Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa
File:                     2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa (raw, json)
Hash identifier:          jR+B0shVsC37xbyz5wMmNT632y73PPkuOrxZBkDmJIw=
Subject key identifier:   B3:EE:C7:A5:99:25:13:46:7D:4C:A3:9F:7B:86:32:32:51:64:D6:41
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       7E664C44F933E899905AD29988226FD48807BBAB
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80f8:4000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:4c:44:f9:33:e8:99:90:5a:d2:99:88:22:6f:d4:88:07:bb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=53357eaa15d2347e89c07de0759fa453796bf8e61bcb83f8662d1ff4320d5e78, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:18:8b:15:1f:76:e9:5b:f5:76:0f:c3:75:
                    c0:4d:02:75:82:da:54:2f:be:84:20:9c:b7:de:d4:
                    d8:45:03:fb:f9:03:3b:46:00:2a:4d:2f:25:e7:9f:
                    eb:a4:2b:e0:bd:74:0e:7c:5c:31:97:bc:4f:2d:68:
                    39:3e:57:30:7b:75:8a:99:45:40:aa:d6:25:77:92:
                    6f:e7:ac:42:90:44:f9:43:78:1a:c7:33:64:54:a9:
                    4e:1f:7e:56:04:fa:dd:f4:67:19:f2:00:ed:f4:05:
                    53:12:b7:13:c3:c7:6a:87:18:17:4d:66:95:2e:8d:
                    99:e4:fa:d8:1e:ab:26:f3:52:c7:5e:54:ec:68:4a:
                    72:06:26:e3:88:28:cd:61:ca:e0:e8:83:c7:a5:75:
                    cc:18:fb:51:06:f4:59:c3:7b:b7:f3:e4:80:92:5b:
                    d0:07:55:5f:11:78:d5:65:e1:85:46:a5:6d:85:c7:
                    3b:19:7e:e4:51:c0:fd:7c:a7:5e:f1:b8:64:7b:9d:
                    68:2a:5a:c4:f7:be:43:a0:c3:8f:d0:c3:14:e1:70:
                    0f:4a:df:b4:c1:36:ba:8c:b8:57:84:24:50:91:cd:
                    9d:f4:90:76:9c:98:9a:6d:f5:ae:fc:94:23:6d:b5:
                    20:02:a6:79:05:69:96:fd:b9:c8:df:7e:a3:2e:21:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EE:C7:A5:99:25:13:46:7D:4C:A3:9F:7B:86:32:32:51:64:D6:41
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/2c7dc99e-16c5-4312-b613-ac42e8b52f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80f8:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:f4:b4:11:d5:22:dc:aa:5f:31:72:1e:0f:25:4c:23:5c:
         cf:50:7e:51:31:50:63:96:7a:27:c0:41:bb:09:c7:72:77:98:
         4f:82:ef:a2:04:34:e0:03:42:c5:68:b0:da:d6:cb:41:d4:70:
         d9:8e:3d:00:fb:ab:fa:59:4e:51:02:8b:98:68:86:01:62:9a:
         5d:cc:21:c0:cf:90:6e:c8:71:1a:77:3f:44:f9:91:5b:81:b4:
         c3:5a:f8:de:84:76:58:54:61:5e:f7:ee:d0:be:43:c6:cf:0c:
         37:a4:78:fb:f4:18:ab:e3:d0:01:59:3f:69:7a:53:52:aa:af:
         23:7d:09:67:8a:fe:f8:3b:a4:27:c8:0a:a6:dc:f9:40:c2:4e:
         b5:31:c1:94:70:9f:e8:2b:20:90:fb:7d:a1:7d:60:a8:d3:8c:
         a1:25:07:21:42:e7:90:87:27:89:63:10:6a:37:38:90:41:a8:
         3a:f1:f5:a4:fd:b2:34:b8:6b:d8:30:66:9e:6c:7c:30:9d:e6:
         ed:57:b0:d1:bd:13:e7:df:cb:b6:a5:da:e3:6a:c4:7f:ad:e9:
         b3:db:db:9e:86:e0:c3:3c:e1:48:86:92:3b:68:fe:84:d2:b4:
         98:b0:49:89:64:91:36:8e:f8:85:1d:43:c1:b8:d9:32:a7:97:
         6f:e2:7d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----