Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9e6230a-2e23-47ba-a3dd-770575785f82.roa
File:                     f9e6230a-2e23-47ba-a3dd-770575785f82.roa (raw, json)
Hash identifier:          ycDxyrrimR0D4uIA8yGvP+6R2kglyEWf9qBLE68/09I=
Subject key identifier:   A6:55:14:D1:9D:2B:25:38:E1:06:BC:FF:E2:A6:9C:73:6B:8B:CD:F8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1BA29AED1A467C23F008892A01B11FF5233CA70E
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9e6230a-2e23-47ba-a3dd-770575785f82.roa
Signing time:             Mon 16 Dec 2024 00:00:00 +0000
ROA not before:           Mon 16 Dec 2024 00:00:00 +0000
ROA not after:            Mon 20 Jan 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07f:9000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a2:9a:ed:1a:46:7c:23:f0:08:89:2a:01:b1:1f:f5:23:3c:a7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Dec 16 00:00:00 2024 GMT
            Not After : Jan 20 23:59:59 2025 GMT
        Subject: serialNumber=a258f2d32fbd401432d9a8a544a61c3b79e3c8c623335ca88e7c45fbef586b25, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:64:b9:49:bb:1d:b9:27:28:6b:c7:d0:e5:
                    a8:9b:05:b9:27:92:77:39:81:64:13:0a:24:96:25:
                    6f:eb:73:e0:82:46:8f:2a:05:41:86:49:e6:3e:6b:
                    c2:e6:5d:d1:86:fd:4a:b6:30:e2:0b:43:f0:28:1e:
                    44:42:3b:91:e8:3a:73:46:08:ca:a7:e2:92:72:79:
                    d2:3a:2b:f9:4b:b9:d0:10:b7:ff:5f:4d:b3:49:2a:
                    2f:52:51:c7:f1:20:c4:48:64:94:0a:9e:03:be:19:
                    75:0c:21:12:9e:a0:a3:a5:46:e1:4f:79:67:6c:d5:
                    e1:45:25:24:48:41:cb:d9:47:8d:48:a8:e7:48:0e:
                    b9:91:4b:5f:25:ba:dd:dd:b9:7e:53:fd:1f:8e:a3:
                    80:38:39:0f:3a:2c:6c:2c:ab:d3:a7:b2:8d:71:bb:
                    95:11:38:0d:21:47:d7:e5:f2:26:8e:80:d3:d6:ed:
                    ef:a9:00:ea:c5:8a:12:35:89:27:4c:94:26:01:f2:
                    36:5b:3c:60:d7:5b:40:1c:58:25:ce:eb:3e:dc:0e:
                    a5:7c:0d:6c:7f:76:98:6e:47:b6:e5:9a:c2:56:cb:
                    38:8e:b6:7f:5f:7b:1e:e9:8b:a6:95:0f:30:40:6e:
                    65:c6:8d:4c:fe:9d:7c:39:6b:34:26:7f:ee:1b:9a:
                    da:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:55:14:D1:9D:2B:25:38:E1:06:BC:FF:E2:A6:9C:73:6B:8B:CD:F8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f9e6230a-2e23-47ba-a3dd-770575785f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:ae:e6:70:60:f2:1f:13:ab:26:7a:cf:a9:6e:11:45:8b:
         af:1a:d9:fe:57:8a:84:8f:01:ae:6c:b2:f9:bf:a2:36:37:51:
         2f:c0:0c:5c:02:64:8f:fb:c1:55:f5:99:e8:2c:a5:7f:0b:11:
         b0:18:4a:88:ca:d8:f3:f7:43:dd:3a:4b:de:0f:5b:9c:95:1e:
         79:03:50:5e:b8:88:61:c6:75:a3:22:3e:b0:3a:ae:4f:22:59:
         e7:da:ba:6d:66:41:e3:d8:47:7c:65:43:de:6f:c6:7f:8c:31:
         8b:40:e0:f5:8c:63:55:31:1c:f7:01:37:14:b7:54:2f:65:a1:
         ec:76:9d:d3:e5:83:66:ff:4a:53:18:33:e6:19:26:45:51:c2:
         85:5c:d9:10:9d:3b:23:97:84:4c:6a:5c:d7:05:de:25:c7:05:
         a1:c0:83:83:f7:c5:ea:6a:72:4a:cc:f9:61:1f:d2:3d:64:97:
         89:f9:e4:2c:03:ba:fb:96:9d:a5:da:cd:93:c9:a2:eb:90:24:
         fd:24:8b:cb:3d:04:a9:b1:03:0d:ab:02:61:da:1b:1d:a4:a6:
         d0:c3:59:b3:d7:e1:98:c8:f4:d7:dc:60:dc:4e:a0:a8:f2:dd:
         e4:0d:22:61:ed:2b:b1:92:b2:92:00:58:ce:05:b9:0a:6f:6e:
         f9:ca:24:7b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUG6Ka7RpGfCPwCIkqAbEf9SM8pw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNDEyMTYwMDAwMDBaFw0yNTAxMjAyMzU5NTlaMHoxSTBHBgNV
BAUTQGEyNThmMmQzMmZiZDQwMTQzMmQ5YThhNTQ0YTYxYzNiNzllM2M4YzYyMzMz
NWNhODhlN2M0NWZiZWY1ODZiMjUxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIpbZLlJux25Jyhrx9DlqJsFuSeSdzmBZBMKJJYlb+tz4IJGjyoFQYZJ5j5r
wuZd0Yb9SrYw4gtD8CgeREI7keg6c0YIyqfiknJ50jor+Uu50BC3/19Ns0kqL1JR
x/EgxEhklAqeA74ZdQwhEp6go6VG4U95Z2zV4UUlJEhBy9lHjUio50gOuZFLXyW6
3d25flP9H46jgDg5DzosbCyr06eyjXG7lRE4DSFH1+XyJo6A09bt76kA6sWKEjWJ
J0yUJgHyNls8YNdbQBxYJc7rPtwOpXwNbH92mG5HtuWawlbLOI62f197HumLppUP
MEBuZcaNTP6dfDlrNCZ/7hua2uECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBSmVRTR
nSslOOEGvP/ippxza4vN+DAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjllNjIzMGEtMmUyMy00N2JhLWEzZGQtNzcwNTc1Nzg1ZjgyLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H+Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBzoa7mcGDyHxOrJnrPqW4RRYuvGtn+V4qEjwGu
bLL5v6I2N1EvwAxcAmSP+8FV9ZnoLKV/CxGwGEqIytjz90PdOkveD1uclR55A1Be
uIhhxnWjIj6wOq5PIlnn2rptZkHj2Ed8ZUPeb8Z/jDGLQOD1jGNVMRz3ATcUt1Qv
ZaHsdp3T5YNm/0pTGDPmGSZFUcKFXNkQnTsjl4RMalzXBd4lxwWhwIOD98XqanJK
zPlhH9I9ZJeJ+eQsA7r7lp2l2s2TyaLrkCT9JIvLPQSpsQMNqwJh2hsdpKbQw1mz
1+GYyPTX3GDcTqCo8t3kDSJh7SuxkrKSAFjOBbkKb275yiR7
-----END CERTIFICATE-----