Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c44d3640-5b10-4e27-a9a8-e3a689b9244e.roa
File:                     c44d3640-5b10-4e27-a9a8-e3a689b9244e.roa (raw, json)
Hash identifier:          +y8tSXwr9nvoZvbu33FPcUG1prD+LQ+Cvs5qI2UET24=
Subject key identifier:   A0:12:A0:69:7C:8C:1C:DE:35:72:6D:34:80:0D:24:E6:3C:3A:B5:FB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       15FEEFDC3DCF1477D3553E47267B2288DCB1D065
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c44d3640-5b10-4e27-a9a8-e3a689b9244e.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07c:8000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:fe:ef:dc:3d:cf:14:77:d3:55:3e:47:26:7b:22:88:dc:b1:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=a5d7a1ad49e24ee4234461b6a8275b3c12d246ecaf16711f6e1677fcd7259111, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:34:ce:ba:d0:2f:f0:7f:47:08:1a:a4:0c:
                    0e:20:66:22:40:bd:f8:c5:29:d8:63:67:67:6f:dc:
                    e3:76:4d:c2:50:3b:a1:ae:11:93:ba:44:21:36:d8:
                    22:d3:35:4a:90:0b:c2:26:60:51:02:df:96:cc:df:
                    fd:08:49:1f:c4:11:fa:19:aa:a8:d7:e2:50:dd:37:
                    f6:88:6a:95:bd:43:2e:42:d2:09:b1:c2:10:20:40:
                    c3:53:7e:33:41:54:19:2b:a5:ec:08:bc:18:c0:d9:
                    aa:1c:bd:dd:79:6c:1e:d8:c1:17:e7:7c:1e:35:15:
                    5f:ff:33:9b:cf:02:9a:61:0a:e6:8b:1a:7a:ce:60:
                    06:13:6a:9d:ce:18:a2:b1:23:ef:76:c4:1a:44:3c:
                    f6:13:40:61:ed:91:99:de:71:e6:55:34:cb:9c:a7:
                    20:4c:51:fd:0f:f7:4c:38:96:95:9a:7e:4d:7d:ce:
                    98:5f:78:ff:5a:de:75:88:2f:f1:8d:16:2a:e8:bf:
                    c4:be:b6:7f:25:f5:2f:df:e0:7b:9c:6b:25:7c:5a:
                    27:9d:dc:bc:de:7d:27:28:d3:fb:33:96:94:e2:90:
                    c7:3d:ea:31:92:8c:99:12:e3:2b:90:aa:d7:a2:02:
                    e4:7d:47:b7:84:5f:75:ec:44:1d:3a:02:aa:1d:06:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:12:A0:69:7C:8C:1C:DE:35:72:6D:34:80:0D:24:E6:3C:3A:B5:FB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c44d3640-5b10-4e27-a9a8-e3a689b9244e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:5a:7d:a6:e7:7c:3e:8f:06:b7:7c:33:f8:aa:72:a4:4f:d9:
         a9:83:0b:d9:f4:3d:61:be:f7:12:48:07:7b:a4:72:19:41:e7:
         9a:f0:fe:d7:96:5e:5f:6e:21:aa:84:40:4f:9f:ed:fd:f1:ed:
         01:69:d3:f5:e0:b6:49:ba:30:d8:5d:3d:01:12:10:52:65:ff:
         02:a7:6d:52:1a:cc:ce:e9:b4:df:99:74:f9:b5:16:a0:ac:6c:
         d3:98:7d:e8:cd:04:09:f6:44:a6:dc:7e:cb:14:67:fd:e9:4d:
         0a:d9:7d:2a:fc:c7:43:b7:2d:50:f2:ac:14:f7:3e:b6:55:3b:
         77:f6:dd:80:95:20:29:e3:ef:19:db:ea:ab:74:aa:a5:6b:b2:
         e8:29:23:4e:5a:12:13:d6:c5:df:b6:0d:85:4d:0f:0b:eb:99:
         08:e6:4b:fe:94:f9:f9:4e:9f:6d:25:5b:be:ce:25:5b:57:d5:
         b6:a1:80:b1:aa:e9:08:60:96:f0:96:1c:81:6a:93:b7:dd:a0:
         7a:8c:9a:a3:b0:32:fb:7d:61:43:e1:2a:57:9e:29:17:ec:75:
         4f:61:32:d0:68:90:2a:fe:00:6b:bf:73:d4:30:4c:9a:93:ef:
         59:c8:e1:5e:88:07:86:06:a7:37:8f:f4:5b:ca:7f:cc:46:a6:
         31:0c:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----