Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
File:                     45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa (raw, json)
Hash identifier:          TUjypXXX0SDbVl8MswZCiA+NgYpjhXV1zHegX0qU/Js=
Subject key identifier:   6E:ED:6A:EB:7F:EA:68:27:E3:1D:D8:BC:FD:26:14:9C:40:96:34:CB
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       63C6B887A6743A157B6E793C8CE5EEDEC8A2EB97
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d075:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c6:b8:87:a6:74:3a:15:7b:6e:79:3c:8c:e5:ee:de:c8:a2:eb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=34737f08b3673b629a6ab7280998f28b4b911cdeb9a9cc7c239085a78eddc88e, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:fe:fb:92:79:29:d6:e2:71:fe:ce:64:5e:
                    3c:82:8c:2f:e9:c3:4a:6b:81:b1:4f:4f:ba:db:4c:
                    b0:de:a1:32:5e:f1:5d:91:ad:c5:f1:4f:4a:62:b2:
                    5c:2f:b5:7a:4a:4c:a3:93:0a:00:d7:cd:ad:3f:07:
                    37:22:b2:ce:2e:7e:ff:20:8a:fa:4e:02:47:0d:0c:
                    b1:6d:56:7a:15:7f:19:d6:fc:d4:ad:56:01:fb:dd:
                    77:95:04:ab:fa:a2:e8:a0:6d:97:88:09:27:e5:a2:
                    e5:12:cd:59:1b:59:43:bf:33:02:76:e8:21:b5:fc:
                    e8:62:87:99:87:8f:9e:e7:7f:e6:a2:e4:ab:02:16:
                    bf:85:7c:89:ef:77:d5:5e:ba:32:29:cf:8e:f9:25:
                    17:89:79:44:52:d3:b9:39:30:d1:87:bb:65:97:af:
                    9b:67:66:ef:d3:a1:66:3d:4f:7c:d7:96:f4:a4:dd:
                    84:53:35:7c:4e:28:43:62:d6:84:3a:6f:a9:44:2a:
                    88:82:ec:16:ff:17:e1:5f:49:98:64:1b:2f:93:01:
                    e8:86:82:b3:50:6a:61:0f:bd:1e:7f:79:ff:d4:d4:
                    09:59:ed:fa:7d:b5:f0:93:cd:5c:b7:1f:c8:3a:94:
                    65:dc:8a:3b:6c:74:47:f4:b8:63:61:21:57:0a:42:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:ED:6A:EB:7F:EA:68:27:E3:1D:D8:BC:FD:26:14:9C:40:96:34:CB
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/45d0d709-7b92-4c46-9d95-6605e2a3d35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d075:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:15:90:e3:d6:55:38:14:f2:07:e4:e3:e1:8f:9e:e0:dd:4e:
         43:df:07:f5:a8:58:97:08:19:f7:72:8b:07:1a:1b:9c:2e:ed:
         94:bd:6a:d4:96:ac:fd:28:fc:80:7b:28:d9:5f:27:df:60:ef:
         ff:3a:5b:88:d5:42:a1:06:2c:a8:5f:7e:3c:2f:00:1f:b9:68:
         84:a1:c4:1c:c3:65:ed:7f:a7:ed:61:1e:66:df:b2:46:3e:f1:
         2a:a6:24:39:5d:65:c3:b1:35:70:a9:9f:e7:b6:47:9e:31:19:
         7f:a0:99:d1:08:ce:36:12:e6:3d:0a:97:a1:b7:a1:a2:26:c5:
         89:9e:14:19:40:46:45:40:7e:10:fe:a5:06:4d:c5:ce:6a:63:
         e0:ce:33:53:e1:ab:63:36:fa:95:9e:8c:4c:d1:c8:c6:53:00:
         0b:96:1e:09:40:a2:80:4c:63:cc:6b:7a:1a:ef:6b:30:ef:93:
         74:9a:dd:2d:9f:36:fb:41:ed:89:95:cd:fe:86:21:27:eb:3c:
         1b:2f:06:80:f6:ee:07:a8:2f:05:bf:17:e2:d8:f6:6d:23:44:
         b8:a5:cc:10:32:8d:89:be:54:9c:7c:d3:b5:97:e5:75:d8:6e:
         e3:ab:75:d2:81:fd:68:be:2c:41:96:46:0a:76:18:2b:0c:99:
         95:78:65:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----