Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa
File:                     64aa0337-4cf9-42c7-b236-4cd36e69005e.roa (raw, json)
Hash identifier:          t7FsJ2EJ1fs0AqQ00W79BHw8d9eUEdzpbXbzMnRyca8=
Subject key identifier:   BC:74:F2:3E:8F:61:B5:62:60:8A:10:06:9F:97:7F:FA:60:78:C2:02
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       6736E271AE2830DAE0D68753A5069FB6C75B0881
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80f1::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:e2:71:ae:28:30:da:e0:d6:87:53:a5:06:9f:b6:c7:5b:08:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=670a480f815defaae925e9412348b76bce360bcad8e602a1aeb3cc9ac81d5290, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:9a:98:f8:39:2a:7f:55:e5:b0:15:95:f9:
                    6f:2b:5e:9f:08:e2:2d:df:36:19:66:f2:31:de:4e:
                    60:cc:8e:ad:1d:84:72:0a:af:1d:b3:b9:e1:bb:ad:
                    98:ad:12:1c:f7:ef:aa:35:48:49:66:f3:74:1a:a8:
                    80:91:b5:5e:2a:b7:58:5d:fe:35:04:f0:df:65:9c:
                    f4:9b:93:b1:c7:4a:a3:96:b1:84:ad:78:9a:ff:00:
                    08:b0:81:a5:08:e6:4a:bd:42:c3:d6:8d:9a:07:a0:
                    0a:30:cf:a8:88:f7:95:b2:5c:0c:80:a8:72:62:be:
                    a8:09:9b:8e:8f:2f:e4:90:d4:b9:b7:9a:08:38:92:
                    61:27:8e:77:83:99:71:79:b9:b0:c6:a5:42:b0:75:
                    97:3a:0d:aa:bd:26:2f:08:d8:8c:6e:74:62:96:cc:
                    ac:be:79:64:2b:85:ad:08:a5:c2:c2:63:9e:b9:77:
                    58:a0:02:2d:3e:5d:cb:d7:08:e0:bb:d7:0d:2b:8d:
                    87:a1:29:97:e9:93:6e:cb:10:cf:bf:26:b5:ce:a4:
                    ff:08:f2:29:4f:1c:d2:e4:8b:5c:6a:d3:e4:58:c1:
                    dd:d6:37:ab:e5:41:9b:51:96:dc:a1:08:40:bf:79:
                    57:0e:7c:1b:5c:7a:9b:63:61:d5:bf:73:d9:e4:b9:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:74:F2:3E:8F:61:B5:62:60:8A:10:06:9F:97:7F:FA:60:78:C2:02
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/64aa0337-4cf9-42c7-b236-4cd36e69005e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80f1::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:98:0f:c2:28:fc:2f:44:ec:f5:e0:f1:84:bb:0b:1b:e9:8a:
         72:38:43:59:8e:09:0d:c5:cb:b6:a5:98:26:85:9f:35:3f:64:
         fe:51:0e:cc:2e:ab:53:52:6a:8b:e7:b4:5f:e6:d1:77:35:7e:
         b4:a7:b3:b5:37:60:83:cc:87:af:a7:84:3b:5d:50:04:cd:0a:
         aa:dc:0f:73:b0:34:0f:91:86:b2:b9:77:e9:dd:e6:07:3d:b6:
         32:ec:b9:11:4d:7d:ee:94:9c:85:fc:61:1d:a3:95:c2:26:cc:
         af:28:8a:61:7c:97:8b:35:6a:f7:7b:17:43:24:e3:eb:fb:fb:
         01:a0:b5:35:24:49:4d:50:51:c5:4c:7c:c7:2d:95:ad:98:49:
         1b:a9:33:14:f9:27:1d:ca:2f:72:57:76:ee:7b:39:58:3a:b8:
         f1:f4:30:e2:8f:fa:e1:d5:3c:dc:0b:19:72:f1:f7:32:14:cf:
         86:2b:3f:bc:d5:fe:90:3b:5b:0f:f9:a0:10:25:42:1f:8f:df:
         be:e5:f2:3d:d7:b5:ac:95:89:06:04:59:2e:5c:55:6f:62:25:
         88:5d:3e:c3:a4:cf:61:87:b5:cb:c4:b4:4a:d4:74:bf:cb:99:
         71:dc:d4:1b:d0:ff:ee:3b:e8:ed:1f:a8:68:eb:56:6c:bd:ae:
         c3:59:19:8e
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUZzbica4oMNrg1odTpQaftsdbCIEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz
NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDExNDAwMDAwMFoX
DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNANjcwYTQ4MGY4MTVkZWZhYWU5MjVl
OTQxMjM0OGI3NmJjZTM2MGJjYWQ4ZTYwMmExYWViM2NjOWFjODFkNTI5MDEtMCsG
A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmeamPg5Kn9V5bAVlflvK16fCOIt
3zYZZvIx3k5gzI6tHYRyCq8ds7nhu62YrRIc9++qNUhJZvN0GqiAkbVeKrdYXf41
BPDfZZz0m5Oxx0qjlrGErXia/wAIsIGlCOZKvULD1o2aB6AKMM+oiPeVslwMgKhy
Yr6oCZuOjy/kkNS5t5oIOJJhJ453g5lxebmwxqVCsHWXOg2qvSYvCNiMbnRilsys
vnlkK4WtCKXCwmOeuXdYoAItPl3L1wjgu9cNK42HoSmX6ZNuyxDPvya1zqT/CPIp
TxzS5ItcatPkWMHd1jer5UGbUZbcoQhAv3lXDnwbXHqbY2HVv3PZ5Lm6gQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFLx08j6PYbViYIoQBp+Xf/pgeMICMB8GA1UdIwQY
MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO
MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2
LzY0YWEwMzM3LTRjZjktNDJjNy1iMjM2LTRjZDM2ZTY5MDA1ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi
Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJA+A8TANBgkqhkiG9w0BAQsFAAOCAQEAa5gPwij8L0Ts9eDxhLsL
G+mKcjhDWY4JDcXLtqWYJoWfNT9k/lEOzC6rU1Jqi+e0X+bRdzV+tKeztTdgg8yH
r6eEO11QBM0KqtwPc7A0D5GGsrl36d3mBz22Muy5EU197pSchfxhHaOVwibMryiK
YXyXizVq93sXQyTj6/v7AaC1NSRJTVBRxUx8xy2VrZhJG6kzFPknHcovcld27ns5
WDq48fQw4o/64dU83AsZcvH3MhTPhis/vNX+kDtbD/mgECVCH4/fvuXyPde1rJWJ
BgRZLlxVb2IliF0+w6TPYYe1y8S0StR0v8uZcdzUG9D/7jvo7R+oaOtWbL2uw1kZ
jg==
-----END CERTIFICATE-----