Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa
File:                     fcc4293c-b24f-4fac-9395-546f748b3b13.roa (raw, json)
Hash identifier:          ZTB6DOm0N1RLLcIUMQOzlP040LIgW6CI7jYSRUaR3pc=
Subject key identifier:   1B:00:18:0F:40:2B:9C:51:20:90:35:C7:21:FB:C0:44:48:50:49:8D
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       0560498E3D8BDEC6FD643C5121DD45C18A3C045A
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:8018::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:60:49:8e:3d:8b:de:c6:fd:64:3c:51:21:dd:45:c1:8a:3c:04:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=0b16dd39828fbc1cae1cbb146b0ebcb07507674a563edd59c58e96b5f00baeaf, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:1f:0e:e5:ba:78:28:53:4c:25:4b:10:ad:
                    7f:7f:9f:69:15:a5:1b:97:59:05:96:52:4d:be:19:
                    14:78:59:34:98:88:06:ad:57:8a:fc:6b:d1:42:30:
                    53:8d:ca:99:f2:57:fe:a3:7c:19:c1:2f:2c:8d:bf:
                    73:57:a5:a2:91:b7:55:ac:31:2b:98:22:73:f8:2b:
                    3a:02:85:f8:e4:5a:b9:ea:bb:99:5a:29:d8:88:16:
                    eb:12:35:98:2a:e3:21:fb:f8:66:ab:2e:cb:03:4d:
                    a4:7a:c0:7a:84:86:a3:86:d3:4a:2f:ea:d3:ad:3c:
                    d2:84:82:da:cf:2f:07:c7:23:a4:b0:38:35:23:af:
                    02:46:fd:f9:f1:a7:a9:d7:5d:97:7a:59:74:67:f0:
                    1a:c4:2c:e1:0b:d1:c9:40:01:f9:20:2d:07:56:d0:
                    d0:38:1c:24:f5:7b:2f:fc:85:0c:e3:35:33:aa:77:
                    6e:3a:e0:c1:1d:ba:28:84:61:a9:01:c7:fa:2b:6d:
                    83:9f:06:da:6a:11:18:06:6c:b3:32:48:0f:b5:c2:
                    d5:15:c6:c9:29:5e:48:c1:23:47:e6:83:21:f3:e7:
                    fb:03:42:75:99:80:a3:21:56:5b:21:d1:8e:b1:96:
                    8f:74:13:68:86:10:86:da:9c:14:bd:e8:7b:ae:84:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:00:18:0F:40:2B:9C:51:20:90:35:C7:21:FB:C0:44:48:50:49:8D
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/fcc4293c-b24f-4fac-9395-546f748b3b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:8018::/38

    Signature Algorithm: sha256WithRSAEncryption
         24:f5:14:4a:c0:dc:4f:6d:7d:5a:56:3b:c0:01:01:4d:04:ee:
         4c:05:3a:48:11:96:bb:bd:ee:7d:6c:2c:e8:2e:de:f3:9c:bc:
         2f:8a:4a:4a:a3:bd:8b:3b:65:82:a2:10:ee:68:ed:cb:5c:bc:
         74:49:97:5c:6c:5b:b8:5d:6d:bf:9e:8f:0e:2d:dd:92:8d:ef:
         49:37:a7:35:e7:87:6f:54:61:92:a7:71:4e:ab:b8:c4:f7:9e:
         d1:a0:c0:35:36:a7:39:e1:c8:7e:59:b7:0f:d6:8a:58:35:a0:
         55:92:ac:1a:83:8a:de:b8:05:57:2b:ee:01:47:4e:9f:1e:60:
         0a:75:d6:45:e1:70:da:e5:b5:3d:3e:73:a3:d1:e6:df:7f:d0:
         86:02:9f:23:c9:d4:4d:49:96:71:eb:e1:a7:ff:22:7e:b3:e4:
         06:3e:eb:e2:39:8d:f9:7b:0a:16:a8:e5:e9:f2:f1:01:76:22:
         83:4c:41:fa:0d:07:88:50:90:47:16:d6:db:94:1a:1e:e1:d5:
         e4:14:68:a1:7b:e8:a6:5d:69:a8:e0:02:3c:ec:c6:0e:fd:0f:
         7d:b7:39:b7:6b:22:7d:be:b9:df:ba:9d:6b:1f:5b:9f:30:fb:
         9a:4f:38:fb:e5:3e:6a:91:15:3a:17:38:88:0a:9d:6e:aa:63:
         ab:de:fe:32
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUBWBJjj2L3sb9ZDxRId1FwYo8BFowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz
NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI1MDExNDAwMDAwMFoX
DTI1MDIxODIzNTk1OVowejFJMEcGA1UEBRNAMGIxNmRkMzk4MjhmYmMxY2FlMWNi
YjE0NmIwZWJjYjA3NTA3Njc0YTU2M2VkZDU5YzU4ZTk2YjVmMDBiYWVhZjEtMCsG
A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm74fDuW6eChTTCVLEK1/f59pFaUb
l1kFllJNvhkUeFk0mIgGrVeK/GvRQjBTjcqZ8lf+o3wZwS8sjb9zV6WikbdVrDEr
mCJz+Cs6AoX45Fq56ruZWinYiBbrEjWYKuMh+/hmqy7LA02kesB6hIajhtNKL+rT
rTzShILazy8HxyOksDg1I68CRv358aep112Xell0Z/AaxCzhC9HJQAH5IC0HVtDQ
OBwk9Xsv/IUM4zUzqnduOuDBHboohGGpAcf6K22DnwbaahEYBmyzMkgPtcLVFcbJ
KV5IwSNH5oMh8+f7A0J1mYCjIVZbIdGOsZaPdBNohhCG2pwUveh7roQq7wIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFBsAGA9AK5xRIJA1xyH7wERIUEmNMB8GA1UdIwQY
MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO
MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2
L2ZjYzQyOTNjLWIyNGYtNGZhYy05Mzk1LTU0NmY3NDhiM2IxMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi
Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJA+AGAAwDQYJKoZIhvcNAQELBQADggEBACT1FErA3E9tfVpWO8AB
AU0E7kwFOkgRlru97n1sLOgu3vOcvC+KSkqjvYs7ZYKiEO5o7ctcvHRJl1xsW7hd
bb+ejw4t3ZKN70k3pzXnh29UYZKncU6ruMT3ntGgwDU2pznhyH5Ztw/Wilg1oFWS
rBqDit64BVcr7gFHTp8eYAp11kXhcNrltT0+c6PR5t9/0IYCnyPJ1E1JlnHr4af/
In6z5AY+6+I5jfl7Chao5eny8QF2IoNMQfoNB4hQkEcW1tuUGh7h1eQUaKF76KZd
aajgAjzsxg79D323ObdrIn2+ud+6nWsfW58w+5pPOPvlPmqRFToXOIgKnW6qY6ve
/jI=
-----END CERTIFICATE-----