Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa
File:                     453c01e0-c333-4283-987c-be2c8b71798c.roa (raw, json)
Hash identifier:          3Qzc2lPhyslwn4QmmiCGvemQQfdTj1QlzciGEu6o3jY=
Subject key identifier:   C9:12:B2:44:ED:8B:E2:0C:6F:99:3A:B5:85:F4:7A:D0:2D:97:8E:76
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       3CC58429C9C6FB1EBD6E3278E5D28353B3CCD577
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80ff:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:84:29:c9:c6:fb:1e:bd:6e:32:78:e5:d2:83:53:b3:cc:d5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=d8347031de11c3af4ba9f10b5c414d16ae3b999b31cb5178e9395e947fa8abf9, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c6:6f:6e:18:2d:b8:26:0c:92:5f:e4:8d:ca:
                    65:e5:e1:bf:35:b1:fc:89:b9:50:43:b5:bc:da:f3:
                    fb:e9:ef:2a:d4:4e:f9:4c:c1:d5:b2:b3:60:31:f4:
                    f7:df:73:c9:de:ac:45:de:bf:2b:64:89:1c:41:ac:
                    eb:3f:4d:6e:05:7a:be:9d:a4:fc:d8:8e:da:14:f2:
                    49:46:34:66:07:65:20:5a:57:a1:29:6e:45:f9:4b:
                    37:41:e1:e1:10:5f:6c:42:92:d4:6a:37:24:a4:36:
                    3d:3d:08:90:62:d7:50:40:7e:f1:18:ca:56:a8:4b:
                    a5:52:98:74:f0:c8:2f:32:2f:66:29:93:9c:4f:75:
                    96:40:7c:5d:7b:cb:a0:58:7d:46:77:6a:a6:59:78:
                    45:8d:d5:dd:9a:09:e7:b7:c5:33:a4:68:0f:8d:63:
                    1b:05:f8:0a:49:d2:62:bc:44:90:62:25:f1:e1:d4:
                    6e:dc:2b:c6:58:ef:d2:4a:f3:b6:c4:c1:9d:c7:77:
                    db:41:cf:34:e4:2b:5a:10:b8:a6:00:96:a1:62:46:
                    9f:05:04:e1:b3:70:2d:e3:55:2d:9a:c7:8f:f3:55:
                    1e:b3:c6:f6:a0:e6:e1:c7:c5:e8:08:bc:4d:b3:fa:
                    ab:79:9b:5c:91:e4:c6:97:a8:e1:94:e8:ce:f9:2e:
                    6b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:B2:44:ED:8B:E2:0C:6F:99:3A:B5:85:F4:7A:D0:2D:97:8E:76
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/453c01e0-c333-4283-987c-be2c8b71798c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80ff:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:48:01:5a:1b:ef:6f:92:84:57:c7:e9:26:89:7d:36:17:d3:
         a8:80:e1:b6:9f:66:f3:8f:fe:f8:6c:cf:35:e8:b1:f7:3f:b6:
         6a:82:c5:f2:73:e3:1f:c8:4f:9f:dc:df:bf:aa:8e:90:a1:23:
         4a:b3:bf:fd:89:1a:d7:93:d4:d8:34:52:09:a8:c6:e8:3c:03:
         b1:4c:8d:ff:8f:4f:9b:28:37:66:b0:6f:3a:09:78:b9:7e:4f:
         9d:d2:0f:0e:31:17:20:df:da:9a:62:40:c5:5a:17:03:ee:15:
         ca:b9:11:3f:69:c1:86:78:d5:33:2e:a0:2b:a0:e3:17:9a:75:
         34:8d:78:0c:bf:c5:98:9b:18:7b:6f:97:85:b4:cf:e0:3a:f0:
         4f:77:75:16:f6:85:33:f1:79:b7:5f:a5:75:a6:52:74:d6:6e:
         b6:0d:ab:8e:b4:61:a5:1c:f8:3d:76:02:9f:dd:90:a1:a2:ea:
         d3:05:5a:36:62:38:c5:06:7f:fa:2d:da:de:9e:b8:f1:75:51:
         6d:5c:59:5b:c4:d2:68:bf:b3:51:83:b8:2b:08:78:61:b6:70:
         15:14:6a:27:82:c7:64:0f:b2:ea:25:bd:64:55:e6:04:ae:20:
         fd:47:79:6c:98:49:c5:3b:cb:89:77:6a:54:ff:db:ea:68:67:
         c7:25:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----