Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa
File:                     62639af2-026a-4677-b13e-0aeb266620d5.roa (raw, json)
Hash identifier:          DA+/eNMEt2kmGI2wTkw/Wxv/E7X1aGi01p+8ztF//f0=
Subject key identifier:   1F:64:37:7D:02:7D:8F:1C:35:74:62:46:27:99:27:CC:F7:5B:48:90
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       60D53638C56AC4D520561BD88B0055D411DA168C
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80ff:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d5:36:38:c5:6a:c4:d5:20:56:1b:d8:8b:00:55:d4:11:da:16:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=1c57d3c7ef36bf7b4842bfd7b60e3f45e293d107c0a228681650d4da3aa344d1, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:91:31:1f:21:33:91:71:7a:04:d6:d5:bb:
                    0c:e9:bd:67:45:89:30:87:b5:d0:24:a2:8c:43:5d:
                    e3:80:7e:78:bf:0b:18:2c:b7:4f:96:a9:2f:e7:9f:
                    09:6c:48:b2:8e:d2:e5:e1:b5:02:86:26:fd:29:1f:
                    95:75:00:c0:dc:b0:f0:55:1a:c0:d8:f5:ec:82:f9:
                    c3:f5:db:e0:82:10:c1:bd:67:8b:79:3c:cb:9d:d3:
                    81:c0:3c:75:b6:a2:37:3e:1a:3c:28:9c:96:7a:34:
                    64:c8:21:d2:91:ac:19:6a:9b:59:90:50:83:73:0b:
                    2f:13:99:14:2b:5f:5c:d7:1a:79:12:1a:0e:77:61:
                    78:be:64:b5:4f:bd:30:1f:8d:b8:a9:72:af:f5:d4:
                    44:28:20:b8:8a:7d:a1:0f:39:cd:71:ee:91:98:72:
                    5c:bc:97:1f:42:cc:77:2f:d5:65:c8:6a:47:34:d1:
                    ed:9b:7b:26:12:43:d0:1f:9f:05:48:e3:c8:b5:8e:
                    9f:d9:54:89:31:59:28:c8:7e:42:5a:d8:1c:d4:eb:
                    82:1f:62:14:8a:c7:ab:14:02:2c:1c:4c:f7:69:15:
                    4e:0e:82:40:84:a4:6a:70:67:57:37:4e:41:26:d6:
                    f1:87:98:92:5e:5e:16:06:89:58:87:62:ce:05:3b:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:37:7D:02:7D:8F:1C:35:74:62:46:27:99:27:CC:F7:5B:48:90
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/62639af2-026a-4677-b13e-0aeb266620d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80ff:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:cd:35:12:c0:bc:d1:99:8f:5a:a4:43:78:1c:0c:a4:98:
         66:ca:b8:2f:9c:4f:0e:61:47:4c:6b:4e:4e:30:39:ec:32:19:
         db:02:34:a4:73:e6:05:b4:91:b3:5f:2f:05:2a:10:0d:69:13:
         a4:7b:36:6c:e8:3e:f2:34:c0:87:c2:4f:25:5f:7c:d8:10:11:
         8f:db:98:fb:8e:30:bf:ad:f4:6a:86:53:79:14:83:01:b5:50:
         01:f8:c4:9f:64:9c:64:b8:c6:b5:e3:20:5d:42:93:3a:92:23:
         6f:6b:13:b8:f5:5b:f0:42:5a:af:5f:96:3c:23:b7:b0:92:3b:
         2e:59:22:9c:a9:01:0c:be:4d:1a:ce:43:c5:68:51:62:81:ef:
         37:09:ad:de:b7:52:e6:74:d2:e9:9e:fd:66:c4:bf:5e:af:e6:
         ee:52:13:f8:73:a9:2e:51:1e:57:9d:eb:80:ed:15:a8:6d:2d:
         03:83:6a:28:09:96:c5:46:2f:9c:b8:e5:43:51:a0:25:d5:67:
         cf:86:b9:22:92:a7:c7:90:eb:ee:cd:9a:d2:18:ee:96:23:44:
         31:73:6c:27:2a:6c:e4:ed:54:1d:32:47:d8:bf:2a:be:11:a3:
         ae:b9:c9:27:8f:10:91:aa:a6:d2:d0:ac:e4:e3:90:0b:a2:91:
         88:c4:b5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----