Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa
File:                     c4d3b985-fb36-4d6a-bd42-a221f302409f.roa (raw, json)
Hash identifier:          Arvcxvnosz/RrE9XLZUTCISODx3s/lRc5Q3eDrE9jRY=
Subject key identifier:   1B:2B:95:7B:C8:50:8A:E9:1D:74:EE:EE:89:38:8A:23:66:84:3E:D8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       346D94C939E530B22E32945D6336FF464AD87EF2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:94:c9:39:e5:30:b2:2e:32:94:5d:63:36:ff:46:4a:d8:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=49d41b5a37e9fbef50071c4766b6dc9bb44fbe9d85e8d8a47d6e1a9766a328bd, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:7b:7f:6b:d0:e0:9f:46:e0:91:99:ea:da:
                    8b:55:03:73:27:70:e4:46:83:c7:e1:83:08:a8:69:
                    63:35:18:53:1e:b1:0f:83:5f:e6:f6:d5:61:5e:8c:
                    dc:5f:17:77:89:b6:0c:6e:43:1f:08:ba:65:2b:0b:
                    2d:a7:0f:8c:d3:d7:7b:78:ce:27:a0:1b:d2:c6:2e:
                    38:ec:2c:3a:d4:fb:18:17:5a:14:21:c8:12:e9:3e:
                    5a:4e:65:5f:3e:b1:8b:0d:7c:f8:65:10:5a:29:85:
                    98:61:9e:c6:6c:08:8f:0c:1c:18:44:e3:a4:4e:ab:
                    8e:4a:89:17:12:b8:14:dc:b7:3a:10:f8:59:a3:7d:
                    8a:75:a0:2e:7e:c3:58:9d:a5:da:34:6c:24:f2:f7:
                    78:f3:fd:b9:db:0b:b5:38:77:83:55:aa:66:e4:cc:
                    fb:3b:8d:2d:62:d0:08:54:da:a9:af:fd:35:a8:ec:
                    87:17:d7:d6:27:f1:d7:a0:b5:d7:62:4c:94:16:95:
                    1b:bb:09:d0:74:58:54:9b:da:03:fc:e5:66:21:ea:
                    9f:0e:19:80:76:da:d5:a2:0d:39:6a:ab:fc:ba:27:
                    f0:56:d7:02:83:3a:eb:bb:be:15:68:0d:85:95:37:
                    3d:c1:d8:d1:22:dd:f0:ec:89:2f:c7:82:97:4c:aa:
                    f6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2B:95:7B:C8:50:8A:E9:1D:74:EE:EE:89:38:8A:23:66:84:3E:D8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c4d3b985-fb36-4d6a-bd42-a221f302409f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:54:97:bd:d7:17:5c:b5:6a:aa:a4:a5:12:12:d2:78:f6:
         7e:93:2d:62:14:77:84:14:2a:5e:32:f7:c3:0b:71:40:44:1c:
         cf:67:30:c6:85:0c:3c:8e:28:9f:cb:19:fa:53:64:e4:07:14:
         3a:79:42:e1:d4:a5:59:f9:7c:2b:75:93:5c:32:72:52:c5:1a:
         1a:bf:69:1b:a0:db:db:a2:fc:b3:72:a2:42:73:33:5b:5d:0f:
         a8:59:51:8e:36:b4:94:0c:34:fb:99:33:7d:56:7c:e7:86:40:
         94:44:02:fc:ac:db:58:4a:bd:06:4f:71:34:ea:d9:5d:be:ab:
         9b:b8:e0:15:fa:66:8f:ea:a7:43:c7:95:1b:c8:d0:6b:a2:85:
         05:8e:1f:f4:b2:05:d1:2d:ef:0e:09:29:92:bd:95:20:ee:e0:
         2b:ec:95:30:86:28:44:bd:5c:37:c7:5f:e8:99:5c:0d:aa:64:
         0f:fc:1c:e7:89:c3:f5:0d:48:a6:df:89:b2:e2:25:c4:28:4c:
         73:52:f9:2d:56:9b:61:b0:31:ac:36:bf:ef:72:bb:fd:4b:bf:
         a6:26:56:a5:b4:4d:1a:0c:cc:3a:43:fe:1e:22:d0:78:af:d4:
         29:d0:0f:cd:a7:8e:c3:c5:c6:4b:9f:d8:df:0d:d0:7c:8e:40:
         81:0e:06:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----