Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa
File:                     a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa (raw, json)
Hash identifier:          wLelE6asPO+8CQQ04TGrgbclWkDui2Dwa0ErEcZPwfg=
Subject key identifier:   6C:6B:B6:44:D5:84:C8:51:B4:1A:C6:5D:6F:A8:D1:23:42:22:67:A8
Certificate issuer:       /CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
Certificate serial:       6CDCAA54963C75AC8C413F58BD23B225CE4E98A4
Authority key identifier: 4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa
Signing time:             Tue 11 Mar 2025 15:07:39 +0000
ROA not before:           Tue 11 Mar 2025 15:07:39 +0000
ROA not after:            Tue 15 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2001:3fc1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dc:aa:54:96:3c:75:ac:8c:41:3f:58:bd:23:b2:25:ce:4e:98:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e9f45fd65cea47fce533f11cfc15c475554dfbc
        Validity
            Not Before: Mar 11 15:07:39 2025 GMT
            Not After : Apr 15 23:59:59 2025 GMT
        Subject: CN=f6903138-420a-4c84-bf3d-9aea81f23eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:34:0f:53:8d:cd:01:b1:bf:57:2e:fe:06:
                    41:ae:a1:19:a1:db:4d:b4:7f:0c:00:6c:3d:da:fe:
                    93:70:2d:6b:7f:3a:f7:7b:ec:18:8d:29:b3:da:b8:
                    25:67:aa:0c:3c:27:cc:be:97:48:d3:de:5b:fc:08:
                    56:18:