Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
File:                     00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa (raw, json)
Hash identifier:          cUKrPF9jwQQ1OpOkCMvHYWrza1ytTknxzlpB5ZjGaOM=
Subject key identifier:   30:76:4D:0F:E7:61:7F:3D:8D:2A:E4:BC:7B:D0:53:2E:F7:EC:11:BA
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7F9136E09594687BFD6A5D443110361F17A6421A
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:36:e0:95:94:68:7b:fd:6a:5d:44:31:10:36:1f:17:a6:42:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=96404c7ff2973553ec3fe449860a9c227952662fc9668088de89e52b8cce18aa, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b6:44:e8:65:7d:b8:72:0c:40:c2:77:0e:db:
                    8c:15:82:f1:a5:e9:89:41:ba:21:c1:d7:e4:50:21:
                    57:f1:bb:96:e1:b1:9f:cd:2d:b0:3c:19:77:ea:4f:
                    9d:28:7d:29:b9:09:3f:44:97:42:f7:58:3b:92:2d:
                    ee:44:13:2d:73:82:90:f1:90:c7:c9:2a:98:5a:7c:
                    86:59:cc:be:a7:73:36:e0:e6:88:50:1a:3b:33:a9:
                    fc:5c:83:47:d9:36:02:86:3b:83:b8:49:9b:14:03:
                    b2:53:b8:89:bf:a9:69:10:36:c5:a8:68:46:f3:46:
                    11:aa:19:49:d8:ad:e3:10:91:51:17:02:f9:5c:31:
                    c7:2e:19:7c:dc:43:85:b0:99:2d:ee:c4:e8:60:64:
                    65:c5:ba:65:f3:b4:ab:34:65:0f:3c:9a:f5:7e:30:
                    4b:fe:3f:b8:da:6e:0c:6e:08:80:3a:8e:2a:25:f6:
                    51:ef:6a:cf:f5:73:4c:63:e5:9f:dd:20:65:71:63:
                    e6:13:97:91:14:74:62:21:e7:cd:6c:d8:a6:20:4b:
                    c9:c7:24:42:6a:91:a0:dc:ba:24:81:34:41:0e:05:
                    f9:c2:ac:1d:a1:cf:03:d4:b9:c8:c1:c1:a7:dd:8a:
                    f1:48:24:39:6a:e0:eb:b6:cb:03:81:de:a8:4c:95:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:4D:0F:E7:61:7F:3D:8D:2A:E4:BC:7B:D0:53:2E:F7:EC:11:BA
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/00150ff4-0ab9-428f-ae9a-ccd9dc669cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:83:bb:83:dd:6e:03:06:0f:26:9b:3b:99:e4:67:71:f4:0a:
         d8:3d:a8:57:ab:8a:85:2b:9c:e1:d3:d5:79:35:83:33:87:63:
         f8:24:cc:c7:1b:29:c3:c9:f4:88:62:21:bf:31:3c:d6:68:1b:
         62:d7:0c:55:1c:f5:ae:0e:2f:a0:0b:69:df:7e:e6:90:7c:98:
         63:69:7c:ba:7b:84:ec:04:00:90:17:14:47:a6:8e:bc:e4:4b:
         c0:b3:f4:23:4a:fa:52:da:04:79:57:e2:9e:d2:2b:a4:77:d5:
         b3:88:59:24:4a:08:40:c1:6b:50:38:7d:4c:14:79:88:9d:4b:
         31:ae:27:47:50:c9:1a:e6:1f:c7:2f:27:3f:87:c5:aa:ed:81:
         dc:d5:7e:cf:d8:01:a5:26:e5:08:12:d0:66:98:db:13:ec:1e:
         09:93:3f:4b:ac:40:96:f0:fd:11:f8:52:95:1f:dc:74:30:e7:
         ac:76:6d:56:c6:b2:01:e0:83:22:71:00:3f:da:1f:07:86:d1:
         ae:99:d9:2c:46:f1:01:88:16:5a:f7:d8:69:65:b5:b6:77:7c:
         c8:51:39:f0:55:0f:b0:d7:c6:20:a2:59:be:14:e3:ee:ca:fe:
         0c:2e:d2:51:27:57:ad:06:58:47:c9:87:63:80:8d:b5:2c:6a:
         8f:07:a0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----