Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/57f8433c-f162-4b10-8527-fbf7cdbb6aab.roa
File:                     57f8433c-f162-4b10-8527-fbf7cdbb6aab.roa (raw, json)
Hash identifier:          WPsC0Yk1Hh65xdBSW0oFtTC0ANJ1y2sntHHH4o82jjA=
Subject key identifier:   DC:13:71:7D:A8:C3:47:8F:89:0F:C2:B8:59:18:93:6B:3E:B0:96:EB
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       7E82FEA9A070F1CF8E4E86D7BD1007A22F2542CB
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/57f8433c-f162-4b10-8527-fbf7cdbb6aab.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80f8:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:82:fe:a9:a0:70:f1:cf:8e:4e:86:d7:bd:10:07:a2:2f:25:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e55d000d29711ca94a61fa1d6a3d689b3891a7aae6844a8c94b13c6e6b5a9f6e, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:21:a5:a5:37:5c:e0:42:a0:89:fd:d5:91:
                    3f:81:d0:ab:87:83:b1:2e:d9:75:4e:e0:33:48:56:
                    d1:f0:f4:71:42:7b:db:a3:e7:5d:a1:91:9c:1e:3a:
                    b8:51:fb:7b:cf:9f:e9:bc:64:7b:b3:48:ce:e3:e0:
                    24:bb:29:af:5f:a9:21:0d:45:26:48:79:7d:38:03:
                    23:0a:cf:f1:54:7c:0b:a4:6a:5a:85:1d:58:0e:c5:
                    f3:ba:bd:57:3d:af:00:cc:91:07:28:cb:65:cd:c7:
                    a5:76:ae:5b:2d:8b:11:4b:42:13:d6:db:42:48:9f:
                    5f:4f:f3:3f:19:21:fc:9e:46:7b:ba:df:cf:bf:0a:
                    67:81:dd:5c:d4:e1:97:17:ab:1a:8b:6d:4e:c6:c8:
                    34:1f:8f:7e:2d:af:a8:74:f7:b3:18:e7:1b:cd:32:
                    cc:ce:e4:40:c1:6e:f2:00:48:41:0c:6e:5b:fd:0f:
                    54:5e:ca:bf:55:5f:ff:5d:a9:a1:ff:36:de:a3:b7:
                    55:1f:19:84:fd:5e:f0:85:16:fa:9b:e7:93:f0:85:
                    ba:d2:f7:94:8c:94:b6:7a:7c:6f:63:8c:96:ff:57:
                    62:b5:b3:c7:55:04:d5:1c:3d:64:f8:7e:12:05:a8:
                    23:10:32:3b:f2:9f:fd:78:9c:57:8a:f7:72:5b:4a:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:13:71:7D:A8:C3:47:8F:89:0F:C2:B8:59:18:93:6B:3E:B0:96:EB
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/57f8433c-f162-4b10-8527-fbf7cdbb6aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80f8:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:06:b2:03:42:36:0a:fa:dd:05:1a:1b:cd:44:79:c7:d1:
         ad:2d:05:94:69:d8:14:48:de:69:a0:3f:87:a4:fb:85:6a:36:
         dc:d5:4c:45:69:31:89:34:50:31:39:11:b2:81:e4:f1:5f:8f:
         61:31:1b:24:c0:d3:7f:03:fa:3f:08:b1:45:8a:82:1d:65:36:
         e0:54:e6:22:83:df:dc:2b:f9:a2:c0:94:0c:fb:3b:74:d7:f4:
         e1:e6:c4:aa:10:81:88:88:02:f3:51:1e:98:38:a7:ef:d1:c5:
         03:09:44:d6:8b:5b:f8:14:0e:9d:98:74:da:1c:fc:fe:ba:f5:
         ea:b1:ed:2b:8d:98:0c:d6:75:6a:74:f3:47:c3:f6:5a:ef:f3:
         36:61:3c:5d:a1:6f:4e:b0:10:ed:89:e6:8a:a8:5c:ec:a0:91:
         33:c5:8d:1a:96:8e:86:03:34:1a:f0:09:70:6f:17:61:45:9f:
         ea:fa:0b:d4:4a:71:25:90:bb:3a:6e:cd:aa:82:f6:77:fb:6e:
         28:63:d7:23:2c:21:fa:3d:71:79:84:2e:b0:a4:5e:70:9a:86:
         a3:c2:b1:ef:b9:41:4f:9e:0f:1c:12:72:e1:21:5d:16:05:13:
         c9:e7:fa:9d:56:4b:1c:d1:55:48:7f:99:db:2d:42:a5:60:74:
         d8:86:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----