Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1a28f1-1bca-49d9-ab7e-3cad6d755d97.roa
File:                     eb1a28f1-1bca-49d9-ab7e-3cad6d755d97.roa (raw, json)
Hash identifier:          rej+oduj9wWIcZm3oi7ZgemA/xxU5n4w6dKR+2+GJww=
Subject key identifier:   3D:A1:C0:D9:61:EC:3F:3E:10:CA:1E:11:3D:5B:29:C4:B3:88:2A:31
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7266F10A08E37AEB8CBF5D5526C1611D20FC17C1
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1a28f1-1bca-49d9-ab7e-3cad6d755d97.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d030:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:66:f1:0a:08:e3:7a:eb:8c:bf:5d:55:26:c1:61:1d:20:fc:17:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=870de2164c30b3246cd0ff3cba22f8e93e12e9223718882384ba467c0868c681, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:b5:82:b3:1b:7a:47:63:51:c1:50:96:67:
                    f4:c6:8a:41:b9:29:c9:6b:69:6b:9f:52:a6:2a:04:
                    17:26:f8:02:d5:06:ce:47:87:89:d4:0f:99:22:be:
                    79:62:df:d8:1f:24:d3:1e:c0:5f:4d:68:cb:ec:06:
                    7b:e9:32:8b:20:d2:04:e2:15:98:f3:74:b5:c0:b7:
                    a9:05:0c:6d:ae:3b:a4:f4:a1:01:d3:0e:78:68:35:
                    ed:9f:dd:f6:ac:ac:b9:f8:81:60:d6:9e:08:fb:66:
                    18:a0:58:7a:bb:14:56:90:44:59:e8:a1:aa:04:e9:
                    d0:83:09:f2:df:9e:7a:b2:33:66:bc:79:98:10:1b:
                    19:11:42:c3:ec:09:1f:c2:b0:ef:2a:9d:c9:9a:bb:
                    2c:9f:4b:81:f7:dc:00:eb:5a:f8:88:02:1e:0e:36:
                    96:d8:d2:36:fd:01:33:35:be:f6:ea:f8:1d:32:8a:
                    02:a4:46:db:76:54:f3:52:f0:84:be:9e:ec:ad:8a:
                    56:10:1e:ab:13:3f:66:74:1d:6e:93:64:40:05:6c:
                    64:5a:5a:39:f3:de:f8:d4:23:7f:bc:8c:74:1f:2c:
                    ba:fc:bd:7d:8f:21:b9:4c:86:f0:14:19:74:38:5f:
                    5c:7c:9e:14:c1:3d:7a:89:26:64:27:36:6f:a8:be:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A1:C0:D9:61:EC:3F:3E:10:CA:1E:11:3D:5B:29:C4:B3:88:2A:31
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/eb1a28f1-1bca-49d9-ab7e-3cad6d755d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d030:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:f8:af:b1:7a:93:71:fc:9e:12:a2:e5:9f:08:f0:cd:de:c3:
         92:0c:05:09:09:bd:8d:8f:1d:40:82:18:67:77:0e:69:9e:4d:
         d4:1f:1e:6e:8e:95:ff:e4:98:86:b3:d9:6b:0e:18:80:07:e0:
         56:30:22:bb:91:ec:75:2a:81:e5:a4:9a:c1:79:24:0f:07:3a:
         61:3f:3d:11:c9:84:3e:4b:3e:83:58:2f:f4:55:f5:81:c3:b0:
         f6:0f:30:11:c8:d1:69:61:ec:4f:98:d0:30:ab:23:e4:a1:65:
         b9:5a:e2:2c:07:12:d9:04:86:b8:60:ee:75:ba:26:37:60:6e:
         82:c1:3b:94:62:d4:16:b5:c2:38:6c:81:5e:5c:11:86:20:f9:
         a7:79:79:31:5b:38:d1:2c:da:c5:1c:1b:ad:ab:b9:0e:bd:15:
         17:34:67:d4:4f:26:0f:d7:8b:e3:fd:0f:9f:5a:a9:0c:c3:cb:
         59:e4:6c:47:ae:78:36:d7:8d:4d:34:d5:52:52:ed:18:ba:f7:
         8d:99:11:1f:df:99:07:f0:72:85:39:9d:e2:3c:8c:72:2b:4f:
         c1:e6:63:06:94:0c:de:d6:50:91:94:3e:cf:0d:e4:fd:48:39:
         b2:3e:df:1b:f0:97:9a:4d:3a:07:30:9d:0b:db:09:88:6b:2c:
         d3:88:d8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----