Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa
File:                     33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa (raw, json)
Hash identifier:          qzK0T2Vi8YRbGyrmfk02ce6Uq2ymn3k7sR3ke1EHDnQ=
Subject key identifier:   BB:A3:B2:FC:A1:12:0B:AE:BF:23:0C:7C:D3:48:9F:BB:ED:FB:28:A9
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       5C92772905D1FA055F0DA2BD172C24773BAD6B55
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80ff:4080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:92:77:29:05:d1:fa:05:5f:0d:a2:bd:17:2c:24:77:3b:ad:6b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=15ad02f34ca7538755e3cbaaa12424e1c741a5243246d1d784c35fe788b18b83, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:f4:c7:c3:0b:db:07:74:4a:e2:82:ab:68:
                    c0:5e:41:f2:0e:79:e3:46:22:c9:8c:2b:d6:76:10:
                    6a:fc:40:fc:7a:4e:b7:59:fc:50:4c:c9:73:6c:b0:
                    66:be:86:f5:52:6a:f9:9e:e9:48:16:0c:a6:b4:44:
                    f8:da:de:80:6f:61:ea:77:25:c5:bd:24:b8:f0:95:
                    2d:45:36:2a:01:31:79:dd:ee:20:32:b4:ef:7d:f2:
                    96:b2:32:22:3a:a3:5c:bd:47:07:8e:04:d4:b9:93:
                    7c:f9:27:ce:8a:04:2d:a6:59:43:78:56:9a:d1:20:
                    9c:ce:54:a0:7f:3d:7c:cd:4a:56:2a:30:ab:9a:e7:
                    43:6e:38:f9:7f:9e:98:bc:80:78:08:f0:39:fb:59:
                    bc:78:ed:53:f0:67:72:da:0f:a2:17:df:1d:1f:76:
                    c9:ab:3b:16:cf:d3:c6:74:e5:86:5d:11:44:93:a1:
                    d0:96:1f:68:70:ae:c1:20:a4:24:63:7d:63:c0:44:
                    c7:46:7b:71:ad:d4:ba:8d:3e:23:f5:eb:0a:66:ff:
                    e4:59:e3:5c:f2:3e:f2:7f:1c:da:fd:38:5a:18:8f:
                    8d:ee:ed:68:92:65:79:9a:f2:f0:90:02:a6:d8:76:
                    5a:7b:bb:d3:d4:55:0c:b7:05:51:22:8b:16:51:12:
                    b2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A3:B2:FC:A1:12:0B:AE:BF:23:0C:7C:D3:48:9F:BB:ED:FB:28:A9
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/33dd31e0-7039-4ff8-aafe-97f7b95b07d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80ff:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:b9:e4:d8:56:3a:17:fd:0a:4b:63:af:ba:f0:a2:82:52:
         04:07:37:71:6a:93:7f:7b:b7:56:ae:2d:24:d9:8d:50:2c:77:
         b6:6b:11:07:b7:6d:e4:68:54:bd:ea:25:32:8f:56:bd:10:d7:
         21:69:f8:f2:d0:40:91:da:2d:39:d2:e4:dc:ff:df:ae:d8:9d:
         d5:e7:ab:60:ce:64:85:46:7e:46:fe:ef:26:6c:60:4f:f1:75:
         c4:8b:26:8d:7f:85:e7:15:21:a7:86:e5:f1:a0:7e:c0:af:34:
         91:1a:0e:5c:10:d8:5b:03:34:81:15:24:f7:b0:74:cb:21:6e:
         e0:f9:9b:71:34:d7:5c:9c:e5:e8:1c:f6:ca:89:06:a9:72:b1:
         20:21:14:37:51:07:e1:1c:e1:31:c3:6d:47:6e:44:bd:b8:d6:
         1e:b1:59:41:8e:9a:c8:1b:2d:ff:9d:7a:9c:10:a6:80:d1:44:
         b2:cc:7e:94:77:da:c3:d9:a5:7a:72:2e:17:f2:1d:a9:e8:2d:
         d7:fa:96:50:90:60:26:10:5a:9d:f9:33:f6:60:c3:21:1e:e0:
         7e:28:55:b6:8c:ce:1f:b0:6f:b0:f3:86:f5:fb:5c:bc:7b:e3:
         69:95:48:95:2d:91:ae:c5:3f:32:3a:f4:d9:c6:8d:1c:58:05:
         7e:8c:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----