Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ac3b8df-5897-4d62-a8c1-cc2e28e97f23.roa
File:                     7ac3b8df-5897-4d62-a8c1-cc2e28e97f23.roa (raw, json)
Hash identifier:          TDgckcNA0bJOzBQ2IU563JNldpK6MuGAAEfTIy4L3uM=
Subject key identifier:   1C:C6:CB:B4:BF:F7:BC:CC:D1:8D:C8:60:23:3F:C7:1C:89:2C:9F:D4
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       3CCD17AED3BCB0FE3CB54AC89BC8B48AB1C8AB9F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ac3b8df-5897-4d62-a8c1-cc2e28e97f23.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d038:b000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cd:17:ae:d3:bc:b0:fe:3c:b5:4a:c8:9b:c8:b4:8a:b1:c8:ab:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=b6074063ee24def405e2b98f1dffe9c40417b3516b1b4b349e44018b8417d6db, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:98:43:9b:20:c1:1b:5b:97:95:3c:aa:f9:
                    f6:97:3d:0b:3c:60:07:16:84:12:7a:d5:0e:6d:25:
                    5d:04:d9:b7:98:a8:cb:f7:8e:8a:ae:e9:3b:ea:04:
                    cc:d7:07:57:70:2b:a3:df:df:39:43:d7:5b:bf:22:
                    09:54:79:df:4a:18:06:5b:b8:60:4c:16:14:cc:28:
                    4b:93:f5:f7:66:1d:9f:34:2f:2a:08:72:3a:94:cd:
                    5b:8f:1a:cd:e9:77:d6:b0:09:a0:e3:89:3b:05:ce:
                    2a:d6:5e:a8:89:5b:e9:0f:97:c1:15:6d:14:dd:0d:
                    17:4d:8a:12:12:e1:c1:1e:93:f0:ba:8c:4a:d0:c6:
                    5b:c5:0c:71:6a:b0:08:4e:00:07:21:9b:58:87:2e:
                    59:3f:6e:b2:f5:eb:9c:73:fa:a5:1e:ad:b7:34:13:
                    e8:0e:eb:d2:6e:2e:5f:2d:b6:7c:c9:a7:3d:1c:e8:
                    e3:2d:10:e4:c0:cb:68:8c:68:4a:93:1a:f6:7a:10:
                    dd:19:b2:ab:83:cf:63:77:67:d7:18:0e:5c:c4:38:
                    5d:0c:3a:36:51:04:08:61:f3:f8:38:c1:fe:13:dd:
                    1a:13:a8:4a:87:99:08:3c:19:71:46:a5:a2:c2:f3:
                    f5:bb:e9:92:ed:76:b4:ef:8c:75:db:8a:e4:a0:ff:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:CB:B4:BF:F7:BC:CC:D1:8D:C8:60:23:3F:C7:1C:89:2C:9F:D4
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/7ac3b8df-5897-4d62-a8c1-cc2e28e97f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d038:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:1d:83:f5:6d:b1:93:47:2d:c5:62:ee:03:cf:a7:9a:09:16:
         2f:6e:be:06:11:3c:36:29:69:26:91:3a:01:81:7a:6c:33:51:
         f6:0c:4c:cb:6d:63:1b:bb:34:2b:a8:ee:54:26:b6:11:dc:48:
         37:6c:0c:1c:82:65:8f:79:eb:00:cc:84:15:47:b3:c7:9a:3a:
         a0:17:bb:62:12:b4:a5:58:2a:75:cd:56:e7:40:4a:ca:bf:fe:
         42:fc:ca:83:95:db:05:ef:e7:32:76:a3:84:99:97:f8:d9:8c:
         c3:ed:83:35:5b:a2:a6:c0:09:04:0d:a5:56:65:2a:ce:55:3b:
         f1:7f:e7:d6:bb:d2:01:dd:f8:45:f4:29:2b:14:ea:da:5c:07:
         e1:c7:ee:31:dd:f8:6d:94:ef:5b:fd:3a:a5:6a:62:11:b6:f7:
         4b:8d:4f:8b:b0:bf:54:31:e3:48:14:b2:a5:3d:36:45:a3:b5:
         ff:13:fb:60:75:15:5e:28:52:98:a7:d2:89:49:12:6b:1a:e9:
         f2:29:8e:2c:d6:0c:b8:80:b8:c6:d9:fd:0e:a3:a0:11:ee:06:
         09:f0:7f:46:40:03:9b:28:ad:36:4d:1b:d0:29:64:0d:3d:c7:
         96:0a:3c:63:50:f9:f9:a4:a7:f2:20:c6:5d:0c:91:70:a2:c0:
         7b:12:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----