Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bb38644-80df-4860-b82a-121044191ffa.roa
File:                     6bb38644-80df-4860-b82a-121044191ffa.roa (raw, json)
Hash identifier:          IvZ2jHXo1ZVy2KW2KLPOaxErMxrfoGjk/96PR5oj+tU=
Subject key identifier:   76:2B:7E:E3:DB:78:6F:B4:A0:AC:54:76:82:49:F2:2C:1A:AA:E3:A1
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       372BA718BDA5F7C278C572515B596DF23CF7CA6C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bb38644-80df-4860-b82a-121044191ffa.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d03a:2000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2b:a7:18:bd:a5:f7:c2:78:c5:72:51:5b:59:6d:f2:3c:f7:ca:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=d0eb142b6031b764477b9007ca90129c21b8e70dae98f82a1777941fd2b7003e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:55:83:e6:15:71:a6:2b:0c:d0:70:c3:cb:
                    b5:fd:ac:a2:da:bd:29:37:85:0c:32:f7:46:dd:7f:
                    55:14:bd:cf:91:30:1e:3e:6a:31:27:46:a3:b6:ec:
                    18:2a:9a:16:2d:ff:90:7d:c2:04:86:b7:19:2a:a3:
                    14:dc:1f:fa:c8:42:4f:bf:47:ca:cc:3e:b6:b4:25:
                    9f:1a:5f:5d:f6:1f:27:e3:ef:e7:d2:0f:41:22:88:
                    87:7b:24:d0:bb:80:03:7c:75:84:12:9f:c5:f3:01:
                    e0:57:51:f4:df:ad:bc:4b:45:c9:0a:98:3e:d2:c4:
                    e1:84:5b:e5:a4:ca:f6:ec:73:e6:93:8a:60:b3:ae:
                    ad:32:72:ce:7b:e9:a7:f8:6b:7b:aa:db:b2:2f:87:
                    f0:34:cf:0c:7e:8c:35:58:fa:5c:a9:5f:5c:13:f2:
                    63:2b:e3:99:b8:42:66:69:33:0b:c7:f0:59:90:9c:
                    6f:2b:5a:0f:d9:3e:2e:17:f5:b9:ad:f1:4d:5b:fc:
                    d1:41:22:81:80:60:bf:45:c6:14:77:04:7a:88:19:
                    03:33:e2:dc:da:bb:e6:0f:2b:31:40:c6:c6:a4:8e:
                    20:60:57:46:44:72:04:21:58:43:e9:3e:a5:64:f8:
                    68:b4:fa:68:51:76:00:71:83:e2:9d:9b:99:47:73:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:7E:E3:DB:78:6F:B4:A0:AC:54:76:82:49:F2:2C:1A:AA:E3:A1
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/6bb38644-80df-4860-b82a-121044191ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d03a:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:aa:cc:2d:1d:16:55:f1:bf:9e:cb:ed:c2:7f:0a:be:be:ca:
         91:82:28:0c:3e:31:cf:09:8a:5f:9f:7e:45:cb:79:29:93:18:
         b1:0b:ed:d5:19:7c:63:1c:35:5f:60:e1:1a:53:d4:65:ba:ba:
         e5:ed:9d:77:a1:75:6e:4c:40:e7:eb:3e:b5:0e:f3:42:c7:3a:
         30:50:bc:7a:f7:f6:d4:1a:58:cb:d6:c8:02:77:c7:30:90:4c:
         fd:e9:3a:2e:b5:f6:ae:84:16:c9:ad:8a:f8:63:4e:39:b8:0c:
         92:79:a7:0c:89:3f:79:35:98:fe:45:3d:cc:22:c1:ec:53:0f:
         ff:44:78:dd:b8:23:7f:d5:e8:14:24:b0:00:3d:87:bc:7a:e8:
         78:ce:0c:3c:e4:05:6c:8f:97:4c:dd:c0:1c:1d:c0:ac:40:14:
         3f:48:d1:92:b8:ae:78:dd:52:e3:c1:8a:a2:37:76:43:47:f6:
         4a:17:6d:07:77:19:8f:c9:75:2c:f4:1f:a9:d7:98:41:f1:04:
         ee:50:68:9d:27:38:18:90:45:b2:69:13:23:4d:1c:ed:42:64:
         e7:7f:c2:f3:87:e3:d7:3d:f7:4d:9e:48:5d:39:6a:87:99:d0:
         d1:9e:f1:d6:c4:d6:05:be:96:90:66:56:58:18:35:9b:07:07:
         54:b0:63:c4
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNyunGL2l98J4xXJRW1lt8jz3ymwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTMwMDAwMDBaFw0yNTAxMTcyMzU5NTlaMHoxSTBHBgNV
BAUTQGQwZWIxNDJiNjAzMWI3NjQ0NzdiOTAwN2NhOTAxMjljMjFiOGU3MGRhZTk4
ZjgyYTE3Nzc5NDFmZDJiNzAwM2UxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9GVYPmFXGmKwzQcMPLtf2sotq9KTeFDDL3Rt1/VRS9z5EwHj5qMSdGo7bs
GCqaFi3/kH3CBIa3GSqjFNwf+shCT79Hysw+trQlnxpfXfYfJ+Pv59IPQSKIh3sk
0LuAA3x1hBKfxfMB4FdR9N+tvEtFyQqYPtLE4YRb5aTK9uxz5pOKYLOurTJyznvp
p/hre6rbsi+H8DTPDH6MNVj6XKlfXBPyYyvjmbhCZmkzC8fwWZCcbytaD9k+Lhf1
ua3xTVv80UEigYBgv0XGFHcEeogZAzPi3Nq75g8rMUDGxqSOIGBXRkRyBCFYQ+k+
pWT4aLT6aFF2AHGD4p2bmUdzqhECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBR2K37j
23hvtKCsVHaCSfIsGqrjoTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
NmJiMzg2NDQtODBkZi00ODYwLWI4MmEtMTIxMDQ0MTkxZmZhLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0Dog
MA0GCSqGSIb3DQEBCwUAA4IBAQAFqswtHRZV8b+ey+3Cfwq+vsqRgigMPjHPCYpf
n35Fy3kpkxixC+3VGXxjHDVfYOEaU9Rlurrl7Z13oXVuTEDn6z61DvNCxzowULx6
9/bUGljL1sgCd8cwkEz96ToutfauhBbJrYr4Y045uAySeacMiT95NZj+RT3MIsHs
Uw//RHjduCN/1egUJLAAPYe8euh4zgw85AVsj5dM3cAcHcCsQBQ/SNGSuK543VLj
wYqiN3ZDR/ZKF20HdxmPyXUs9B+p15hB8QTuUGidJzgYkEWyaRMjTRztQmTnf8Lz
h+PXPfdNnkhdOWqHmdDRnvHWxNYFvpaQZlZYGDWbBwdUsGPE
-----END CERTIFICATE-----