Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa
File:                     a6286624-a8d0-448e-926b-93a90bc30580.roa (raw, json)
Hash identifier:          ccjwQ8YCjhY5SSagzvZd+aONr+Rs602o1bto8w8IX5Q=
Subject key identifier:   CC:88:83:B2:6F:42:04:58:B4:04:64:0B:5E:38:3F:9E:E1:33:CB:F6
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1D5C70BFA0F342073078D70EA2819338C3D7E1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa
Signing time:             Tue 01 Apr 2025 15:01:12 +0000
ROA not before:           Tue 01 Apr 2025 15:01:12 +0000
ROA not after:            Tue 06 May 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d059:5000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5c:70:bf:a0:f3:42:07:30:78:d7:0e:a2:81:93:38:c3:d7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Apr  1 15:01:12 2025 GMT
            Not After : May  6 23:59:59 2025 GMT
        Subject: serialNumber=c33866d25ce9b566bd7b6637011637e52a81c47c31dee5f9e9b03f135508c7f1, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:a1:f4:7e:08:87:12:f2:a6:ca:1d:28:ae:
                    e2:46:fc:94:17:e1:fc:ab:2a:a8:ec:fb:47:2b:0e:
                    8c:6a:fc:68:15:16:e0:12:99:8f:20:da:9a:1a:2d:
                    f3:da:77:07:db:6f:4c:a6:01:36:d5:ef:6d:8a:bc:
                    f9:f4:98:17:d0:9d:82:8f:5b:92:dc:5d:8a:c1:5e:
                    6d:29:77:42:d0:f3:8a:72:68:54:99:cd:09:5d:87:
                    ce:74:ca:f5:52:b9:f3:a6:5e:f3:a3:42:6c:74:bc:
                    c3:76:da:94:07:db:61:2b:df:86:09:5d:81:70:46:
                    82:66:89:9a:96:88:e8:b4:5b:16:96:43:ae:18:db:
                    46:51:18:46:df:0e:b3:f9:b8:78:1f:cd:7f:3f:aa:
                    75:b7:e0:55:ca:fd:46:6a:04:6a:a1:84:bf:4b:65:
                    bf:32:14:2b:67:67:e5:7f:7f:4c:a7:21:d7:bd:b8:
                    21:39:7f:58:f8:a9:65:26:65:e8:e5:1d:9d:f8:4c:
                    2e:44:b2:eb:85:9f:c6:2f:4b:b7:ce:d3:a9:1f:b4:
                    fd:b4:60:7c:01:ed:84:27:93:ad:10:c5:9c:47:c8:
                    3a:d6:a2:a6:8d:05:43:72:d9:1a:b3:0c:47:ac:0f:
                    65:a5:68:f5:41:38:86:23:87:60:4d:89:b7:dc:3a:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:83:B2:6F:42:04:58:B4:04:64:0B:5E:38:3F:9E:E1:33:CB:F6
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/a6286624-a8d0-448e-926b-93a90bc30580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d059:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:b8:83:b9:ff:b9:64:97:15:64:e3:32:49:fc:06:b6:fe:1e:
         ed:77:62:9e:5d:d5:cf:4c:39:75:9e:f4:d3:8d:1d:7e:64:28:
         d1:a1:ea:e8:65:4c:4f:bc:55:10:4c:02:48:10:22:8a:27:df:
         66:64:b4:d2:b1:30:ca:ba:e8:e9:97:0b:9f:71:0b:82:db:6e:
         3e:c7:fc:ef:b4:b1:d1:4e:ee:84:de:9e:43:14:a3:06:07:28:
         ee:1c:21:e1:92:60:85:68:18:84:f9:ea:9d:3b:a2:65:22:12:
         1b:c4:d5:94:f9:34:0c:88:51:97:22:e1:1e:a2:b0:e4:9f:3b:
         84:e0:03:f0:30:0c:81:3a:ac:2b:08:82:31:05:d9:38:6a:b8:
         af:da:94:de:45:6d:35:f1:33:f6:54:46:97:dd:04:a3:8c:e8:
         f3:62:ba:ce:ae:63:0e:a5:d3:c9:7f:a9:1e:f4:a5:60:9a:39:
         00:1c:eb:a5:18:1b:bd:e8:cf:f6:6e:a3:38:33:90:10:aa:92:
         de:8a:1b:94:ee:bf:31:59:b3:a4:85:ec:5f:84:bc:18:5f:a2:
         c7:ec:9f:77:2d:db:78:a9:38:18:ca:68:96:b8:4b:a2:0c:3c:
         1a:85:d1:8b:45:75:29:ea:fd:6f:61:86:f5:34:82:d3:64:60:
         c4:78:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----