Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa
File:                     efdcb43b-2f19-4107-a0a3-c55daccb2714.roa (raw, json)
Hash identifier:          ouicogBTq1kKw1IU/wwTQXsl3VfbwaMwOBS241J0cVE=
Subject key identifier:   0E:ED:FC:38:07:20:0F:14:F0:C0:3C:43:98:EC:BF:54:B0:DD:81:ED
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       03EA4C15BC7A3FBC46B9BB445728FD23AE64AE54
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80a0:4000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:4c:15:bc:7a:3f:bc:46:b9:bb:44:57:28:fd:23:ae:64:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=73ace602bbc5c63c2135cd371f310c3f2348ef0ef07ff5469b2e12c7d2dbfb14, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:6c:47:0a:1e:1f:12:38:09:7c:7c:f4:f5:
                    29:22:18:90:1e:bc:ea:3e:6f:22:9a:6e:f1:da:b4:
                    7f:e5:6f:5d:8c:09:f3:54:b9:03:a2:e2:09:e4:cb:
                    bd:61:b8:34:b5:f7:0e:b4:c2:35:6d:28:d8:07:9a:
                    13:63:14:c0:c6:ba:f8:29:40:78:92:db:dc:34:00:
                    d3:bd:7c:f8:d9:ed:38:07:a8:de:78:1e:ef:bf:bc:
                    63:1d:69:76:15:95:ed:b6:aa:56:aa:70:32:70:b6:
                    09:ad:69:a8:54:92:62:45:18:a4:80:3b:1a:30:24:
                    c0:7e:39:25:7c:4f:a2:fe:13:91:56:cd:a4:96:7d:
                    b1:a7:51:ce:03:b5:7f:7e:79:ba:c2:f3:35:5c:e7:
                    dc:46:60:f0:8a:5d:fe:7f:6e:83:ee:e1:78:31:27:
                    dd:35:15:bf:b3:27:80:64:17:81:eb:04:81:a2:ec:
                    ac:04:e5:71:c5:2d:74:7c:f2:47:ca:b6:ba:32:88:
                    61:1a:b1:54:7d:fd:05:53:3d:99:89:54:69:ef:9a:
                    66:fa:c7:ce:8b:2d:e1:bc:01:70:63:3d:2f:50:48:
                    ea:88:f6:0c:67:e7:d1:da:c0:12:6e:3a:b9:a2:67:
                    57:67:78:5c:6b:fb:cc:35:fd:3a:e3:bc:cf:19:33:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:ED:FC:38:07:20:0F:14:F0:C0:3C:43:98:EC:BF:54:B0:DD:81:ED
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/efdcb43b-2f19-4107-a0a3-c55daccb2714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80a0:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:23:af:fc:9d:be:7f:2d:9d:0c:2b:7b:be:36:fe:30:0c:a0:
         25:1f:44:57:7f:47:b4:10:4a:33:38:1e:1c:1b:a2:37:47:b5:
         9d:51:8e:b4:89:5d:5e:d4:de:e0:42:8b:74:fb:61:4b:7d:d6:
         7b:27:71:c3:1b:e2:5f:d5:6c:fb:3c:a5:fc:da:1c:e9:b7:2d:
         57:59:9f:fd:f4:c5:7b:8f:07:b8:99:e4:ab:e4:10:47:f6:3c:
         e4:b9:86:09:ef:51:a9:83:bc:f4:6f:bc:68:59:24:ab:1a:30:
         f7:65:b2:67:b4:7e:b5:33:eb:20:09:29:91:3a:c6:07:19:ae:
         d7:cb:84:4a:1f:45:64:4d:c6:d2:b5:ce:41:55:bc:de:dc:81:
         b3:c5:70:7f:5f:30:8c:4c:a7:92:9d:39:5c:b6:f3:6b:f7:52:
         b2:d8:b7:ec:cf:ea:2b:2a:f2:ed:e4:e9:e1:a5:c8:87:94:1c:
         22:14:8d:a1:40:67:7d:b6:2a:9f:18:c2:13:20:23:e5:a8:40:
         c6:a7:e9:74:c5:2a:e0:41:3d:4c:e9:4c:41:47:4e:af:d9:89:
         9a:2f:52:3a:fc:c8:9d:84:9a:5d:12:ac:84:44:50:8f:d6:00:
         61:86:68:a5:9d:43:01:c8:b3:d4:78:46:a6:93:33:e8:7e:6e:
         30:ac:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----