Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa
File:                     0bce91dc-229b-42a7-9c92-722aa69f577e.roa (raw, json)
Hash identifier:          z5Jm/MuBY4+ARaya1Q98Ns0FyRcAAd1j1FXY72pYdrk=
Subject key identifier:   7C:5A:C6:83:1E:F0:76:82:EF:A7:4F:05:3C:B9:63:81:7D:DD:7C:63
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7CD1F7939991537F748A0982E79737719B1793F4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        43.198.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:f7:93:99:91:53:7f:74:8a:09:82:e7:97:37:71:9b:17:93:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=5e8e8e15f52a45ac0932a68d2ae2e68a230b31910a499305ce94b9f59dd913bb, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:7f:a0:73:b0:69:3b:27:b2:f0:d6:52:83:
                    2e:ac:cd:8e:87:8f:d1:f6:8a:b1:bc:dd:9a:fd:78:
                    cc:f8:ab:64:e0:d4:6b:9a:91:a7:b6:36:d6:89:74:
                    a8:3d:3a:bd:91:b9:a9:66:b4:c3:fe:85:01:71:35:
                    7f:86:8b:95:f2:ac:e9:21:59:83:7a:e3:df:0a:38:
                    7a:81:7b:be:09:36:8b:6e:b2:bb:0e:3a:06:09:4e:
                    29:2f:79:6f:4b:34:b2:17:8b:a0:2b:28:f7:4c:af:
                    6d:37:99:14:90:84:10:6e:50:8e:81:00:fd:03:35:
                    9b:7f:8e:c6:a0:52:29:6b:50:27:83:6c:a1:bb:bb:
                    20:d7:a1:0b:f8:ce:b7:a3:4d:55:93:37:da:26:be:
                    c6:5d:1e:0c:89:2c:85:95:5a:fd:74:b1:e2:3f:a4:
                    57:60:2d:61:84:97:f5:e8:a9:17:10:83:fc:6f:3f:
                    0a:b1:14:dc:6a:49:fa:25:15:ca:6d:ea:f7:69:e2:
                    ba:f5:4b:cb:63:d9:b5:2b:10:b4:c2:ad:ab:50:06:
                    73:72:51:d9:13:a9:c7:08:77:57:f6:fc:1c:7b:8e:
                    ed:89:17:b1:4e:f7:8f:9a:a2:aa:9e:27:50:c5:50:
                    6a:a6:03:3b:56:f0:05:1e:51:ca:34:ae:36:00:79:
                    00:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5A:C6:83:1E:F0:76:82:EF:A7:4F:05:3C:B9:63:81:7D:DD:7C:63
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0bce91dc-229b-42a7-9c92-722aa69f577e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.198.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:e0:66:a4:8c:f2:c5:04:ae:7f:3d:8f:92:a8:33:4f:09:
         3c:cf:d6:69:e5:30:ff:44:ec:43:d8:59:6e:13:98:b2:72:2a:
         29:d4:ff:2c:07:a6:23:bc:92:00:62:49:57:20:12:0e:9d:88:
         59:08:3a:d1:35:74:5e:df:09:8a:d7:53:8a:3a:01:d0:d7:3a:
         ac:22:2b:75:f5:4b:dc:6f:12:10:d4:86:bc:7d:cb:c9:71:70:
         de:73:9a:04:5b:d3:60:8a:65:26:9c:d5:41:3b:d3:e5:f9:72:
         bd:eb:25:b1:08:21:41:96:09:77:5b:2c:bb:41:60:ba:36:6f:
         ac:82:d3:e9:73:e0:1a:73:1c:37:46:6b:d2:29:b6:ee:c0:04:
         1d:5d:2a:be:d9:4a:69:02:fa:61:19:94:2b:bc:d8:1d:1b:2b:
         c3:fb:c7:6a:0b:65:d5:e1:c4:e8:13:27:af:f6:4e:d5:ee:c1:
         f8:b6:dd:b3:9b:15:24:06:e9:f2:6c:ba:f6:a8:64:3d:b7:f7:
         4e:0a:a5:76:a7:3d:0a:f1:00:c9:23:3f:30:a1:df:98:a4:62:
         49:22:78:fa:0d:8d:d1:32:b3:32:16:af:46:30:ce:1d:85:a1:
         ab:78:1f:73:a7:c2:66:20:26:df:58:fc:eb:33:d1:2d:41:13:
         ad:71:87:34
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUfNH3k5mRU390igmC55c3cZsXk/QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMDAwMDAwMFoX
DTI1MDIxNDIzNTk1OVowejFJMEcGA1UEBRNANWU4ZThlMTVmNTJhNDVhYzA5MzJh
NjhkMmFlMmU2OGEyMzBiMzE5MTBhNDk5MzA1Y2U5NGI5ZjU5ZGQ5MTNiYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6R/oHOwaTsnsvDWUoMurM2Oh4/R
9oqxvN2a/XjM+Ktk4NRrmpGntjbWiXSoPTq9kbmpZrTD/oUBcTV/houV8qzpIVmD
euPfCjh6gXu+CTaLbrK7DjoGCU4pL3lvSzSyF4ugKyj3TK9tN5kUkIQQblCOgQD9
AzWbf47GoFIpa1Ang2yhu7sg16EL+M63o01VkzfaJr7GXR4MiSyFlVr9dLHiP6RX
YC1hhJf16KkXEIP8bz8KsRTcakn6JRXKber3aeK69UvLY9m1KxC0wq2rUAZzclHZ
E6nHCHdX9vwce47tiRexTvePmqKqnidQxVBqpgM7VvAFHlHKNK42AHkAdwIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFHxaxoMe8HaC76dPBTy5Y4F93XxjMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzBiY2U5MWRjLTIyOWItNDJhNy05YzkyLTcyMmFhNjlmNTc3ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMBK8YwDQYJKoZIhvcNAQELBQADggEBAJ6V4GakjPLFBK5/PY+SqDNP
CTzP1mnlMP9E7EPYWW4TmLJyKinU/ywHpiO8kgBiSVcgEg6diFkIOtE1dF7fCYrX
U4o6AdDXOqwiK3X1S9xvEhDUhrx9y8lxcN5zmgRb02CKZSac1UE70+X5cr3rJbEI
IUGWCXdbLLtBYLo2b6yC0+lz4BpzHDdGa9Iptu7ABB1dKr7ZSmkC+mEZlCu82B0b
K8P7x2oLZdXhxOgTJ6/2TtXuwfi23bObFSQG6fJsuvaoZD23904KpXanPQrxAMkj
PzCh35ikYkkiePoNjdEyszIWr0Ywzh2Foat4H3OnwmYgJt9Y/Osz0S1BE61xhzQ=
-----END CERTIFICATE-----