Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa
File:                     9a94ee8c-7029-4ffb-af7f-435e161333de.roa (raw, json)
Hash identifier:          w+IPyj0Z++9P0EbqrSRaUSpJvypOJHVuLvkqNaERe2o=
Subject key identifier:   75:E0:B0:B1:10:F7:31:FB:9B:DE:4F:E9:AB:3C:B6:5B:35:37:6F:BD
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       60E7E815A1560E5F22492BC368B0E1F5760FF90C
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8000:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:e8:15:a1:56:0e:5f:22:49:2b:c3:68:b0:e1:f5:76:0f:f9:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=f1c76092a53217634c2129d160a10d4448f9ce5650ab0424061512c447edd414, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:3d:01:fc:09:cc:28:b3:03:5b:ef:a4:54:
                    dc:2f:3b:1a:86:ef:55:63:06:89:bf:ed:1a:cb:a9:
                    10:71:04:c4:52:e6:f1:a9:51:67:0a:8b:ac:9d:57:
                    31:27:67:8d:2d:13:73:ab:23:dc:b6:67:37:9e:78:
                    4a:17:9d:7a:d5:99:2f:bd:3c:27:c9:b9:2d:07:c0:
                    ed:20:a0:10:d5:d0:89:49:52:09:76:65:05:38:d6:
                    24:0f:33:88:ee:ae:55:2e:22:df:f7:b9:c9:30:a9:
                    bc:17:56:67:8e:c5:3e:73:72:25:94:8c:26:d4:7b:
                    92:8e:55:99:ab:c2:46:75:51:c3:f2:64:47:32:ad:
                    30:85:c9:fc:b6:0a:36:93:df:96:3c:05:3f:b8:68:
                    a9:0c:79:88:b9:ab:7b:34:b0:29:54:df:68:31:a1:
                    18:96:2a:db:67:73:8c:c2:ef:38:6f:16:65:a3:04:
                    a8:c5:cb:4b:37:49:c6:aa:42:d9:7c:56:17:2c:af:
                    6a:14:b9:bd:a6:8a:8e:d2:f0:fc:9f:42:c4:fd:dd:
                    53:d8:a3:34:ca:5c:f9:34:98:ca:ed:c8:18:7b:a0:
                    8f:b9:c7:31:7b:b8:60:57:5e:b8:cd:45:49:c1:89:
                    04:16:06:8a:60:fa:6a:88:2d:9b:ad:54:d0:71:bb:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E0:B0:B1:10:F7:31:FB:9B:DE:4F:E9:AB:3C:B6:5B:35:37:6F:BD
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/9a94ee8c-7029-4ffb-af7f-435e161333de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8000:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:05:37:bf:0f:5a:dd:32:c5:4e:2c:b0:02:a8:21:c7:fc:92:
         e7:bd:80:6a:4f:88:ed:39:d9:0d:b6:ae:72:54:ee:81:09:32:
         95:d3:9d:26:2f:57:bc:aa:fc:0b:12:03:f2:97:b0:a6:37:83:
         a7:34:37:22:be:e3:f9:ee:26:b7:d6:38:fb:8c:06:9b:f2:ff:
         74:6f:a4:a5:8f:03:f1:3d:18:8d:50:e3:de:a6:c9:36:7f:71:
         cd:2c:ba:51:34:da:4e:87:19:b5:c3:dd:f6:85:bd:76:13:d9:
         16:f9:a8:d8:82:bf:cb:6b:ba:2f:31:cd:51:28:1f:c4:db:2d:
         28:3c:40:61:5b:a9:66:47:9d:93:5a:90:04:32:e3:14:50:e7:
         d3:78:43:e5:b4:68:ae:d2:e9:0b:d6:81:bb:52:a3:ff:9c:05:
         1e:eb:51:f1:fa:b7:e8:47:e8:d1:2a:58:ff:ae:8a:c7:68:b7:
         ed:ae:5e:8d:92:b7:9c:9d:e5:4a:b3:93:45:49:b6:c0:08:ad:
         cb:fb:6d:e2:35:57:09:cc:a5:36:95:35:1e:46:5b:be:ad:16:
         c7:a7:ec:38:a2:ee:ec:b9:a4:cc:86:dc:a5:41:c9:c8:54:0d:
         f1:9a:6c:b6:f3:9a:1e:7d:a9:78:5d:72:23:e5:92:68:a4:cd:
         36:37:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----