Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa
File:                     baa1273d-7883-4b5d-8e1c-23ebac490846.roa (raw, json)
Hash identifier:          2Ci++lLbX+W8aa8K+UQDb7X9Q/6T9i3hJj0FmgD0k9M=
Subject key identifier:   72:2E:3A:AD:07:45:BC:C1:93:3E:5E:D1:E7:0A:9B:5C:F5:56:87:30
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       1078D2B8C8A16313379B08782434EAEC9D985E22
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80ff:4040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:78:d2:b8:c8:a1:63:13:37:9b:08:78:24:34:ea:ec:9d:98:5e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=f37e30186ba9c67327b4bbd6568d14efb6cdf25ccca3a274e0fab761a98f56eb, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:1b:88:a6:e1:95:2c:23:d7:88:fa:8c:0d:
                    31:10:9f:36:ba:0b:6d:3f:ed:5b:27:15:c8:ca:44:
                    43:4b:4d:5e:2b:d4:2b:50:f7:c7:d0:6a:9d:11:b9:
                    44:6e:53:64:f6:dd:3d:da:0a:d6:27:cb:0f:56:ad:
                    06:17:d4:ae:22:8e:52:dc:15:e3:d5:03:f3:18:cc:
                    76:31:b3:64:a1:be:f3:ef:83:7e:cf:2c:ab:c7:e1:
                    87:c3:de:df:73:23:5c:b0:e5:18:93:80:43:1c:2a:
                    66:c1:13:47:5e:3f:3a:ff:26:e2:97:a2:e7:7c:cc:
                    dc:86:b3:89:16:5e:12:b6:53:58:c7:b2:34:58:f8:
                    9c:cf:20:63:c8:46:86:e8:42:b1:ee:bb:33:18:b4:
                    41:28:73:d8:1f:ca:59:d0:e0:1c:dc:b7:5e:7a:75:
                    8e:97:3d:6c:9b:58:bf:f7:5c:30:8a:32:6e:e0:67:
                    c4:f6:df:4f:54:3e:05:dd:15:0f:57:d5:9e:2c:9d:
                    e0:1f:f2:85:20:37:37:0a:22:d8:0a:52:7c:15:66:
                    35:32:56:32:41:67:79:9c:9f:a1:ce:4b:db:a1:d3:
                    41:e3:7c:b7:69:12:84:f4:3e:0e:08:d5:7a:34:a7:
                    b9:b6:73:8e:74:84:bf:9b:ae:93:cf:bc:45:50:c5:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2E:3A:AD:07:45:BC:C1:93:3E:5E:D1:E7:0A:9B:5C:F5:56:87:30
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/baa1273d-7883-4b5d-8e1c-23ebac490846.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80ff:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:cb:5a:fc:76:ce:aa:0b:cd:f7:75:03:94:46:66:3d:c0:
         5b:c0:a7:00:e0:fc:eb:e6:62:16:64:64:15:67:99:3f:01:cf:
         d2:b6:d8:2e:ca:44:92:6c:17:3e:8c:f7:ee:da:f0:eb:78:7c:
         dd:f0:8f:4d:5e:51:02:b1:54:33:8b:40:aa:af:3b:95:22:52:
         ae:80:db:a5:be:a6:6d:08:de:5d:0f:9e:e7:86:65:fb:70:64:
         f4:00:23:7d:7f:77:b4:66:a5:3d:c3:18:c6:9b:1b:70:7d:5c:
         44:bc:1a:48:53:92:74:73:15:bb:e3:41:15:89:11:02:14:53:
         4d:26:b6:14:c8:1c:d4:f3:1d:89:24:25:d3:d9:9e:9c:26:a0:
         c9:b6:d9:fc:fa:9d:13:c0:e5:57:ba:54:04:2f:79:22:90:8c:
         1a:09:16:89:a6:1e:30:f1:47:bd:59:d1:c4:0e:ea:fd:ee:37:
         a4:74:b0:de:9b:17:0e:10:4f:ac:4b:5d:f2:00:9a:dd:16:1c:
         c2:18:e7:a4:08:c5:70:90:5f:62:82:a7:31:23:d0:82:75:98:
         ee:f5:08:95:b6:03:4e:55:4d:85:03:a4:ad:c6:c0:73:76:66:
         82:d5:b2:2c:11:21:b0:13:e8:27:eb:c3:32:49:b1:4e:e2:04:
         58:5b:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----