Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa
File:                     5484d331-446c-4042-9500-dd3002e6a910.roa (raw, json)
Hash identifier:          vFcz9ozXVIaqofe9043JpOPdrczUGge9lpg8wK2zqIw=
Subject key identifier:   00:BC:BC:FD:AC:87:15:8F:2F:1F:11:4A:BF:27:70:B2:2F:73:DF:B9
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       796FFB462EBC184BC5BB297F12BBB4C7AA5A11AB
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8014:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6f:fb:46:2e:bc:18:4b:c5:bb:29:7f:12:bb:b4:c7:aa:5a:11:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=6fb6a3789eb83ba08e235577da4e294db76185b908b51ee0f35fad0058321ca5, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:06:9c:81:10:41:4e:4d:58:70:7c:b0:31:
                    22:b2:1d:f4:ac:1c:6e:00:4c:08:cb:16:82:7d:05:
                    8c:0d:e1:9f:33:00:b5:f8:87:f4:8f:1a:0f:cc:4e:
                    4e:b0:fb:1c:30:64:2f:6f:d6:03:ab:c7:42:d7:05:
                    01:3e:b6:1d:67:34:96:3d:f0:2f:22:03:36:c6:7e:
                    8d:76:89:94:16:64:32:43:a0:8b:3c:b8:b1:65:ca:
                    76:86:ac:be:88:b2:8d:88:cc:1f:75:9e:d8:c9:cf:
                    74:8a:15:7f:af:eb:96:b9:18:51:44:78:30:33:ad:
                    93:ef:c6:25:71:bb:8a:59:1e:e3:c0:c9:0a:02:0c:
                    49:fb:f7:80:e4:79:c8:a7:53:6c:d6:ee:b7:a3:0f:
                    b2:09:45:1d:50:f0:c7:19:aa:59:02:d3:e4:e6:3e:
                    71:af:aa:ac:19:93:4a:e4:c5:dc:b9:c6:9f:c1:6a:
                    64:8b:22:4a:73:48:1e:61:c4:ad:91:38:10:86:cf:
                    25:f1:4a:59:04:47:9b:0c:fb:c2:3f:f2:49:e4:60:
                    48:31:fe:84:88:02:37:30:f8:a3:2a:2b:56:ac:5a:
                    bf:b5:5d:b3:5a:e8:e6:d4:95:8a:2a:02:01:1b:98:
                    f5:7d:1e:05:06:ef:f0:83:44:aa:30:19:e9:84:31:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:BC:FD:AC:87:15:8F:2F:1F:11:4A:BF:27:70:B2:2F:73:DF:B9
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/5484d331-446c-4042-9500-dd3002e6a910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8014:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:bc:87:1b:58:e5:75:05:ed:36:93:b7:10:5f:b6:66:69:
         f6:c8:1d:63:f4:2e:5b:dd:07:ba:28:fb:f5:46:49:b2:2b:10:
         0c:a0:19:f9:74:ba:6d:d0:dc:04:69:c4:8e:74:9a:e7:ba:4c:
         74:89:50:93:24:20:23:0e:03:2c:0b:d8:3b:82:75:9e:17:be:
         82:55:2c:9d:35:22:15:f0:19:9f:17:00:c8:d2:9d:0e:76:d2:
         2f:69:b2:43:3c:24:a5:22:bc:52:6f:ca:45:67:b1:c9:15:52:
         ec:89:1d:1a:a5:33:9b:38:4a:e8:f6:9f:9f:37:21:9d:da:6d:
         fc:f4:7f:db:e1:0c:b4:02:a2:a8:4f:8e:f4:79:d1:c8:51:e2:
         9d:49:3b:7a:f6:03:e6:eb:41:7a:11:09:7b:be:4c:ae:6c:90:
         33:8c:5c:c7:86:69:8d:62:67:e5:85:d5:2c:0a:49:fe:01:83:
         df:b8:41:17:a0:7a:1f:f9:29:3f:59:86:12:10:37:f7:f8:4c:
         18:25:a0:d9:09:60:7c:c9:65:57:eb:f9:20:52:63:f0:f9:59:
         e7:cb:ed:a4:d7:3b:fd:66:97:bf:ce:e4:e0:e0:e8:b4:fa:ae:
         72:de:a0:fd:84:fb:49:c3:ad:60:15:30:67:b0:a2:1d:8e:d3:
         ee:42:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----