Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5df7952-9afa-44d3-8d00-72b89f047d7c.roa
File:                     f5df7952-9afa-44d3-8d00-72b89f047d7c.roa (raw, json)
Hash identifier:          ug0XsP+5eZXJMpVh1QAypKOmCp/daf5cXH9Zq2wBatI=
Subject key identifier:   6F:3E:F5:5B:E0:19:4F:D1:7E:33:2A:83:2C:EA:E9:C5:46:2B:29:5E
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       5BD2E9FC23ABC327BCD17140595AB58143BD0A43
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5df7952-9afa-44d3-8d00-72b89f047d7c.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d07b:60c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d2:e9:fc:23:ab:c3:27:bc:d1:71:40:59:5a:b5:81:43:bd:0a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=dcd79ec42629cbd94878e2cb04e6c10f32f40b061f3a9a58e15dff0ba8af6381, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:c7:b7:f8:cc:74:09:71:52:5a:fd:72:ce:
                    89:89:c2:0e:28:06:33:f4:c4:c7:8e:0d:71:70:b4:
                    7b:75:d9:66:e1:8f:50:8d:00:8a:03:54:b0:91:15:
                    76:c2:58:aa:e1:8c:7d:f5:8e:21:8e:ff:c7:df:19:
                    93:e3:c4:0a:0b:2c:dc:ab:e9:97:10:44:50:dd:f8:
                    43:9e:2f:f4:87:70:7d:59:c6:c8:29:2f:70:89:7f:
                    26:b6:ad:91:34:f5:48:8a:94:75:b3:f8:b7:7d:4c:
                    77:e1:e8:47:94:56:d4:39:2e:17:96:2a:68:23:1a:
                    80:99:ac:de:70:85:10:91:4d:f8:ac:e0:eb:7c:48:
                    f2:4d:47:c6:d7:48:9f:cf:7c:47:4a:93:6e:8f:9d:
                    dc:8c:28:e7:43:0b:cb:eb:a2:8f:47:5a:d6:41:b4:
                    e3:b9:41:52:e0:43:27:7b:79:42:4c:c6:24:f5:ef:
                    87:56:69:fe:06:51:67:7f:6e:15:e6:f5:77:e6:59:
                    44:66:0a:82:8a:39:d8:06:30:b1:27:e3:17:d9:15:
                    2c:97:11:8a:76:a1:f0:c0:70:5c:ff:20:3b:27:83:
                    96:cb:d4:46:31:19:70:6d:7c:f0:2c:4f:28:13:56:
                    0c:e4:5e:48:0d:1c:48:5b:1d:8f:dc:32:64:42:f0:
                    cd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:F5:5B:E0:19:4F:D1:7E:33:2A:83:2C:EA:E9:C5:46:2B:29:5E
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/f5df7952-9afa-44d3-8d00-72b89f047d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d07b:60c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:6a:80:48:ea:10:e0:e5:58:7b:ac:e2:ee:aa:f5:fd:4f:
         1b:e7:5b:81:f4:a8:d4:12:3d:01:9b:ab:5d:5f:c1:f1:64:9f:
         12:58:e1:70:23:9f:c5:69:1b:32:ac:2e:82:ba:91:08:96:fc:
