Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
File:                     c5796c8a-c7f2-4888-9a17-c80093c07957.roa (raw, json)
Hash identifier:          /9hALbYJB4o4EgpTHD75G676qZJwJUXiV+u8KzUs9UU=
Subject key identifier:   EB:9C:74:1D:B4:5D:1F:36:3C:AF:6D:0D:62:B0:C8:0B:EF:2B:F3:C8
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       7FF0AA5AA7378182EF8283B4D41E4B6EFA606AB2
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d035:80c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:aa:5a:a7:37:81:82:ef:82:83:b4:d4:1e:4b:6e:fa:60:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=8bc63cf9cd7b5499459c3b11d638214340dfc7e1d83022232dbf5a841caa528d, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:9d:d7:c8:59:d6:b4:c9:74:57:82:ef:bc:
                    d9:de:68:47:7f:61:2c:74:99:80:63:b7:99:6e:d3:
                    aa:e2:cf:1e:4b:b1:8b:1e:23:09:7b:2a:c1:4b:db:
                    a4:21:6c:5c:c8:3d:d0:2c:f7:ad:a4:81:0a:98:1c:
                    88:78:d8:35:7b:c7:72:ce:93:27:ec:ae:f5:04:e9:
                    1a:18:ae:e5:76:cc:1b:c9:72:ae:c9:c4:f5:e4:11:
                    bb:a2:6c:3f:f2:af:1d:a4:c6:79:f2:39:10:6b:b7:
                    19:73:fa:8e:40:3f:15:ed:dd:86:00:8d:d4:5a:b6:
                    81:39:f2:d6:2d:64:6a:fa:1c:13:f0:c2:b5:6f:2d:
                    8f:df:07:c6:cf:e1:97:24:e0:11:0c:d0:ea:76:ba:
                    1d:0b:45:4e:88:ca:2e:8b:b4:df:c6:3d:8a:97:ed:
                    1f:26:26:1e:5b:e9:28:6e:c1:93:97:c7:f1:92:4a:
                    0e:ab:ee:5c:dc:ba:e8:4c:ee:6a:6e:f9:91:e0:88:
                    19:fc:3e:95:49:85:59:27:fa:ea:79:2a:c9:47:38:
                    45:fb:82:7d:d0:bc:8e:49:26:8e:3e:2e:8c:f2:5a:
                    05:d2:49:71:bd:df:9e:44:65:4e:36:94:03:98:45:
                    25:cb:85:5e:0f:cc:86:4c:53:2e:2f:4c:0b:12:30:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:74:1D:B4:5D:1F:36:3C:AF:6D:0D:62:B0:C8:0B:EF:2B:F3:C8
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/c5796c8a-c7f2-4888-9a17-c80093c07957.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d035:80c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         28:36:89:f3:95:ea:53:9e:e4:89:69:ab:6f:33:42:8d:7e:34:
         fd:2a:c9:c5:c6:3d:c2:2f:49:c9:54:fa:e1:4f:28:d9:ee:71:
         2d:7e:3a:cc:f4:c7:d0:01:cc:a3:d1:85:a5:89:39:1e:51:35:
         ab:e1:44:ab:bf:b7:68:48:87:81:e0:9d:89:d0:f3:3b:36:6f:
         8e:96:fc:d7:f4:00:b3:fe:bd:8f:19:21:bb:07:d9:5a:78:a1:
         e8:f3:92:b8:74:71:42:52:3d:14:40:a6:08:a5:1e:44:5f:c3:
         99:e1:8c:5a:e8:f6:c4:97:12:35:4e:6b:23:93:d3:5f:db:0d:
         d9:6b:f1:eb:cf:75:18:df:e1:1b:6c:73:ad:ef:2b:56:c0:c2:
         82:ef:c0:38:dc:56:fa:aa:ca:f0:b8:6a:8b:93:b3:3f:fd:3a:
         be:b2:64:c5:24:aa:c5:e7:7f:5c:98:9e:bb:59:24:42:a5:39:
         85:e7:a8:19:a5:e6:19:60:81:70:e4:3a:ac:69:a8:f6:5c:76:
         31:55:cf:9b:11:67:6b:de:b2:17:14:09:bc:81:32:d6:30:af:
         40:e8:a9:7c:91:92:3d:9e:c5:d7:e3:81:a9:17:91:42:c4:d8:
         ef:86:03:2c:9f:9e:ca:3b:49:01:d3:dd:a3:bd:35:32:72:71:
         cc:19:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----