Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa
File:                     e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (raw, json)
Hash identifier:          w+eGGhKP5wv8Il21W8aQLxxq3uohN/oNBVQGEdTKuac=
Subject key identifier:   47:A2:9B:A9:97:BE:BE:09:AF:51:53:CB:AD:52:25:8C:A2:C5:6F:91
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       0C0A41AB93F522E852D274985FD611AFBF5AAF51
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        122.248.232.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:0a:41:ab:93:f5:22:e8:52:d2:74:98:5f:d6:11:af:bf:5a:af:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=5c213c90861ff339fcd14248e63beb1380bc10e514c8e1415d241590a4c582e8, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:02:a9:38:4e:93:d3:4a:ab:b9:aa:45:98:
                    23:4f:0b:46:bc:db:9d:99:d0:b5:61:29:30:c7:63:
                    6f:3a:16:fa:05:66:a4:28:30:c3:b3:4e:28:1c:8c:
                    f0:a6:5a:13:7d:68:7d:a3:f2:46:36:ff:4b:c8:70:
                    d9:7c:b4:db:09:c7:6e:39:df:78:2e:bd:b6:a2:ac:
                    96:87:c0:5b:6c:08:3e:db:fd:e9:ef:a0:99:63:aa:
                    db:5a:f6:19:ad:79:15:f3:b1:e2:5b:48:c4:d7:04:
                    8f:c0:b6:61:1a:06:2b:e8:bf:42:b7:a2:cb:0f:8f:
                    b7:2d:8f:5a:cf:9a:99:42:0f:9e:4c:45:5e:99:2b:
                    0f:c3:16:88:13:35:cc:9c:9c:7f:01:71:60:d8:b6:
                    a5:fe:3e:01:72:6c:7d:9f:eb:48:cf:ba:ab:d0:7a:
                    ad:a6:92:ad:80:0c:1c:97:7b:50:cb:7c:37:72:3e:
                    fc:d0:07:ff:8f:92:6e:72:a8:b6:73:4a:a0:74:bf:
                    05:6b:32:1a:81:05:58:e0:77:83:a0:c9:a0:d5:53:
                    05:72:c9:8b:ee:7f:01:ee:51:99:40:8c:24:6f:35:
                    34:c0:ba:2e:8c:7e:7c:26:11:00:1b:6c:13:82:f3:
                    5d:f5:82:08:dc:2c:d3:21:4d:94:6e:9a:6a:13:85:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:9B:A9:97:BE:BE:09:AF:51:53:CB:AD:52:25:8C:A2:C5:6F:91
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.248.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:9c:c1:d9:7d:94:ec:7a:0e:25:14:f2:a1:86:06:9e:c5:0c:
         d4:06:6a:9c:a9:87:89:d9:d8:90:f8:86:8d:38:5a:46:5a:3e:
         1c:62:29:e1:a7:bb:ff:eb:2e:e4:26:be:af:4a:a5:a9:b0:4b:
         ca:a1:d3:cc:db:50:e6:62:67:e0:b0:26:f6:90:34:5b:04:a7:
         c9:1d:a8:e4:29:ed:0c:b8:e7:44:5b:25:6f:e8:df:dc:2a:2d:
         98:3f:97:47:0e:ef:eb:c2:6a:2c:5e:c7:7d:d4:23:56:4c:ee:
         71:f3:50:0b:eb:55:3a:f9:4d:6e:83:30:5b:80:a8:c1:30:bd:
         52:a1:f1:f2:16:38:b5:90:b7:7c:8a:61:04:ff:40:a4:86:90:
         9e:b7:f7:94:d8:4b:a8:8f:81:f5:1d:0b:cc:e0:e6:12:e9:de:
         6a:04:da:6a:ae:fc:80:42:81:d1:20:3d:74:8d:ab:0d:e1:e7:
         da:76:a0:5d:ab:d7:7a:3a:d0:e3:92:11:81:e7:10:72:a4:d6:
         1f:2b:23:30:73:a6:7c:1d:67:8f:a7:4d:31:2d:33:4b:6b:4f:
         d7:e3:c7:95:b0:8a:2f:e5:cc:c8:86:a5:86:8a:22:0d:3f:b0:
         7d:71:b4:39:9b:25:6a:eb:ac:55:cb:37:98:91:57:4b:3b:d8:
         d7:3a:a6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----