Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa
File:                     cc671c79-21f0-4fff-b898-595966ecd1a9.roa (raw, json)
Hash identifier:          lJlYrvrW8SAv5x8UF7uzs9c96a3CNDP+8YPdVsCmvUY=
Subject key identifier:   CB:6B:69:7E:F5:F8:00:B5:15:C5:F4:59:F9:72:B3:17:EF:A4:A2:1E
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       293984AFAEA92638A2AADDE1352ADA3DC7D937F5
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2400:6700:ff00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:39:84:af:ae:a9:26:38:a2:aa:dd:e1:35:2a:da:3d:c7:d9:37:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=8da45b39ea5c45b756f2c5af4a51dee86c52a32dab754fd25648f5726fbb9f44, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:3b:18:38:db:d4:2d:b8:87:05:e3:40:a3:
                    82:6d:78:f3:cb:95:a6:78:c4:53:83:c7:9b:b8:49:
                    71:bc:ea:ea:e8:6e:0c:65:1d:c3:9b:c4:4c:9c:61:
                    1c:50:80:f2:b8:f8:ef:66:9a:c7:f4:34:c9:bc:29:
                    15:96:78:bc:a0:8d:fe:9e:8c:2d:77:af:7d:c1:8a:
                    c3:0b:ba:fd:da:55:fa:0d:a3:a3:de:fc:41:9a:31:
                    4d:1b:b7:af:63:78:f6:d5:f6:cc:30:f3:b9:8c:b6:
                    f7:45:53:fa:fb:45:24:b7:f2:0f:83:43:d2:ab:c9:
                    a0:60:cf:6b:49:a8:39:7c:c7:5d:6a:53:f8:d5:f8:
                    b8:90:2c:eb:91:4d:b4:a3:77:21:09:f3:0b:b0:21:
                    71:13:af:c0:6f:c8:0b:f4:5c:03:3f:db:c0:59:33:
                    10:1e:a9:36:27:2a:96:9d:28:49:e9:58:51:38:33:
                    74:77:ea:6a:63:a1:e1:d2:48:a5:7c:ab:8f:d4:81:
                    5e:da:2f:5b:bb:f9:fc:5a:b6:f0:01:a6:df:da:c9:
                    18:18:4b:87:13:0e:13:9b:36:07:71:0c:01:7a:39:
                    20:26:89:e5:f3:e8:7f:a8:12:79:d2:0f:fb:2c:b1:
                    00:48:8c:11:e4:95:8b:6a:26:ac:e1:e1:91:95:01:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6B:69:7E:F5:F8:00:B5:15:C5:F4:59:F9:72:B3:17:EF:A4:A2:1E
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/cc671c79-21f0-4fff-b898-595966ecd1a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6700:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:79:e3:f2:ef:ec:6f:e8:5e:6a:e4:30:50:3e:d4:a3:47:d3:
         a6:c7:a3:62:f9:f4:12:f2:81:b1:40:0e:a1:7d:71:ec:d1:06:
         3c:9f:eb:0b:f9:09:c6:8b:17:4a:e0:00:53:1c:17:25:b6:40:
         57:06:17:cf:d2:a4:1a:19:b4:ab:78:74:82:e8:4d:eb:a3:50:
         91:41:53:99:c5:5f:93:f7:0c:3c:16:88:03:a0:34:df:8a:4d:
         e7:3c:3d:3e:f4:be:58:ad:09:51:fa:af:06:99:5b:06:8d:3d:
         cc:c8:5d:d4:bf:8d:da:3c:b0:22:c9:96:94:77:36:aa:3b:5c:
         5f:d7:11:76:a3:0a:82:14:3b:ee:ea:c6:38:02:fe:82:98:c5:
         e5:e4:de:cf:4f:ee:9e:b0:ee:b2:33:19:da:9d:08:4d:4d:ca:
         2d:6f:a2:6d:35:22:16:83:ed:68:98:66:51:aa:b4:c5:eb:4b:
         79:c1:4d:2d:dc:67:e4:92:ad:75:30:02:82:64:fb:c1:b0:84:
         a2:c7:70:5a:28:9f:f6:4f:95:5c:8f:83:12:04:60:88:ab:8c:
         d8:fa:47:bd:e3:02:19:17:62:bf:78:63:3e:88:ad:41:f9:99:
         33:50:bf:e6:4e:be:e8:d7:92:f2:f4:96:cb:d2:4b:03:81:ef:
         ae:95:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----