Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa
File:                     455182aa-6d74-4447-81a6-6be09732e55d.roa (raw, json)
Hash identifier:          3sOcdnDsVWfS+D4mirpcxuEfn3sy555+7nfnme5ahPs=
Subject key identifier:   B7:FC:FE:28:58:72:83:81:36:93:CC:56:BE:F1:DF:94:07:17:DE:8A
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       524966FEA73EA37EB54D29BB0C53DA44E94EFC19
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d01e:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:49:66:fe:a7:3e:a3:7e:b5:4d:29:bb:0c:53:da:44:e9:4e:fc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=75d05ced4fd817221a93706f3ae6e8bce64bd18ab4a91055fc1bea96af013136, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2c:92:96:44:8f:fa:6b:99:17:05:21:3e:36:
                    39:97:99:1f:a2:28:b5:d0:d2:fd:cc:12:45:fb:6f:
                    f8:1f:cc:59:b6:a7:ca:b7:9b:bd:be:41:2f:f6:d1:
                    fa:be:89:a2:0d:45:4c:9b:8d:43:68:b7:2e:74:d9:
                    ff:a4:1e:81:c1:4e:1c:ef:fc:89:90:d4:65:0e:2a:
                    0f:c0:1a:8a:a0:b3:1d:a5:2b:cf:83:5e:54:ea:94:
                    ee:6d:44:29:29:bd:88:2b:a3:0c:81:c0:18:64:c8:
                    ad:95:75:3b:04:cb:4a:70:9e:f7:73:f9:96:3a:f3:
                    9a:f2:45:f7:9e:29:58:0d:e1:16:67:a8:2d:30:c1:
                    b6:e8:92:e6:9d:b4:98:96:93:ab:7f:58:33:66:39:
                    2b:0a:6b:4e:b5:5a:7b:ee:91:4f:81:59:49:1c:d9:
                    86:23:38:0d:aa:bc:13:c0:71:14:87:56:07:be:81:
                    81:9f:07:22:44:cd:73:e3:9d:c3:06:eb:4b:16:bf:
                    8e:1b:4a:dd:57:29:b7:63:37:8f:6e:74:6d:36:8b:
                    26:0d:c1:28:e8:de:76:7e:7e:ec:04:8c:f1:84:bc:
                    46:15:c7:5a:db:42:ca:a3:72:8c:18:0a:1f:1c:80:
                    21:7b:78:b0:bf:61:74:48:29:f2:52:de:b2:9d:a0:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:FE:28:58:72:83:81:36:93:CC:56:BE:F1:DF:94:07:17:DE:8A
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/455182aa-6d74-4447-81a6-6be09732e55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d01e:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         9b:ea:46:30:c7:f4:56:61:6a:7d:24:ad:71:2b:f6:ee:c1:4d:
         1c:f9:94:43:5d:db:56:ef:a2:bc:e2:df:21:a6:b8:89:19:e2:
         6c:76:e4:e9:34:74:2d:f6:4e:81:d0:71:ef:ff:1b:d4:cd:15:
         d5:a2:98:52:2c:12:25:a4:88:00:dd:e1:68:7c:d5:fc:2b:ef:
         5c:3e:49:53:99:fc:a8:d4:39:cd:10:30:bc:84:e6:27:c9:29:
         ac:c9:47:3c:b3:36:aa:a0:2f:1b:8b:f6:af:95:df:a5:fa:00:
         58:15:94:a3:de:4f:71:67:c3:fd:18:1f:b5:be:48:b0:55:a8:
         93:11:52:29:85:56:63:e9:d5:d1:37:6f:54:fa:14:90:62:60:
         a0:50:96:ae:df:eb:df:75:79:eb:46:ce:3e:5f:7c:aa:3b:5f:
         ee:84:44:13:d5:a8:dd:26:b1:2e:d8:10:f7:8f:f0:7b:ba:39:
         da:16:a7:2b:1c:f3:22:bb:e1:e5:77:6d:9c:c8:1a:31:b4:a4:
         eb:b5:ec:ed:73:50:7e:79:59:74:a8:c7:29:72:fb:a1:d0:ba:
         bb:b4:81:fe:a0:28:4a:7f:74:e7:23:4f:a3:6a:52:1d:06:67:
         52:71:fb:d5:94:ce:13:04:63:55:12:ad:83:96:98:a0:f9:d6:
         bd:3d:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----