Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d67752ef-5be4-49e1-bfb3-b6ad809586e1.roa
File:                     d67752ef-5be4-49e1-bfb3-b6ad809586e1.roa (raw, json)
Hash identifier:          Mm/lsggbd/h3h17mf5O2N747/2SNY/ofR//yu2IyL78=
Subject key identifier:   72:F1:AF:BF:DB:86:98:C3:22:1B:55:69:63:7A:07:A4:FB:E2:30:BA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       61219F22B374BA636FBCEE271FB047D0B26F146E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d67752ef-5be4-49e1-bfb3-b6ad809586e1.roa
Signing time:             Fri 13 Dec 2024 00:00:00 +0000
ROA not before:           Fri 13 Dec 2024 00:00:00 +0000
ROA not after:            Fri 17 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:21:9f:22:b3:74:ba:63:6f:bc:ee:27:1f:b0:47:d0:b2:6f:14:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 13 00:00:00 2024 GMT
            Not After : Jan 17 23:59:59 2025 GMT
        Subject: serialNumber=0ab6d64341026b542a826b537d206128abf9d00a6b47ca84f4656a6936b25027, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:33:54:8f:56:e4:e1:c1:2a:9a:67:01:56:
                    5a:cf:6c:8a:25:0c:42:47:68:80:78:b6:cb:ad:46:
                    07:6f:5d:6a:cf:58:29:7e:81:30:68:2a:e0:b7:a1:
                    0a:ef:2e:a6:96:f9:12:48:ce:f9:f0:2f:8c:46:99:
                    b3:93:c7:35:16:1a:39:08:b7:76:7a:b3:49:94:55:
                    24:70:24:49:f6:04:ab:2c:35:c5:27:df:20:48:f6:
                    00:a9:fc:4e:ca:76:d1:a9:69:ab:be:1d:6e:67:cf:
                    58:48:17:9e:72:0d:1f:4c:97:79:32:96:b4:92:8e:
                    80:2c:93:33:d1:d3:1d:04:6b:01:27:0f:a6:c8:5e:
                    2f:8f:ae:9d:f6:d3:0a:da:27:ba:78:f4:96:6b:6e:
                    57:14:93:cc:37:77:12:e0:ab:9f:8d:d7:c5:2f:bf:
                    b7:b1:c3:13:82:cc:01:7b:23:f2:e3:b8:1b:4b:61:
                    dc:9b:42:e1:c3:ff:75:1e:79:17:00:4e:f1:ba:79:
                    40:4f:ee:f4:c8:7b:93:d7:4c:07:10:33:2c:b1:43:
                    29:30:7a:f9:d2:4a:d2:6c:66:11:82:84:7e:12:94:
                    21:2d:62:64:0e:d5:89:4c:be:c6:ab:18:a4:a6:5f:
                    39:9d:6d:b1:c0:f9:d3:a2:b2:12:3e:58:76:58:66:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F1:AF:BF:DB:86:98:C3:22:1B:55:69:63:7A:07:A4:FB:E2:30:BA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/d67752ef-5be4-49e1-bfb3-b6ad809586e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:ad:18:61:7c:5e:df:b1:41:4a:e8:e9:60:fe:e9:78:a1:
         e9:a6:cd:5d:45:16:02:8e:12:af:60:65:38:6f:d6:88:57:c5:
         29:a5:a7:28:46:dc:70:55:32:5f:1f:f2:6c:11:c1:5d:56:de:
         69:b1:59:8f:b0:90:e2:de:4a:66:d7:9f:9f:c0:e6:dc:08:8c:
         f7:5d:3e:e2:c4:9b:31:da:15:1f:07:9b:a2:35:ae:b4:e3:9f:
         97:b6:f6:a5:92:7d:06:5f:7e:4a:5a:a3:b4:70:69:8a:16:7a:
         0b:67:14:8b:30:49:96:19:9e:ef:81:f8:35:70:4b:13:c0:43:
         8f:c4:9e:be:6f:cb:d4:71:24:82:65:20:1e:1c:b4:4d:16:e5:
         56:aa:c2:cc:27:66:08:64:9f:f8:5c:97:3e:97:5f:9b:75:f2:
         4a:c9:47:8b:34:0d:72:21:a3:a6:a7:bc:34:6b:1a:b6:69:05:
         a6:91:8e:1a:99:9a:67:ff:62:ea:f5:6c:f0:03:2f:a8:c4:d4:
         28:01:38:72:e6:e6:2c:b2:87:76:86:18:25:f0:ab:2e:fb:4d:
         59:f9:e8:2b:3b:83:a1:50:55:f8:1e:c5:a4:da:20:18:73:81:
         30:43:44:29:51:6e:9e:b4:b9:c7:1e:51:a8:bc:88:9d:51:80:
         25:bc:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----