Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa
File:                     29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa (raw, json)
Hash identifier:          HSLo91zN86ZZyjiqByLMTjK011Yvmb25Zu1ob1FkVVk=
Subject key identifier:   2A:5D:BF:7F:ED:08:45:38:1A:05:4A:1B:D0:98:A1:17:B5:3A:D8:B2
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       03B9E7BE7ACBBA4FD57FCFCAFA0B3D5D040E3974
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8018:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:b9:e7:be:7a:cb:ba:4f:d5:7f:cf:ca:fa:0b:3d:5d:04:0e:39:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=71dd21edf82c89b3db2e8dbcb7e1d59e200613a1fd218dfa3dbe62e70e9be652, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:14:57:dd:5e:98:8b:79:bc:37:a5:c8:48:66:
                    35:f5:a5:f0:db:ca:17:8d:d2:2e:c3:3a:65:f5:70:
                    c1:33:6b:8e:03:7f:9a:d9:9d:6b:9c:b9:4d:11:af:
                    2c:fe:72:4c:65:a3:a1:3c:c9:91:c1:15:30:99:41:
                    48:93:f8:16:62:b9:e2:ed:f9:2f:b0:fb:f8:95:07:
                    85:6f:a3:24:fb:a7:b3:2c:e4:ce:4f:9f:92:c8:98:
                    c5:fa:76:eb:e4:d5:1e:cd:a8:94:0b:de:a1:ca:e0:
                    18:52:c7:5c:e0:f6:4b:8e:9b:73:b4:30:21:61:6a:
                    fb:a4:ee:f4:bd:fe:9a:a0:64:2c:33:74:32:87:ae:
                    27:29:c0:92:93:fb:1c:af:e7:b6:6f:bb:87:82:ae:
                    2c:56:d6:f5:f7:b9:c3:24:98:f0:2e:47:d9:8c:95:
                    08:18:c8:1c:ed:7e:3e:0b:f0:c9:0e:d0:5e:b8:51:
                    c5:10:3e:97:ee:9d:ed:9f:00:ad:ee:09:32:cc:b6:
                    d1:bd:ff:8e:f9:e9:20:47:e9:fb:ab:01:3d:bd:62:
                    dc:49:57:be:b4:96:1a:04:d7:d1:93:7f:66:a8:8e:
                    5a:2d:63:16:d9:25:f5:4e:f5:ca:f1:a5:7c:c4:9d:
                    37:c5:37:b6:58:26:37:1c:24:a3:e8:3d:61:80:97:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5D:BF:7F:ED:08:45:38:1A:05:4A:1B:D0:98:A1:17:B5:3A:D8:B2
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/29fe4454-f7a8-42fd-8c35-77a6d6f8e60f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8018:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:53:7f:37:41:10:5b:56:92:90:09:36:10:26:94:54:18:
         b2:fa:be:d7:45:e3:57:47:a3:22:a7:02:78:00:cf:d9:ab:b4:
         05:0c:ac:7f:d2:9e:10:32:5e:b0:9c:27:f4:70:89:33:aa:dc:
         68:ad:16:28:71:de:9b:c0:f1:f5:ba:be:4f:7e:cf:27:a5:09:
         c9:4a:e4:26:1c:00:05:78:fe:30:30:93:7e:5a:e3:16:97:8e:
         07:70:f3:e0:59:b0:4c:09:bb:bf:67:7d:1e:75:d1:2a:af:7a:
         39:d9:4b:ec:f2:3f:b4:da:e9:3d:b2:63:2f:37:3a:2d:26:8f:
         72:8b:ab:df:be:49:36:a1:f0:81:21:87:0e:af:b0:c4:3d:c8:
         48:fe:b0:01:1f:1c:5b:b7:0e:28:24:6d:05:3d:14:b0:da:44:
         20:8f:f6:6c:93:7f:8b:03:60:22:43:52:b3:46:bb:08:df:96:
         98:a6:64:9e:95:a2:ce:ef:43:2c:5f:cb:57:1e:ce:20:3b:c7:
         bb:6b:8f:ff:9b:64:50:6b:ed:ac:5d:4c:d0:fb:5c:85:2d:c5:
         14:c4:5b:b5:87:13:f4:c4:d8:4a:52:ec:19:a4:64:34:fa:88:
         90:6b:b0:bd:ec:c2:79:e5:5b:1b:41:25:0b:47:c7:87:5c:d5:
         a5:46:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----