         37:bd:17:0a:04:50:2e:39:bf:56:da:24:8c:46:21:3d:7c:5f:
         3c:6f:80:7d:2e:06:5e:da:c1:34:72:e5:3e:d2:6a:d2:82:4e:
         e8:2f:2d:0e:b0:32:9b:f4:60:61:5b:bf:f5:02:98:06:7d:1c:
         61:68:a8:fa:3e:bd:f7:7e:4f:16:19:d1:e8:b0:96:08:64:16:
         50:e1:9d:07:17:c4:ab:30:43:5e:88:a6:4c:97:19:3a:bf:22:
         8e:87:e4:b2:76:d9:c3:84:69:ab:3f:af:b2:bf:ba:f4:cf:4c:
         65:02:6e:05:0a:46:2c:6b:8c:2e:4e:cc:bd:f2:6c:ab:c1:24:
         38:a3:5f:63:22:d7:fd:bd:9b:cf:2c:c3:a8:5f:29:d9:55:2a:
         74:ca:67:4c:05:13:6c:0e:16:0e:07:43:78:aa:3b:94:91:4c:
         d6:8c:93:34:a5:6a:69:f5:86:97:b1:b5:cf:1b:85:83:29:fd:
         8b:fb:07:b7:d4:48:e6:7c:78:75:5d:d5:4a:bb:3a:9a:4a:4a:
         1b:45:35:d7
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIUW9Lp/COrwye80XFAWVq1gUO9CkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGI2MjYzZGJlOTc5OWRkNjc5M2UwZTg4MmFkMjFjYjQ4
NDk5NzBiYzAeFw0yNTAxMDgwMDAwMDBaFw0yNTAyMTIyMzU5NTlaMHoxSTBHBgNV
BAUTQGRjZDc5ZWM0MjYyOWNiZDk0ODc4ZTJjYjA0ZTZjMTBmMzJmNDBiMDYxZjNh
OWE1OGUxNWRmZjBiYThhZjYzODExLTArBgNVBAMTJDY2MTVhMzhiLTNhZDctNDdi
Ny04ZmIyLTY4NWMzOGQwMDkxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJyux7f4zHQJcVJa/XLOiYnCDigGM/TEx44NcXC0e3XZZuGPUI0AigNUsJEV
dsJYquGMffWOIY7/x98Zk+PECgss3KvplxBEUN34Q54v9IdwfVnGyCkvcIl/Jrat
kTT1SIqUdbP4t31Md+HoR5RW1DkuF5YqaCMagJms3nCFEJFN+Kzg63xI8k1HxtdI
n898R0qTbo+d3Iwo50MLy+uij0da1kG047lBUuBDJ3t5QkzGJPXvh1Zp/gZRZ39u
Feb1d+ZZRGYKgoo52AYwsSfjF9kVLJcRinah8MBwXP8gOyeDlsvURjEZcG188CxP
KBNWDOReSA0cSFsdj9wyZELwzY8CAwEAAaOCAiQwggIgMB0GA1UdDgQWBBRvPvVb
4BlP0X4zKoMs6unFRispXjAfBgNVHSMEGDAWgBSLYmPb6Xmd1nk+Dogq0hy0hJlw
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2kySmoyLWw1
bmRaNVBnNklLdEljdElTWmNMdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9kYmE4ZjAxYy05NjY5LTQ0YTMtYWM2ZS1kYjJlZGIwOTliODQv
ZjVkZjc5NTItOWFmYS00NGQzLThkMDAtNzJiODlmMDQ3ZDdjLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvZGJhOGYwMWMtOTY2OS00NGEzLWFjNmUtZGIyZWRiMDk5
Yjg0L3VPRGF0ZHRZYzFIcmh0VVFWUXlyREswOEdlSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHAioF0Htg
wDANBgkqhkiG9w0BAQsFAAOCAQEAA9dqgEjqEODlWHus4u6q9f1PG+dbgfSo1BI9
AZurXV/B8WSfEljhcCOfxWkbMqwugrqRCJb8N70XCgRQLjm/VtokjEYhPXxfPG+A
fS4GXtrBNHLlPtJq0oJO6C8tDrAym/RgYVu/9QKYBn0cYWio+j69935PFhnR6LCW
CGQWUOGdBxfEqzBDXoimTJcZOr8ijofksnbZw4Rpqz+vsr+69M9MZQJuBQpGLGuM
Lk7MvfJsq8EkOKNfYyLX/b2bzyzDqF8p2VUqdMpnTAUTbA4WDgdDeKo7lJFM1oyT
NKVqafWGl7G1zxuFgyn9i/sHt9RI5nx4dV3VSrs6mkpKG0U11w==
-----END CERTIFICATE-----