Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
File:                     83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa (raw, json)
Hash identifier:          XZDjBIgUm8PAiYJLSDMEO1pb6H/l/hHq8ti/1T1oNMk=
Subject key identifier:   D0:16:8A:3D:E0:42:B3:72:1F:3C:2F:13:F6:44:E0:03:A1:35:C7:C3
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7B2401330923642C7C844F83CC60423BB1D35FAE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        79.125.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:01:33:09:23:64:2c:7c:84:4f:83:cc:60:42:3b:b1:d3:5f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=490d6c6e1f5f253c229fdd0774dbd020bcb8ce042e45597e93770f218a14713f, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:09:4f:51:62:08:27:4d:d9:f5:a8:90:cc:
                    4e:e3:72:9d:f3:bf:d0:e7:91:d0:22:0b:2a:3a:6d:
                    e0:1a:06:93:36:32:ac:63:40:aa:10:83:68:5e:ad:
                    68:58:8c:7a:85:37:14:33:11:1b:b2:3a:05:5c:20:
                    4c:1d:d0:95:f8:40:6b:c8:af:ec:d1:95:4d:92:0b:
                    4a:df:dc:b9:9e:7d:12:d6:1a:8a:cb:fc:d0:c4:5e:
                    66:63:a4:14:f5:f0:de:40:8a:34:9f:f1:0c:d2:32:
                    35:f8:b4:95:38:06:6b:46:42:8e:e7:a0:1c:5e:ec:
                    e1:c8:33:39:e2:48:d3:88:41:b8:b1:05:d4:7c:14:
                    84:42:54:e2:21:63:ab:d3:a1:8f:ea:3b:cc:c9:a0:
                    a9:c4:bd:e8:fe:95:33:87:3f:c5:73:38:72:d6:61:
                    31:c4:42:cf:fb:d6:93:4d:02:1c:07:17:a0:47:7e:
                    c7:0e:c3:5b:47:79:ae:3c:6f:e2:cb:3d:4f:d4:dc:
                    27:c3:08:d9:1d:7d:c9:6a:81:c0:1e:fd:95:67:82:
                    25:43:ea:a0:fe:6b:34:78:07:5d:cb:97:5c:2b:28:
                    28:94:ac:6e:5c:24:6c:a0:1b:06:71:51:50:ee:1f:
                    7f:30:dc:ea:85:4a:15:6d:8e:9a:ef:fb:f7:ec:3c:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:8A:3D:E0:42:B3:72:1F:3C:2F:13:F6:44:E0:03:A1:35:C7:C3
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/83509a5e-2ad7-421b-90ef-fcdfda3fdfc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.125.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:52:5e:49:d0:c3:84:eb:1e:c8:6f:8b:c8:b4:7c:6e:b4:13:
         6e:4e:1b:b6:45:ca:58:9b:c5:c1:d8:1b:a7:7f:eb:c4:55:52:
         d9:b7:64:8d:2c:90:c2:ce:a8:c6:80:54:f9:3f:b7:c1:eb:f7:
         e8:85:63:c1:4a:f7:32:3c:10:5c:3a:11:df:61:a6:dc:53:18:
         7b:67:0c:ff:ad:7a:89:cd:f2:72:27:7e:7d:b2:6a:71:f2:25:
         e0:47:dc:9b:fa:70:1f:07:ad:5d:d6:0c:e2:c9:99:8b:df:12:
         af:8c:c1:92:19:cf:75:6c:35:f2:4d:d7:2a:eb:0b:97:bb:d6:
         09:7e:03:de:2e:1a:74:06:c7:01:2d:9e:b0:a9:a1:ae:05:b5:
         07:e9:4f:0e:99:93:4a:03:ea:29:88:2c:5b:71:86:4d:51:13:
         2d:c0:26:ed:86:28:2b:47:89:dc:41:17:f8:01:fe:9e:eb:56:
         22:e5:5f:14:f2:fa:9d:35:d9:4c:5f:64:a5:bf:2a:3b:37:22:
         c5:17:51:12:1e:eb:63:b4:bc:f1:03:ee:1e:ed:7f:10:8a:78:
         39:cf:49:64:84:35:30:e1:88:dc:ba:5a:09:ec:51:79:eb:54:
         07:01:53:eb:f5:4a:e3:bf:4f:95:1e:60:6e:4f:40:7b:20:dc:
         66:d7:e0:69
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUeyQBMwkjZCx8hE+DzGBCO7HTX64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTQwMDAwMDBaFw0yNTAyMTgyMzU5NTlaMHoxSTBHBgNV
BAUTQDQ5MGQ2YzZlMWY1ZjI1M2MyMjlmZGQwNzc0ZGJkMDIwYmNiOGNlMDQyZTQ1
NTk3ZTkzNzcwZjIxOGExNDcxM2YxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANAVCU9RYggnTdn1qJDMTuNynfO/0OeR0CILKjpt4BoGkzYyrGNAqhCDaF6t
aFiMeoU3FDMRG7I6BVwgTB3QlfhAa8iv7NGVTZILSt/cuZ59EtYaisv80MReZmOk
FPXw3kCKNJ/xDNIyNfi0lTgGa0ZCjuegHF7s4cgzOeJI04hBuLEF1HwUhEJU4iFj
q9Ohj+o7zMmgqcS96P6VM4c/xXM4ctZhMcRCz/vWk00CHAcXoEd+xw7DW0d5rjxv
4ss9T9TcJ8MI2R19yWqBwB79lWeCJUPqoP5rNHgHXcuXXCsoKJSsblwkbKAbBnFR
UO4ffzDc6oVKFW2Omu/79+w85DMCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBTQFoo9
4EKzch88LxP2ROADoTXHwzAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ODM1MDlhNWUtMmFkNy00MjFiLTkwZWYtZmNkZmRhM2ZkZmM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBk99ADAN
BgkqhkiG9w0BAQsFAAOCAQEAilJeSdDDhOseyG+LyLR8brQTbk4btkXKWJvFwdgb
p3/rxFVS2bdkjSyQws6oxoBU+T+3wev36IVjwUr3MjwQXDoR32Gm3FMYe2cM/616
ic3ycid+fbJqcfIl4Efcm/pwHwetXdYM4smZi98Sr4zBkhnPdWw18k3XKusLl7vW
CX4D3i4adAbHAS2esKmhrgW1B+lPDpmTSgPqKYgsW3GGTVETLcAm7YYoK0eJ3EEX
+AH+nutWIuVfFPL6nTXZTF9kpb8qOzcixRdREh7rY7S88QPuHu1/EIp4Oc9JZIQ1
MOGI3LpaCexReetUBwFT6/VK479PlR5gbk9AeyDcZtfgaQ==
-----END CERTIFICATE-----