Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
File:                     19bd833c-9eac-4b19-b264-a191d9c1b939.roa (raw, json)
Hash identifier:          J0X9Dk7FYOv2UnyFvuhtjcNlCxfvP8FF+eGBPPvasME=
Subject key identifier:   5A:E0:22:BE:50:B7:A9:04:3C:31:75:5F:30:35:1A:C4:ED:4B:77:BF
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       06074E9083232178EDFF7993956E693CC0A91BB4
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa
Signing time:             Tue 18 Mar 2025 17:00:31 +0000
ROA not before:           Tue 18 Mar 2025 17:00:31 +0000
ROA not after:            Tue 22 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        46.51.216.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:07:4e:90:83:23:21:78:ed:ff:79:93:95:6e:69:3c:c0:a9:1b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Mar 18 17:00:31 2025 GMT
            Not After : Apr 22 23:59:59 2025 GMT
        Subject: CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:45:d8:47:26:84:0c:75:a0:f0:68:6e:7a:
                    6a:69:57:7a:36:92:ab:18:4b:f1:33:60:f4:98:a0:
                    df:b7:26:88:1a:58:16:c2:86:44:eb:95:dc:d3:f9:
                    0f:f6:d2:ed:cd:df:3e:ef:92:b4:1a:2a:c1:2b:97:
                    b3:f2:c3:1b:42:05:63:88:f5:cc:bb:4b:a4:3f:d8:
                    08:8e:a1:6a:2a:d7:01:80:de:91:18:7b:51:b0:74:
                    e8:24:9e:e1:c4:7e:52:40:7b:45:fe:64:8c:c5:47:
                    98:3f:d7:63:d3:2b:27:26:ff:5c:61:70:7b:f9:86:
                    62:47:c7:cf:1b:86:81:ee:1f:6e:5d:d0:72:0d:23:
                    15:ac:0d:ca:d2:bb:81:57:9c:ce:bf:7d:d6:66:0a:
                    e5:a4:32:c6:e0:c9:5c:dd:f0:8d:c2:91:92:1c:16:
                    9f:e1:1c:f1:53:9d:3e:ee:52:b2:be:3e:7a:a1:33:
                    fa:3a:cd:83:ee:94:54:c2:b7:8c:4b:85:df:a5:25:
                    47:70:1b:69:cf:0c:2a:ee:ee:37:84:65:32:6e:af:
                    a2:d5:8a:70:e6:69:f2:d8:56:a4:98:41:99:ce:8d:
                    5d:08:21:66:a3:f8:c3:6b:fc:82:ef:f7:8a:0c:71:
                    1f:68:70:71:3c:4d:a6:0a:91:34:fa:6c:78:d9:d3:
                    44:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:22:BE:50:B7:A9:04:3C:31:75:5F:30:35:1A:C4:ED:4B:77:BF
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/19bd833c-9eac-4b19-b264-a191d9c1b939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.51.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:09:6b:c6:75:12:4d:47:aa:90:f4:a2:d1:04:9e:38:5c:50:
         ee:9b:4f:0d:b9:55:d4:f9:60:ab:8b:8b:53:c6:cc:6a:d3:5f:
         ef:8e:c1:7a:75:97:cf:e3:5d:f7:dd:ed:a5:41:ec:69:71:ab:
         8a:57:5d:b0:75:0f:fb:59:37:12:19:00:39:17:cb:46:75:b6:
         3b:4e:cd:9e:74:12:b3:eb:36:ef:8e:f9:49:c8:6c:19:7c:9a:
         9c:7b:e0:c9:00:d5:fc:aa:7c:90:a8:ad:c7:15:3a:21:d9:b0:
         c1:3d:55:c6:9b:6c:c4:17:3a:fd:88:6b:e6:80:1e:c8:76:69:
         87:93:c0:64:20:d0:8b:aa:39:02:ec:d7:2f:0b:b8:9e:7d:3a:
         92:d1:14:cc:cc:66:2c:20:8e:37:ec:60:8b:29:f6:4a:57:da:
         a4:30:9d:c0:cb:5a:c7:22:9d:fc:7e:91:7b:71:27:a3:9d:89:
         d4:68:bc:1b:23:54:77:20:16:d8:06:70:9a:1e:f7:10:dc:d0:
         be:f5:95:21:c5:7c:e5:d4:79:cf:64:d2:1e:6c:47:f3:81:9a:
         e0:41:e2:89:92:fa:fa:32:b9:64:93:05:b9:56:8c:fb:e8:17:
         82:9f:a8:84:65:3c:6e:df:91:fc:69:2b:85:33:11:52:f2:53:
         a0:9e:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----