Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa
File:                     177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (raw, json)
Hash identifier:          E80zF+zpHDJUSINVkcO1jl/rVfkeZQBrwoqZ1M4JVcg=
Subject key identifier:   75:61:4F:E8:53:5C:E2:6E:99:F5:04:B9:A3:22:79:23:08:0C:DD:F1
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       6C4D64D960944A67F6AC1572015714E7C25AF539
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        122.248.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4d:64:d9:60:94:4a:67:f6:ac:15:72:01:57:14:e7:c2:5a:f5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=2886e8c2aec378c229eb0d2d82e94b8ba8cadad2addace95ea4a106be93d3cfd, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:82:06:12:65:1e:9a:75:57:f6:41:8e:6a:
                    43:70:98:f0:10:09:0c:88:c9:88:c8:d7:4a:22:f6:
                    91:5c:78:49:8a:14:69:e6:dd:05:59:59:10:9e:fa:
                    bd:b7:36:ac:10:36:d5:e5:0e:c0:18:aa:e7:a0:89:
                    49:62:ae:98:9e:fc:f2:54:06:01:d9:e1:35:1e:c9:
                    e5:c5:6e:c1:92:1b:d1:59:03:e5:b7:25:10:5c:72:
                    2e:ee:f0:0b:73:bd:20:90:63:7e:5e:b3:9b:62:9a:
                    ba:75:e7:62:b4:b9:1f:09:6b:83:81:11:e3:6b:f8:
                    b9:8e:4e:c8:51:03:42:4f:72:02:ed:2c:01:10:03:
                    9e:93:5a:2d:eb:66:f9:df:4a:20:b4:7d:e3:0f:b7:
                    88:de:3a:04:62:e3:68:80:00:c9:d4:c0:44:62:b4:
                    9d:84:6c:2e:d0:0f:7f:53:95:54:95:81:9d:77:fc:
                    44:41:f3:05:42:2b:8a:f1:bf:44:65:e6:e7:37:42:
                    e1:41:4b:0b:16:6d:39:c3:c1:d6:88:99:0f:3b:c2:
                    1b:9c:f1:03:a7:1a:9a:5a:09:e9:e5:af:f6:5e:16:
                    38:4f:78:cc:4c:52:bc:f4:3e:d5:84:8f:be:03:ca:
                    74:01:37:4a:5d:ef:fb:03:72:f2:2f:5d:6d:1d:b2:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:61:4F:E8:53:5C:E2:6E:99:F5:04:B9:A3:22:79:23:08:0C:DD:F1
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/177c9702-ee39-42d1-b76f-6cee77f4fb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:09:6b:76:9d:e4:db:4c:c9:45:0b:16:dd:ea:24:ae:26:7f:
         c0:8b:bc:c8:54:3a:47:a3:8d:b4:83:4e:55:1c:e4:80:f4:65:
         a6:bd:fc:0b:90:8d:6b:bb:81:26:2a:dc:6b:ab:d2:b4:c4:ba:
         9e:30:71:c4:d6:09:67:d1:53:b7:8f:e7:8c:ad:84:80:0f:9c:
         e7:fa:24:e9:1b:de:5a:6d:8f:7d:72:ce:36:d6:29:ba:2e:a4:
         7a:57:22:aa:93:db:a9:6f:96:3c:7a:ba:b5:25:fc:6f:3c:93:
         94:0d:3d:b1:8d:0a:a4:9c:45:5f:0c:fe:92:6c:d0:c6:42:db:
         e6:6b:97:49:57:e6:91:b3:8c:6c:7f:22:b8:4d:c8:5b:9f:c6:
         f6:d0:95:60:b3:3c:42:bd:81:87:e0:77:35:c4:33:50:8e:c7:
         d2:63:46:0c:f8:0d:38:07:33:c1:85:24:f8:70:e6:6b:00:d6:
         92:2e:f4:d7:6c:42:7b:f0:2f:b4:c3:02:69:2b:74:2e:db:38:
         0f:8b:d8:0b:80:ad:a5:1b:05:7c:62:48:90:67:71:12:e5:ef:
         7e:49:18:7d:34:76:62:59:17:66:65:a9:e8:c8:e8:26:4c:bc:
         da:e8:d1:ff:49:ea:f5:9f:04:4d:32:41:cf:12:11:f4:be:32:
         b0:b8:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----