Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69b1519-f345-43aa-8c6b-cd786ee13404.roa
File:                     e69b1519-f345-43aa-8c6b-cd786ee13404.roa (raw, json)
Hash identifier:          1Blw0wZ5EnvGJ9gyiKeq/EvdxH6pu34WqgOEt8nY5eA=
Subject key identifier:   B5:F3:2C:CB:CE:9C:9A:31:4D:93:0D:AA:CF:3D:79:8F:08:20:79:89
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       59EE5013A980A6D58B8A7E917ED464C65FC08EE8
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69b1519-f345-43aa-8c6b-cd786ee13404.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07e:5000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ee:50:13:a9:80:a6:d5:8b:8a:7e:91:7e:d4:64:c6:5f:c0:8e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=0f9d10c0a361527bf9310cc682947a1eb701146bc697fb3b43fa2c3e4f46d3a3, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c3:b2:3a:39:d1:17:33:fb:64:51:f8:a4:fd:
                    47:6f:12:2d:4b:92:95:89:c2:00:cd:6f:2f:2e:f1:
                    ad:1a:d5:05:7b:2f:4b:b8:aa:66:f8:e3:32:3c:02:
                    10:b8:9d:70:b1:ed:d8:a4:fc:15:be:5c:6b:d3:eb:
                    3b:6f:ba:c8:91:8e:bc:ea:f0:ce:21:09:d6:3e:43:
                    72:d6:00:5b:3b:e9:95:69:a7:16:9e:56:9b:ed:8a:
                    29:8c:36:db:d0:e8:e9:1b:4d:0e:24:bc:c3:7f:e7:
                    28:c1:cd:a6:31:4b:bc:6a:10:e0:aa:2c:da:6b:c6:
                    88:4b:da:03:f5:b3:b0:30:e8:9c:bd:06:6a:c8:3d:
                    62:31:1a:2a:f3:91:7b:cc:1f:72:88:ed:0e:53:25:
                    f2:14:3f:c9:d8:76:d5:51:40:73:26:d0:34:29:2a:
                    e0:1f:38:37:6c:b9:30:49:ca:f5:2e:71:11:a1:47:
                    51:09:39:25:b9:a7:f5:df:5b:ea:79:9f:78:ed:52:
                    8b:1c:2d:ce:37:35:0f:eb:d4:21:4d:e4:29:f4:06:
                    05:3a:dc:5f:6b:dc:6b:ed:28:76:e0:93:ce:12:33:
                    39:35:75:90:21:b1:4e:99:c8:e8:12:ed:1d:24:9a:
                    fa:0b:50:c3:63:5d:23:b5:b4:a1:7f:fd:73:7f:95:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F3:2C:CB:CE:9C:9A:31:4D:93:0D:AA:CF:3D:79:8F:08:20:79:89
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/e69b1519-f345-43aa-8c6b-cd786ee13404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07e:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:7d:6d:fa:8b:52:f6:7b:fd:9e:b9:6c:f4:2e:7e:f1:b1:
         06:54:d6:34:bb:6f:76:25:4c:c8:37:fc:69:45:86:ee:9a:53:
         f2:87:c2:c1:e0:f6:88:6d:12:9a:2a:16:72:2f:5e:c9:74:c8:
         1f:95:e5:e2:fa:55:c9:ef:7e:61:3e:0c:8a:5e:af:5d:23:0c:
         2b:b4:fb:a3:34:94:4d:fb:5a:5f:c2:1d:f1:f9:12:21:84:fe:
         d6:c7:7f:8d:05:38:5d:f8:fd:80:41:b5:f0:4c:05:4b:ae:fe:
         db:92:67:d9:90:ad:f7:cc:14:e0:b1:61:f9:1e:cf:9d:f8:ce:
         a3:17:ea:ae:b6:4c:46:53:fa:2a:7b:8b:49:76:a4:80:6b:00:
         c6:5f:0d:35:82:09:f4:a6:16:10:10:16:58:4d:f6:82:fb:d8:
         02:0e:8b:78:eb:88:e6:dc:01:d2:11:ad:f3:0c:13:b7:22:5f:
         0a:00:0f:13:42:f4:0f:d3:8d:2d:1b:4e:59:f3:a5:58:84:a8:
         a5:d6:fe:a4:ec:aa:aa:11:81:0f:83:09:47:4b:46:b4:b8:f1:
         aa:60:cd:7d:47:88:07:6d:d6:0e:5c:7b:14:0d:75:e2:ce:ba:
         e5:37:64:c2:76:d9:04:9e:28:1d:fb:d5:ec:e8:98:60:a8:5b:
         23:35:24:5a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUWe5QE6mAptWLin6RftRkxl/AjugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMTAwMDAwMDBaFw0yNTAyMTQyMzU5NTlaMHoxSTBHBgNV
BAUTQDBmOWQxMGMwYTM2MTUyN2JmOTMxMGNjNjgyOTQ3YTFlYjcwMTE0NmJjNjk3
ZmIzYjQzZmEyYzNlNGY0NmQzYTMxLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7Dsjo50Rcz+2RR+KT9R28SLUuSlYnCAM1vLy7xrRrVBXsvS7iqZvjjMjwC
ELidcLHt2KT8Fb5ca9PrO2+6yJGOvOrwziEJ1j5DctYAWzvplWmnFp5Wm+2KKYw2
29Do6RtNDiS8w3/nKMHNpjFLvGoQ4Kos2mvGiEvaA/WzsDDonL0Gasg9YjEaKvOR
e8wfcojtDlMl8hQ/ydh21VFAcybQNCkq4B84N2y5MEnK9S5xEaFHUQk5Jbmn9d9b
6nmfeO1Sixwtzjc1D+vUIU3kKfQGBTrcX2vca+0oduCTzhIzOTV1kCGxTpnI6BLt
HSSa+gtQw2NdI7W0oX/9c3+VT8ECAwEAAaOCAiMwggIfMB0GA1UdDgQWBBS18yzL
zpyaMU2TDarPPXmPCCB5iTAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZTY5YjE1MTktZjM0NS00M2FhLThjNmItY2Q3ODZlZTEzNDA0LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACoF0H5Q
MA0GCSqGSIb3DQEBCwUAA4IBAQACbH1t+otS9nv9nrls9C5+8bEGVNY0u292JUzI
N/xpRYbumlPyh8LB4PaIbRKaKhZyL17JdMgfleXi+lXJ735hPgyKXq9dIwwrtPuj
NJRN+1pfwh3x+RIhhP7Wx3+NBThd+P2AQbXwTAVLrv7bkmfZkK33zBTgsWH5Hs+d
+M6jF+qutkxGU/oqe4tJdqSAawDGXw01ggn0phYQEBZYTfaC+9gCDot464jm3AHS
Ea3zDBO3Il8KAA8TQvQP040tG05Z86VYhKil1v6k7KqqEYEPgwlHS0a0uPGqYM19
R4gHbdYOXHsUDXXizrrlN2TCdtkEnigd+9Xs6JhgqFsjNSRa
-----END CERTIFICATE-----