Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
File:                     4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa (raw, json)
Hash identifier:          jVpcTt/9x+YIpaavptDzjg+TOXr9c1tPk7Wl5sQHIRk=
Subject key identifier:   DD:01:3A:1C:CB:2E:77:B1:8D:E6:80:30:AF:71:5F:02:C7:FB:49:93
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       1B29C9FDD5874FBA8DC837877B8EA0C5FE7FE535
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa
Signing time:             Fri 17 Jan 2025 00:00:00 +0000
ROA not before:           Fri 17 Jan 2025 00:00:00 +0000
ROA not after:            Fri 21 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d06f:9000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:c9:fd:d5:87:4f:ba:8d:c8:37:87:7b:8e:a0:c5:fe:7f:e5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 17 00:00:00 2025 GMT
            Not After : Feb 21 23:59:59 2025 GMT
        Subject: serialNumber=87260b8589b25aa7e9f27c609bc69117924a238515d83ea5cea80fc94f111417, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:33:b3:77:bb:ff:7e:f9:84:7d:80:d6:6d:
                    6c:bf:0c:20:31:dd:68:97:f6:94:76:d7:7c:e2:93:
                    24:44:77:d8:56:f6:ca:33:54:c4:77:86:b3:e3:26:
                    93:87:20:03:9f:60:0d:c9:35:43:84:5e:08:48:5e:
                    c7:2c:4c:ee:c2:3d:bf:dc:80:3c:93:71:2a:9e:45:
                    a9:fb:be:df:11:a7:04:cd:ae:7c:f9:f3:56:f7:60:
                    f9:92:62:8f:cb:44:da:42:c2:53:52:92:4c:c8:40:
                    0d:7e:63:da:23:35:0b:08:6e:ed:5a:e3:e2:f9:ef:
                    d9:33:3a:5f:7d:7c:9e:9b:fc:93:f0:8b:eb:88:64:
                    68:25:93:e1:fb:39:28:30:c0:f5:de:69:52:76:a6:
                    03:c8:29:82:88:83:3f:b2:c2:f2:94:9a:d2:95:fc:
                    65:16:57:14:12:e3:9c:68:c7:e8:41:af:78:44:e5:
                    51:ba:b7:16:a6:ce:55:09:2c:67:46:96:65:f5:1e:
                    50:f6:f3:cc:29:db:46:88:95:89:d9:83:37:41:fa:
                    0f:3a:fc:25:ee:56:8e:3f:07:5f:91:f3:be:9a:64:
                    2f:23:99:9f:52:a5:d5:92:06:be:f5:55:8c:2e:32:
                    e5:ac:b8:c7:29:64:0c:03:15:1d:62:d3:a7:6d:f2:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:3A:1C:CB:2E:77:B1:8D:E6:80:30:AF:71:5F:02:C7:FB:49:93
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/4e0cbb15-3cb7-449b-953a-b40949bdc32b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d06f:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:3f:b5:01:97:03:7c:1a:c6:3d:fb:89:65:d2:a1:15:09:01:
         fd:45:bb:1e:b5:36:69:87:83:34:5b:38:4f:3e:e0:82:81:5d:
         86:55:c5:44:d4:92:d9:da:be:ea:f7:de:57:e1:cb:79:43:be:
         e8:58:1f:a8:7d:41:0b:e0:da:2d:a2:8f:bf:21:f6:2c:eb:75:
         b1:87:ae:b1:6f:e9:5f:8e:ff:0d:0f:1d:db:f9:01:88:36:bf:
         9f:41:88:c4:da:19:44:68:fe:2c:47:06:54:f3:6f:4f:1b:59:
         04:72:f3:3b:d7:8a:12:fc:bd:a9:22:ea:f3:1f:39:f7:5e:76:
         72:d4:8b:b7:10:4b:8c:c7:cf:61:b1:96:cc:a7:5d:2c:e5:4c:
         22:5b:12:2a:37:7b:ec:b4:a1:ce:6c:c0:6c:c2:65:0d:d5:f4:
         9c:42:b6:70:44:fb:af:9c:a9:5c:42:b8:75:38:36:09:8b:ab:
         4a:86:59:f0:30:14:a2:f0:47:07:a0:c9:b9:69:39:8a:1d:ce:
         74:41:b4:52:bc:a3:65:92:cb:0d:15:7a:c7:c7:98:c9:3c:c9:
         59:63:d5:6d:2c:cd:d5:90:f2:69:58:d5:c0:f0:d5:05:5d:77:
         ad:87:24:58:92:56:43:18:6a:a3:c8:47:f5:00:ca:7a:9b:c6:
         0b:8f:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----