe:
                    a9:cf:07:1f:c9:ca:f6:08:b8:42:03:87:da:33:01:
                    96:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:22:E2:74:99:D4:28:6A:12:DF:1E:51:57:8D:47:86:CB:D7:26
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3f6e3ef9-620e-492b-a475-8d26fd8e0020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d016::/36

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:91:c7:94:7b:4a:04:3b:d3:55:25:fd:7c:95:35:9d:78:
         fb:db:85:86:b9:11:40:b1:70:73:ac:78:4d:fb:d8:c0:4b:ab:
         16:3f:9e:5c:bc:e7:32:7d:57:32:da:31:1c:d8:ac:4a:9d:2e:
         b5:c0:c4:c7:c8:42:b8:03:b4:8e:08:dd:fc:0e:ce:a9:bf:10:
         99:83:4c:42:12:25:de:c6:b4:7c:aa:da:96:dd:fd:06:8c:6e:
         17:6f:c8:e9:ce:25:69:e9:1c:a3:5b:eb:d5:8e:ce:c7:9c:d8:
         cc:b8:15:f0:8e:e9:93:27:71:b8:85:f6:dc:b1:93:90:85:c1:
         0c:0a:b4:55:70:8b:72:5a:fa:40:13:be:7d:fa:f3:4b:62:eb:
         a3:93:50:a2:b6:af:bb:05:2f:2b:07:b1:a8:d6:f6:f9:ca:8a:
         cf:16:03:51:44:79:52:8b:b6:43:4e:02:41:8d:f6:ae:4f:56:
         82:03:93:37:7f:10:83:40:50:a9:0d:54:22:cc:6c:aa:c5:31:
         f1:87:34:a5:e1:62:87:e3:2a:a7:f6:86:0a:d0:11:c1:89:ac:
         14:72:44:36:70:dd:47:3c:78:75:79:0d:6a:97:43:02:c6:61:
         ba:9c:3e:bc:4c:9e:c3:26:2c:db:13:62:c0:3f:fd:35:00:3a:
         30:07:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----