Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d08739f9-fcdf-40f5-ab50-45ce3a671afb.roa
File:                     d08739f9-fcdf-40f5-ab50-45ce3a671afb.roa (raw, json)
Hash identifier:          iRyBTJUnUPvWDsMZoQWcpH3Zxpi6B+zAT7kngmuQ7zI=
Subject key identifier:   02:C8:42:EB:AD:13:E7:88:F3:51:96:83:FA:57:0C:84:BF:9F:61:80
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7448C45B1F280DA0AF883A4BDA68BB31653F2617
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d08739f9-fcdf-40f5-ab50-45ce3a671afb.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07c:6000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:c4:5b:1f:28:0d:a0:af:88:3a:4b:da:68:bb:31:65:3f:26:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=9c34ed1780e559928c707f1a54f6d77830c1db70a7279f077914010de49e1f44, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:23:f3:24:0b:6d:a2:3e:a3:99:b2:cf:b3:
                    79:6b:03:ff:92:00:c8:c1:ba:d0:a7:e1:d4:5f:13:
                    63:ed:8a:a6:ec:88:1d:53:2f:3a:8f:1f:43:d5:44:
                    21:e2:9f:e6:74:47:43:b0:5b:6c:24:23:44:63:48:
                    c6:a7:7f:c6:63:b4:49:7b:4f:ee:6e:91:aa:6c:f4:
                    29:f4:e9:a7:fe:d7:c4:79:83:3f:97:c5:4c:52:72:
                    9b:85:00:19:a5:27:fe:61:05:62:33:96:7c:06:b0:
                    0f:43:c8:3f:68:43:a0:28:4a:6f:9e:10:84:16:14:
                    19:80:4a:5c:65:13:27:2b:30:a4:3a:84:8c:63:90:
                    ab:94:5f:7e:b2:0a:e4:b2:88:79:87:6c:8a:fb:96:
                    93:17:80:9e:bf:18:2f:2e:89:fc:bf:78:68:3f:ee:
                    95:2b:16:de:1f:7c:ca:06:6d:2e:75:4c:12:59:f4:
                    34:1a:09:59:6c:d2:e0:48:f4:0a:d8:b7:d9:68:e8:
                    cd:77:50:62:9e:94:5e:0e:50:7a:06:47:56:7c:67:
                    65:8f:19:d9:74:19:07:e4:bd:8d:8b:98:97:23:51:
                    dd:9b:32:51:c3:00:64:36:f7:67:3b:72:c1:b3:f8:
                    38:58:2d:bf:60:79:51:22:27:35:4c:d0:07:25:d2:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C8:42:EB:AD:13:E7:88:F3:51:96:83:FA:57:0C:84:BF:9F:61:80
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d08739f9-fcdf-40f5-ab50-45ce3a671afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07c:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:75:cb:25:c1:b0:13:47:78:89:83:b8:f5:31:2f:62:2b:96:
         1e:51:29:9a:76:8f:a1:45:a8:89:2f:59:9e:ae:2e:a6:08:4f:
         35:b3:6d:1b:d8:3c:0f:46:e1:dc:a9:c4:41:d0:66:95:1e:bd:
         cb:ef:a0:f1:19:4b:49:b7:40:bd:0c:77:0a:4b:c1:4c:95:88:
         c8:f5:bb:6c:cf:f2:2d:fe:d1:cd:49:81:7e:5c:1c:85:c5:26:
         39:6d:0a:64:7b:ba:93:bd:91:7e:b5:e1:1e:20:b2:40:57:32:
         0e:37:ee:66:0f:8c:94:0d:a8:7e:14:e6:bd:a7:25:b0:4f:bb:
         31:50:eb:93:a8:2b:18:82:64:f8:fa:c6:72:35:72:ae:ab:17:
         a4:ac:12:26:05:b1:1b:44:9e:e2:c5:a3:53:d5:37:0d:5f:b7:
         8b:be:25:7f:52:7a:1b:be:a8:b6:64:b1:e3:fa:b9:a6:ff:f4:
         ba:ea:11:05:e5:dc:86:b2:b5:1c:4d:b1:23:05:36:ab:64:f2:
         6d:7b:62:c9:c7:6f:5d:52:a4:03:7f:7a:1f:17:78:36:0f:bf:
         57:82:53:c4:96:91:68:1b:69:de:f9:6a:48:cb:e1:29:10:68:
         ae:c9:74:30:47:55:2e:56:e4:c7:dc:67:38:4d:6f:87:a8:cc:
         84:fa:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----