Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa
File:                     81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa (raw, json)
Hash identifier:          +n43hw611E2DWi+Ho7aRoF330Z+bBzgANcikU7QX1nE=
Subject key identifier:   8D:5A:ED:5C:2B:52:16:DB:2F:5C:69:7F:86:FE:0C:11:27:43:CD:3F
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       160D246CCD975E969315C97DB03DD1C8B3567A12
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d072:e040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:24:6c:cd:97:5e:96:93:15:c9:7d:b0:3d:d1:c8:b3:56:7a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=94ed80ef32b112bb80273f07d9f4e48283bdb918bf47e4ce9c552f57ffa62db9, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:63:c0:91:28:9a:f2:30:fd:2c:d4:ef:81:
                    3a:74:3a:c4:1d:69:4e:0e:99:d1:83:15:79:6a:62:
                    3f:18:53:58:eb:b6:51:74:df:53:79:ef:9b:69:c3:
                    30:b0:d9:17:c8:fe:10:ed:32:db:73:7f:b4:1e:93:
                    b8:4c:59:d9:03:87:7c:fe:ee:2d:83:98:c1:ba:bf:
                    bf:a0:e6:f7:df:dd:b5:d7:69:d8:df:60:a6:5f:05:
                    af:46:8c:de:97:d2:2e:66:8d:40:d0:93:d3:44:dc:
                    ea:71:88:95:c2:21:74:cb:2d:9d:20:6e:66:85:1f:
                    80:de:af:98:8f:b5:8c:ee:f9:13:47:a9:89:e3:e3:
                    bd:82:59:08:51:42:95:96:dd:fa:8d:2b:3d:7b:64:
                    1d:4e:5d:7b:cd:9d:c9:aa:4e:3a:1f:f5:7f:58:d8:
                    79:9a:e0:14:0d:01:1c:44:e9:f5:c1:64:12:1a:63:
                    b8:cf:bc:05:90:63:ef:7a:c0:56:19:f8:97:51:75:
                    a4:07:dc:82:49:47:e1:14:47:bc:10:91:45:59:c4:
                    9a:0a:11:89:32:06:e7:6a:98:04:57:f9:1b:f4:89:
                    bc:40:66:30:33:e4:b9:b2:49:2f:7f:86:b3:e0:e4:
                    ec:39:65:16:23:16:75:36:a6:fb:8a:2c:f2:8f:03:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:ED:5C:2B:52:16:DB:2F:5C:69:7F:86:FE:0C:11:27:43:CD:3F
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/81554ff4-a7f9-41e4-90e9-b3761d63cb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d072:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:a2:b1:17:23:4f:48:df:ec:0b:d7:a2:3d:d0:2d:f3:02:da:
         f4:d7:9c:41:93:24:67:7a:07:86:60:b4:27:e8:09:33:6c:96:
         dc:fc:c5:cc:d6:66:98:17:9b:a1:b8:c0:f6:02:d1:14:1c:4b:
         11:7c:8a:2b:5c:2f:6f:00:15:ea:31:8a:31:0b:bb:12:2f:e6:
         bb:09:e5:a4:75:8d:4c:51:b2:10:e5:58:45:27:31:64:b0:05:
         e2:c1:fc:25:be:f9:b8:2a:f4:5f:1b:64:21:c7:f0:49:77:d3:
         1a:17:de:3a:a1:c6:2a:b1:ac:7b:4a:fc:f0:73:b1:1b:27:fe:
         bd:09:ca:06:2f:ea:97:c3:aa:48:0c:bb:8f:23:be:8e:74:44:
         89:a7:6d:1b:62:46:ff:ee:f6:77:10:95:7b:0d:94:08:ff:a1:
         9d:ef:f9:e7:22:69:d4:73:ef:57:ce:5a:e6:f1:a8:eb:df:ce:
         65:1d:9f:54:a2:90:00:b6:9c:92:a9:75:87:cd:4b:94:63:a4:
         17:57:d6:e1:79:c6:1e:25:aa:6a:95:eb:34:97:11:ae:72:6b:
         f7:a2:c6:ee:c8:b4:dc:cf:20:f9:c3:a8:20:0e:11:01:85:d8:
         6e:78:42:96:75:a7:c5:0b:31:65:91:12:b8:c8:32:38:4b:df:
         55:ee:1d:cc
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUFg0kbM2XXpaTFcl9sD3RyLNWehIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQDk0ZWQ4MGVmMzJiMTEyYmI4MDI3M2YwN2Q5ZjRlNDgyODNiZGI5MThiZjQ3
ZTRjZTljNTUyZjU3ZmZhNjJkYjkxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXHY8CRKJryMP0s1O+BOnQ6xB1pTg6Z0YMVeWpiPxhTWOu2UXTfU3nvm2nD
MLDZF8j+EO0y23N/tB6TuExZ2QOHfP7uLYOYwbq/v6Dm99/dtddp2N9gpl8Fr0aM
3pfSLmaNQNCT00Tc6nGIlcIhdMstnSBuZoUfgN6vmI+1jO75E0epiePjvYJZCFFC
lZbd+o0rPXtkHU5de82dyapOOh/1f1jYeZrgFA0BHETp9cFkEhpjuM+8BZBj73rA
Vhn4l1F1pAfcgklH4RRHvBCRRVnEmgoRiTIG52qYBFf5G/SJvEBmMDPkubJJL3+G
s+Dk7DllFiMWdTam+4os8o8D4qkCAwEAAaOCAiQwggIgMB0GA1UdDgQWBBSNWu1c
K1IW2y9caX+G/gwRJ0PNPzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODE1NTRmZjQtYTdmOS00MWU0LTkwZTktYjM3NjFkNjNjYjU4LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF0HLg
QDANBgkqhkiG9w0BAQsFAAOCAQEAQ6KxFyNPSN/sC9eiPdAt8wLa9NecQZMkZ3oH
hmC0J+gJM2yW3PzFzNZmmBebobjA9gLRFBxLEXyKK1wvbwAV6jGKMQu7Ei/muwnl
pHWNTFGyEOVYRScxZLAF4sH8Jb75uCr0XxtkIcfwSXfTGhfeOqHGKrGse0r88HOx
Gyf+vQnKBi/ql8OqSAy7jyO+jnREiadtG2JG/+72dxCVew2UCP+hne/55yJp1HPv
V85a5vGo69/OZR2fVKKQALackql1h81LlGOkF1fW4XnGHiWqapXrNJcRrnJr96LG
7si03M8g+cOoIA4RAYXYbnhClnWnxQsxZZESuMgyOEvfVe4dzA==
-----END CERTIFICATE-----