Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa
File:                     3523c675-14b3-4d2d-90e1-e439500ecaca.roa (raw, json)
Hash identifier:          GtJHj3lCZ8GC+pTGxujcfWyMlTcMSQ1CX2N6X6amXBQ=
Subject key identifier:   4C:38:CA:59:CF:88:B3:38:EC:EC:E5:2A:C4:54:43:BA:B8:A0:A7:7C
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       660DC939C7A3C2A78C88E3CE3E0DB16752D65EFC
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80f0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:c9:39:c7:a3:c2:a7:8c:88:e3:ce:3e:0d:b1:67:52:d6:5e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=f986ea127ce86638f32b537f899374446d89c6d1019736329a3af94f2f078b73, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:4a:92:85:4c:8a:1f:6f:32:77:dd:90:f1:
                    20:cc:9b:93:f3:71:5a:2c:54:06:48:f7:bc:ed:de:
                    2d:eb:de:2e:6b:ce:e3:1c:9a:49:fe:6b:c6:99:97:
                    94:11:33:fc:4b:6f:64:af:ee:ab:a9:96:28:81:86:
                    a6:cc:dd:4c:02:56:c0:2a:55:f8:c7:0b:7b:26:8a:
                    b9:f9:aa:8a:06:15:2f:eb:c8:f5:55:08:3d:1c:38:
                    86:1f:f2:90:22:cb:2f:bc:ba:d5:f0:32:03:4f:17:
                    f7:24:95:c1:1e:3a:2d:2f:7f:6d:70:43:2c:8f:c9:
                    c4:00:d5:ba:5e:d2:df:63:ab:f1:41:ef:3f:65:e2:
                    8e:b0:f6:81:3f:5d:40:00:62:b4:12:da:ed:28:af:
                    ce:6e:6b:8d:42:39:7c:51:67:66:3f:ff:2a:fa:ad:
                    7c:23:a3:19:e6:ff:09:d1:80:0e:96:4b:1e:24:44:
                    41:f5:21:5a:cf:15:87:8c:7d:ba:6a:a8:a1:10:1c:
                    88:b3:ef:d3:86:44:1f:00:a0:b5:f3:6f:3c:90:a3:
                    42:9d:4b:04:4d:fa:c8:57:b4:41:b8:44:f6:55:fd:
                    54:e5:78:c3:26:97:b4:35:6f:b7:47:13:6f:f6:de:
                    63:57:f0:8d:bd:01:26:1e:40:29:93:9f:f6:13:5c:
                    9f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:CA:59:CF:88:B3:38:EC:EC:E5:2A:C4:54:43:BA:B8:A0:A7:7C
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3523c675-14b3-4d2d-90e1-e439500ecaca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:6b:fe:37:cf:54:20:85:b9:7b:bb:b9:ab:c0:df:34:15:
         94:f6:bc:cc:8c:b7:eb:db:19:33:7a:fa:64:1b:46:00:02:80:
         9a:d3:4c:3c:c7:d4:23:d0:87:25:2a:fb:a5:3b:bb:c2:3d:66:
         14:c5:86:bc:40:f9:48:ed:e7:ee:4d:45:a6:5e:7e:f4:22:b7:
         cc:52:48:45:9c:98:c0:10:ee:b1:46:38:df:73:1d:85:98:ca:
         0d:79:ea:1e:57:98:be:c6:e4:d9:74:be:db:eb:10:46:19:1f:
         91:4a:91:33:98:cc:0e:eb:4b:24:0f:24:4e:c8:64:83:47:28:
         b5:a3:38:77:46:a5:a5:62:c9:91:a6:a2:7d:92:b0:21:41:bc:
         72:bd:50:3c:fd:3e:00:bc:4c:38:b4:fb:87:0f:eb:dd:49:8b:
         22:ec:e1:41:92:cd:35:68:f9:b1:f9:48:00:61:86:09:9a:a6:
         bd:30:51:4d:f8:ff:87:90:8c:af:ae:fc:ce:76:6b:48:74:72:
         da:4a:80:f1:92:7b:d3:6a:7b:19:ba:2b:81:de:04:8a:34:57:
         3b:ec:7d:01:3b:d2:f6:f1:d2:e9:71:fe:06:8f:e0:a4:2f:b0:
         02:2d:82:89:40:56:9d:96:25:5d:33:4d:16:3f:b0:16:37:65:
         77:a8:a6:b2
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUZg3JOcejwqeMiOPOPg2xZ1LWXvwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz
NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDExNDAwMDAwMFoX
DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNAZjk4NmVhMTI3Y2U4NjYzOGYzMmI1
MzdmODk5Mzc0NDQ2ZDg5YzZkMTAxOTczNjMyOWEzYWY5NGYyZjA3OGI3MzEtMCsG
A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotZKkoVMih9vMnfdkPEgzJuT83Fa
LFQGSPe87d4t694ua87jHJpJ/mvGmZeUETP8S29kr+6rqZYogYamzN1MAlbAKlX4
xwt7Joq5+aqKBhUv68j1VQg9HDiGH/KQIssvvLrV8DIDTxf3JJXBHjotL39tcEMs
j8nEANW6XtLfY6vxQe8/ZeKOsPaBP11AAGK0EtrtKK/ObmuNQjl8UWdmP/8q+q18
I6MZ5v8J0YAOlkseJERB9SFazxWHjH26aqihEByIs+/ThkQfAKC18288kKNCnUsE
TfrIV7RBuET2Vf1U5XjDJpe0NW+3RxNv9t5jV/CNvQEmHkApk5/2E1yfoQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFEw4ylnPiLM47OzlKsRUQ7q4oKd8MB8GA1UdIwQY
MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO
MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2
LzM1MjNjNjc1LTE0YjMtNGQyZC05MGUxLWU0Mzk1MDBlY2FjYS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi
Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJA+A8DANBgkqhkiG9w0BAQsFAAOCAQEAsmBr/jfPVCCFuXu7uavA
3zQVlPa8zIy369sZM3r6ZBtGAAKAmtNMPMfUI9CHJSr7pTu7wj1mFMWGvED5SO3n
7k1Fpl5+9CK3zFJIRZyYwBDusUY433MdhZjKDXnqHleYvsbk2XS+2+sQRhkfkUqR
M5jMDutLJA8kTshkg0cotaM4d0alpWLJkaaifZKwIUG8cr1QPP0+ALxMOLT7hw/r
3UmLIuzhQZLNNWj5sflIAGGGCZqmvTBRTfj/h5CMr678znZrSHRy2kqA8ZJ702p7
Gborgd4EijRXO+x9ATvS9vHS6XH+Bo/gpC+wAi2CiUBWnZYlXTNNFj+wFjdld6im
sg==
-----END CERTIFICATE-----