Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
File:                     332d3a7e-56bb-435c-b479-a81f23cb0414.roa (raw, json)
Hash identifier:          hj7UQ7KWHJLOTP/IoIkMmND1CfSVEBnLIv9EhydGxJk=
Subject key identifier:   10:2F:86:48:7A:6C:A6:F5:E7:41:70:25:9C:3D:8B:0D:80:29:DE:91
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       72BBCF2EC097A39877317E0C824476F7C648353F
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.125.28.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:bb:cf:2e:c0:97:a3:98:77:31:7e:0c:82:44:76:f7:c6:48:35:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=3b574d1a396baa1e6076eb631ff6d2614812ef94e79aa1f0ae6dd683ad195bf0, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:cb:cc:c7:60:c8:88:c4:68:0c:38:f5:62:
                    2a:88:a9:59:37:9f:98:f4:d4:a5:e0:a3:f3:03:75:
                    b8:f3:c6:e5:40:a1:19:b4:15:e2:19:23:9f:d1:1e:
                    c3:db:cc:84:96:fe:2f:90:37:51:6c:95:d4:06:c3:
                    cc:aa:7a:6a:ed:aa:9b:e7:83:2c:8d:dc:d4:c1:c9:
                    f1:33:cf:88:fe:bf:f1:9a:3f:ab:97:f5:75:97:3f:
                    ff:b4:d9:88:93:38:46:0d:b6:84:6e:32:12:9f:86:
                    a4:36:90:fd:57:33:3e:d7:2a:a9:37:ce:af:05:24:
                    a0:93:c8:a5:ec:63:10:c2:99:5e:7c:b5:61:15:80:
                    c6:35:20:60:62:ec:b0:04:07:4d:8b:3e:18:db:f3:
                    bb:e3:77:71:32:bd:33:a7:0e:f1:9c:83:b0:96:8a:
                    f6:48:e7:08:5d:6f:e4:ac:07:23:68:3d:e2:26:be:
                    26:d7:c2:38:77:03:f0:96:12:11:b3:15:db:aa:ae:
                    fe:1e:a7:60:50:ca:13:d8:79:41:aa:ca:40:c5:6b:
                    37:1e:02:44:bc:a9:7c:e2:81:fd:1f:5b:27:80:a7:
                    73:a4:9a:f7:2c:3b:c8:86:a1:ea:20:55:ab:07:70:
                    c9:fe:2f:ca:dc:05:5b:ab:fa:d7:ef:92:4a:0f:ca:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2F:86:48:7A:6C:A6:F5:E7:41:70:25:9C:3D:8B:0D:80:29:DE:91
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/332d3a7e-56bb-435c-b479-a81f23cb0414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.125.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:7e:c7:8b:cc:d1:65:fb:89:56:e6:33:57:fd:ca:ee:13:
         f5:bb:aa:b0:73:44:c7:fe:ed:bf:7d:37:fc:8c:94:39:22:03:
         c1:b0:94:5c:e7:82:ab:b6:8b:7f:52:5b:14:7e:7d:d6:c6:70:
         d8:ff:df:c7:e7:02:ac:48:5a:b3:4c:40:15:bc:99:2c:fb:1f:
         76:15:02:29:e9:50:11:c4:62:f6:df:40:47:79:43:7d:00:39:
         28:ca:7b:c7:34:8d:34:97:f0:f1:1c:33:d5:98:c1:61:12:5b:
         ff:cf:70:bb:92:c6:ea:ca:89:8f:f8:df:d1:fc:15:d8:aa:58:
         fd:8d:ee:b8:43:43:29:16:ff:d3:9a:cf:9c:8c:ed:5b:25:ae:
         6e:24:46:43:a1:50:b4:36:18:fc:31:ef:40:b7:fe:fd:b7:d6:
         36:a8:0c:5b:1a:a1:76:c5:c5:d6:66:2e:e1:ee:b4:eb:86:e4:
         7f:12:4d:d1:28:9f:ae:29:0e:ae:3d:1c:fd:e4:86:73:9d:7a:
         b1:fc:8f:eb:ea:9a:fd:a6:cd:6a:ba:da:52:5f:7e:48:5f:f9:
         e1:75:e3:74:e5:29:f4:55:7c:ab:97:18:c6:6d:cf:c0:bf:df:
         05:17:de:fc:2f:84:bb:bd:4b:5c:09:ee:24:8c:16:b0:7c:2c:
         68:dd:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----