Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8475bef-14cd-49df-8152-c3662b2d1c21.roa
File:                     c8475bef-14cd-49df-8152-c3662b2d1c21.roa (raw, json)
Hash identifier:          ZBIM2G6qX8a0BphH03LCRa2uBAAsLwZo1LjV0YJPEsY=
Subject key identifier:   22:B6:B4:89:FE:5A:C0:F3:23:0E:67:0E:E1:42:7A:14:AE:0F:67:DF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7ECD111C573FAA9D121DFDBCEE91108C0DFA89EA
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8475bef-14cd-49df-8152-c3662b2d1c21.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:4000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cd:11:1c:57:3f:aa:9d:12:1d:fd:bc:ee:91:10:8c:0d:fa:89:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=1ff6da24a401009d2784ff05d2fe39e22a5544a49a6fb021b29bbd1610eee70b, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:40:cf:99:ee:57:c5:65:59:d6:4a:16:ca:
                    85:61:ba:ad:08:87:ff:71:4e:a9:ad:e2:22:d6:d7:
                    73:14:5d:7d:dd:7b:ee:f0:49:aa:7f:b2:1f:67:b0:
                    d3:b5:89:60:fe:45:a9:54:73:39:04:ca:06:f6:20:
                    86:4e:09:9c:7f:21:e7:90:79:c8:7e:55:f0:4b:9e:
                    e9:03:7b:d6:06:d9:1a:d1:7d:4c:17:5d:75:c9:8f:
                    da:a5:a0:66:22:4a:83:98:36:9d:d1:88:77:e4:c7:
                    52:5b:0a:4f:94:6d:17:4d:fb:7a:78:52:e3:18:b2:
                    b4:2a:cb:ff:c0:dd:80:89:22:7e:58:d9:1f:ba:98:
                    8e:71:8a:f4:49:d0:3e:d7:bf:25:f4:1e:d3:40:7b:
                    4e:4f:a4:69:ab:0b:c2:6d:cb:d5:34:03:a0:e2:03:
                    e3:8b:af:13:31:ca:16:6b:1c:f2:b6:9c:e6:9a:2c:
                    18:2d:b7:0c:ee:19:de:d0:3c:3c:71:7b:f4:47:be:
                    e2:d2:b5:e8:92:c8:26:9a:e2:a7:7c:2b:7d:be:25:
                    a8:c6:be:20:90:2c:bf:ce:6b:6f:13:d6:57:6d:84:
                    61:29:df:3d:be:1a:dd:ce:03:fe:2a:5e:84:9a:d9:
                    8c:03:72:7b:9d:b4:a8:9c:46:48:32:6f:17:f0:dc:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:B4:89:FE:5A:C0:F3:23:0E:67:0E:E1:42:7A:14:AE:0F:67:DF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c8475bef-14cd-49df-8152-c3662b2d1c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:39:41:8d:54:50:19:2f:1c:de:03:ff:86:55:b8:8b:85:75:
         6b:92:bd:3a:a3:1e:86:18:84:58:21:22:9d:31:55:40:59:57:
         8a:8c:18:69:4c:fb:ff:49:88:9e:d0:20:7b:d4:17:9b:f4:5b:
         38:89:e0:07:31:c7:44:aa:2a:bd:db:ff:a0:64:23:e8:78:30:
         0d:70:b5:50:88:f7:e0:97:2e:2b:69:0d:9a:e0:9c:ad:41:38:
         33:35:2a:3d:7c:1f:96:b1:dc:57:52:46:a4:31:59:55:35:13:
         28:5c:10:f5:aa:4d:fd:e0:5d:e9:6b:47:8f:42:79:84:15:bf:
         bd:fa:94:c3:6c:49:de:bc:20:25:ac:cf:0e:34:41:be:97:88:
         a4:f4:87:74:07:48:fc:c6:21:2a:13:d2:df:d2:0c:e7:e2:c7:
         11:a6:bd:8b:96:d5:df:bd:ff:d2:61:d0:57:e9:56:21:d6:e4:
         50:5a:00:89:37:2f:4f:f6:46:a8:f1:eb:b6:e8:07:1d:fa:b6:
         38:dc:13:86:07:ac:0e:43:31:bb:59:fb:03:05:ca:da:14:a6:
         20:0e:c2:53:ea:cd:fe:e1:ef:f0:97:86:c3:25:eb:36:fd:a6:
         c3:5b:5a:90:c7:0b:13:17:60:24:02:25:e6:b3:ee:8f:15:50:
         1e:dc:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----