Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa
File:                     a3080b31-8684-4ce8-b4e6-33db63d13627.roa (raw, json)
Hash identifier:          yrdon5ivbTgMAGKO1ivZRXRnALRHL1dAkseuPy47hg0=
Subject key identifier:   69:2C:D4:29:68:EC:A0:22:4F:F9:5E:DB:60:C4:5D:3E:86:7A:F4:03
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       2412459ABC49D7BA32348C82CBFB18B421C51A4C
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8060::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:45:9a:bc:49:d7:ba:32:34:8c:82:cb:fb:18:b4:21:c5:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=e137b61f19b926559e9ffa4a3f49714fd2d752ee09b457b189841ba6b270102f, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:11:42:ae:4e:e4:cb:84:68:f0:06:80:87:
                    ad:4f:50:2d:7b:3e:9f:be:fd:72:b0:e7:50:89:1f:
                    94:a2:ea:d9:c5:0c:f4:15:47:f4:1c:5a:2a:f6:07:
                    27:17:70:53:3c:16:cf:06:7a:07:24:8e:9d:0e:d1:
                    93:95:7f:50:19:51:fe:6d:2d:2e:d7:33:68:a2:98:
                    1d:b8:37:19:c2:ff:ee:40:72:c5:18:4c:3e:ea:6a:
                    c2:33:4a:b5:dc:e6:e9:a4:e5:9f:43:5f:8f:5e:9c:
                    09:99:6f:6e:d4:0a:4e:09:a4:30:dc:d4:c6:0b:36:
                    57:3d:15:9e:5f:b8:cb:67:fe:ee:12:ab:bb:57:22:
                    e0:03:b4:85:cf:6c:ff:11:ff:66:7a:a0:75:60:53:
                    79:06:ae:4e:8f:d2:cb:5b:94:76:90:0f:93:a6:88:
                    03:c3:c5:87:b3:ca:64:f8:d4:a0:da:ca:9b:eb:e4:
                    ee:0c:b0:d4:0b:92:d3:f4:bb:9e:ce:c4:d2:32:8f:
                    d0:0a:f2:8e:61:9f:56:06:61:3c:5e:6e:8c:19:5a:
                    43:0a:14:81:66:01:0c:93:92:2d:fd:2b:4e:51:99:
                    0a:e0:6b:81:8e:da:9f:12:40:e9:f8:1b:13:16:d8:
                    cf:cb:00:af:47:28:02:f6:49:42:c5:d8:24:44:dd:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:D4:29:68:EC:A0:22:4F:F9:5E:DB:60:C4:5D:3E:86:7A:F4:03
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/a3080b31-8684-4ce8-b4e6-33db63d13627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8060::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:49:a5:ff:62:27:35:f0:e1:af:4c:bc:f9:37:45:96:73:c8:
         da:8f:88:2c:f2:b5:91:1e:bc:e6:ee:ec:a2:00:ed:f1:a8:2f:
         16:b9:97:ba:cf:04:2a:d5:83:d3:44:2c:03:70:19:0e:54:fd:
         65:05:41:46:14:44:b3:c3:d8:1a:91:93:c1:49:8e:eb:74:33:
         c3:1b:ee:6d:ba:85:db:6e:34:ef:97:53:e5:a2:68:f8:ba:7e:
         be:37:c8:32:26:57:8f:a2:94:fd:0e:19:1e:1b:0a:5a:f6:c9:
         88:44:9f:76:a5:e4:76:8a:d0:f7:53:da:75:41:e8:b8:b4:c0:
         09:82:ec:c5:7f:19:a6:eb:89:ad:83:69:2c:9d:ab:30:81:7b:
         2d:5f:4f:18:dc:86:93:47:a9:3a:00:66:2d:98:c1:c1:87:f9:
         fe:2e:bd:4b:95:f2:7f:d4:d0:b2:25:ea:51:e4:c0:99:db:43:
         e5:c2:cd:3b:7b:28:9d:bd:09:54:69:4c:88:dd:03:f1:54:c0:
         79:ff:15:b6:fd:7f:3e:5b:d3:5a:5d:16:9b:2a:d4:ce:a5:a0:
         33:fd:51:94:af:3d:29:8b:6d:02:05:1f:3e:8f:aa:44:6c:d5:
         0a:d1:d5:25:71:4d:d9:c9:52:b0:ed:f5:78:e8:b9:8a:0e:d0:
         70:0f:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----