Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c7b491e4-76ae-4305-8132-a670b41c66fd.roa
File:                     c7b491e4-76ae-4305-8132-a670b41c66fd.roa (raw, json)
Hash identifier:          2BNRkeyUX7ukeB6T51AvopWa0lGfdJ6/v0nzYfz4KxY=
Subject key identifier:   3D:13:F5:7B:74:0D:9C:B5:3D:09:85:85:7A:20:AB:AC:CE:B7:75:5B
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       346FAEBE20387A9FC62254DD0D48F1781B3A62C5
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c7b491e4-76ae-4305-8132-a670b41c66fd.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80ff:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6f:ae:be:20:38:7a:9f:c6:22:54:dd:0d:48:f1:78:1b:3a:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=fc3382239bf83ab9026390c58838c90d50cb95d627047990cfca5e33f5042775, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7d:db:6c:c7:de:87:98:7e:29:a1:40:7b:1f:
                    fa:4f:25:b9:9e:68:72:5e:4a:de:b0:dc:c9:c4:ae:
                    52:3f:eb:dc:6a:3f:84:e1:e7:43:f6:80:55:4d:dc:
                    e3:7a:a3:fb:d4:ad:25:ea:2a:d6:db:ae:c0:84:3e:
                    86:2c:63:20:40:e4:ae:9a:1b:b3:40:42:ee:40:81:
                    33:44:01:7b:a5:7f:2e:59:6a:ac:e6:89:78:b3:da:
                    fd:94:ea:3a:3f:cc:bf:ac:68:64:91:c2:36:5f:6b:
                    d9:15:e4:ba:30:e2:59:86:69:5a:58:51:16:42:3b:
                    45:4f:bd:20:de:3b:bc:97:f7:c3:f0:9b:77:f4:71:
                    08:86:12:ac:a3:e9:5c:ff:6c:66:b9:8c:60:c6:55:
                    83:a7:53:72:4d:ca:b7:0b:cc:de:e1:9f:00:94:b9:
                    12:1c:af:7e:34:5a:fc:df:04:de:86:f9:1e:60:ee:
                    06:10:0c:f4:75:15:d8:2a:70:52:10:0c:cc:cc:74:
                    dc:d4:51:23:fa:54:59:f2:34:91:0e:36:94:e7:6e:
                    4f:69:a3:11:27:d5:a2:de:68:ac:9f:33:da:32:7a:
                    13:6b:be:7d:59:33:0e:e0:2a:bc:9e:82:15:7c:c8:
                    47:94:f6:2c:1d:85:21:33:b7:fa:56:e4:e3:42:ef:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:F5:7B:74:0D:9C:B5:3D:09:85:85:7A:20:AB:AC:CE:B7:75:5B
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c7b491e4-76ae-4305-8132-a670b41c66fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80ff:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:ea:41:2a:1f:56:0d:53:f0:41:bb:68:33:ba:ba:2a:8f:
         63:20:10:59:b4:ba:e8:9a:8c:2d:bb:65:7b:db:c9:47:c9:af:
         ff:44:48:a5:13:65:15:90:65:d2:27:32:06:9c:c6:01:4f:7b:
         3c:86:fd:12:9b:0c:29:93:8d:25:de:8f:97:b1:ed:f2:b0:e7:
         78:2c:1e:b8:64:10:a8:0c:e0:51:6d:03:45:b4:8e:a5:03:17:
         db:fc:2b:e2:f3:96:64:d0:64:dc:46:53:8c:0e:a8:f9:12:c5:
         bd:94:49:b9:4a:82:6c:4e:40:6d:3d:60:98:d6:d6:99:cf:b9:
         96:2b:3d:7b:01:e4:2d:0a:00:ad:7d:41:e2:8b:9a:12:1c:1c:
         a5:ca:de:90:13:3d:01:96:93:40:d2:1b:14:da:62:45:9b:e0:
         18:8a:87:3a:65:ce:81:18:2f:0a:b0:7c:57:a9:97:4a:aa:1d:
         12:1e:d2:f5:12:f2:5d:e7:94:0b:f0:54:61:eb:3c:d7:84:e0:
         b6:3d:70:6c:43:e9:79:3d:fa:a0:9c:3d:59:52:62:27:28:e5:
         19:46:f4:74:0e:54:d5:e8:78:6b:6b:f6:b7:f4:74:8b:44:b1:
         16:ec:02:6d:c2:80:02:d0:db:ef:b2:0c:74:da:79:0b:84:40:
         ca:5a:5b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----