Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa
File:                     72c1271b-5ed8-4478-ba43-6741904af7c8.roa (raw, json)
Hash identifier:          0tKDHQa4VVv1Az1Yu1fWqU3hNMCs0pmriq7X2wi65WA=
Subject key identifier:   AF:0E:1F:D1:65:B8:73:07:74:A7:62:4A:CB:37:06:78:0F:49:E0:55
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       74F460E02BA61CE6DE2B62399118E89388614C00
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        159.248.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f4:60:e0:2b:a6:1c:e6:de:2b:62:39:91:18:e8:93:88:61:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=78c76ec16f6bcf42d1426b1b0b8091969314e9a6557fcd33f3b33187314200fc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:28:8e:33:49:7b:6e:a8:44:be:9e:63:ea:
                    ed:80:4d:d9:38:63:53:4a:e7:e4:67:6b:4d:3a:82:
                    49:7a:ba:67:f1:9c:65:8a:64:2d:e3:40:d9:40:e0:
                    ae:22:f2:fc:53:3c:7e:d9:2b:ce:21:bf:4b:c3:7f:
                    13:7c:85:79:fd:34:76:bd:b8:43:29:68:ee:19:f3:
                    82:ad:f4:2e:5a:16:3b:8f:56:07:24:57:5a:1c:0e:
                    b0:6f:34:3d:80:44:c2:87:8c:76:09:15:a6:52:f7:
                    52:86:a9:38:38:9c:37:55:ca:ba:c6:cd:3e:b4:06:
                    0c:af:2d:7c:d1:65:23:d3:54:19:3a:2f:e4:13:93:
                    bd:69:5f:90:45:10:ff:06:43:96:01:69:64:36:5e:
                    dd:f6:d5:ce:9f:8b:44:31:0b:6a:a0:6a:28:1f:7e:
                    83:3e:8a:5b:f3:6d:10:c3:76:3b:50:b3:c0:ed:57:
                    97:41:24:b3:d1:f9:26:c4:36:68:c8:b6:7f:a6:b2:
                    cd:91:2e:90:e2:45:40:f0:94:fb:d6:a0:b3:0b:cb:
                    d2:80:5b:28:a8:fa:55:36:1a:ec:8b:e9:6f:6b:71:
                    7b:da:7f:bb:87:7c:7c:9f:74:55:74:c7:de:56:c2:
                    bc:b1:74:ad:43:44:03:13:c0:08:02:61:23:73:32:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:1F:D1:65:B8:73:07:74:A7:62:4A:CB:37:06:78:0F:49:E0:55
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/72c1271b-5ed8-4478-ba43-6741904af7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.248.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:45:9a:be:00:b9:f3:f3:0d:be:26:57:a2:ae:0e:21:24:
         c4:04:da:d7:5f:3a:65:92:b0:f2:86:13:4f:c5:2d:dc:2e:04:
         17:5e:c2:b9:df:be:4d:74:58:d8:8b:03:61:0a:17:c5:5c:f2:
         1a:a4:c2:15:a4:c7:95:9b:2b:2b:73:14:2b:df:42:f9:c7:f4:
         2e:03:2c:72:86:a1:54:3f:24:a8:51:22:3a:f7:5c:b6:f4:07:
         0f:0c:f8:f9:a9:fc:05:cb:ef:61:e5:3e:c1:05:cc:f1:5c:29:
         30:44:04:6f:d7:dc:1e:0f:0d:3f:73:c9:17:f8:e0:25:0c:5d:
         2a:cb:60:37:bb:97:34:55:7d:83:e7:0b:c7:a8:cf:52:a5:b2:
         30:fc:e6:7d:cb:e9:f1:06:e9:cc:c7:75:b2:83:53:47:3f:d2:
         e8:c7:20:14:ac:ea:39:2a:20:ea:6c:dc:94:51:3b:e9:ee:12:
         87:b1:22:80:a8:dc:d7:26:1d:05:ed:fe:d2:33:3a:b8:02:7f:
         57:3f:f7:8b:38:e1:f0:1b:99:96:6a:02:7b:f0:9d:f6:30:89:
         eb:97:db:e9:15:f4:e8:b1:70:f6:39:37:6d:35:94:5f:35:7d:
         3a:37:4a:1b:6b:66:69:7f:b7:9a:94:25:6b:01:8a:45:fb:fd:
         9d:b2:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----