Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5676df0-dc83-4458-a656-99c6d72f0e6a.roa
File:                     e5676df0-dc83-4458-a656-99c6d72f0e6a.roa (raw, json)
Hash identifier:          HtRNcP259XqFOoftHDxKJGNvpxaZFpptNUZtlzHe+6M=
Subject key identifier:   55:97:98:31:67:06:20:5F:2A:D6:3E:B8:6E:F7:2C:8B:D8:10:A0:77
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       081239C3D66265D65FE90E5AFAE4A80BB9E2EA2C
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5676df0-dc83-4458-a656-99c6d72f0e6a.roa
Signing time:             Fri 06 Dec 2024 00:00:00 +0000
ROA not before:           Fri 06 Dec 2024 00:00:00 +0000
ROA not after:            Fri 10 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d032:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:12:39:c3:d6:62:65:d6:5f:e9:0e:5a:fa:e4:a8:0b:b9:e2:ea:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec  6 00:00:00 2024 GMT
            Not After : Jan 10 23:59:59 2025 GMT
        Subject: serialNumber=d608b192148725805a3c1849a69cd407ec86689dc84e763bb784db691318ae3c, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b6:04:c5:c7:2f:dc:54:6c:e7:02:15:de:3d:
                    76:33:17:93:46:94:fc:ec:c9:b8:17:19:50:85:52:
                    a5:d6:0c:32:66:a7:f3:74:f5:40:37:7b:47:0f:e5:
                    81:9e:3f:43:dd:cf:88:db:37:84:b4:4f:46:88:bb:
                    81:4d:74:8f:9e:81:83:15:8a:95:33:d5:2f:6f:75:
                    6b:a6:13:6e:75:12:b3:78:16:69:09:8e:d3:26:41:
                    82:2c:a3:0d:3d:1b:c1:70:28:8b:84:ce:48:dc:c0:
                    d6:0c:28:4f:98:01:49:a8:9e:d5:d0:3b:08:86:ad:
                    0f:c7:36:a7:d3:6a:6a:8e:79:1d:e1:ce:4e:1e:0f:
                    c0:ed:03:16:11:8e:c7:ea:2b:74:a6:19:58:d5:99:
                    3d:da:68:49:53:b3:d4:ac:90:80:ba:97:4a:0d:d1:
                    e0:18:1f:30:c8:46:cd:07:41:a4:00:77:95:39:55:
                    1a:f5:b5:d8:1c:5e:44:07:e5:15:e9:5c:74:78:cc:
                    aa:87:c3:3a:38:39:12:b2:4c:e1:99:10:6c:93:36:
                    63:aa:80:2d:ed:46:6c:06:7e:96:84:cb:91:49:bc:
                    6f:cf:67:9e:55:e5:b5:fe:f6:20:cd:b6:91:b3:32:
                    75:60:93:ef:c1:b8:68:ca:15:15:88:3b:4e:01:d0:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:98:31:67:06:20:5F:2A:D6:3E:B8:6E:F7:2C:8B:D8:10:A0:77
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e5676df0-dc83-4458-a656-99c6d72f0e6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d032:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:d2:75:bd:82:9a:69:04:fd:fb:93:53:06:2a:f3:3f:bf:95:
         c9:76:83:e7:0b:dd:4e:b6:82:5a:ec:7a:58:4c:7c:a7:ad:79:
         50:10:7b:ed:b6:d4:2d:2f:8b:4c:10:0f:42:8d:c3:dc:e1:88:
         bd:d0:b1:fa:84:01:1e:51:ec:6b:ef:8f:69:20:db:c2:9e:d5:
         f7:3c:0f:3c:e7:f8:17:df:89:25:6a:66:ba:88:e6:7d:e5:fe:
         75:7e:65:7a:1f:bc:34:ae:86:46:93:f6:9e:83:86:fc:41:19:
         f9:4f:71:48:9d:ec:a0:bb:0d:c9:37:55:31:65:8b:d3:c9:64:
         49:98:8e:f8:6a:13:0d:a6:d2:12:5d:64:08:74:ac:95:03:0e:
         68:bd:db:4d:5b:1a:7c:7a:a1:db:b8:ae:0e:a2:a2:bc:85:00:
         50:78:8f:37:c3:ea:19:33:22:0f:66:de:b5:33:9a:0c:7d:0a:
         88:e3:bc:4f:b8:92:b9:7a:f0:4c:a9:db:d3:50:af:0e:4d:27:
         37:c1:38:b7:09:39:5a:f6:b6:83:c4:fe:21:b3:79:9a:7e:f9:
         ea:bd:34:4e:a8:aa:3d:ac:e8:64:eb:4d:08:73:6f:bb:f7:94:
         9e:58:55:91:4e:a2:ce:50:08:86:f4:1b:a2:03:95:e0:da:21:
         af:7e:13:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----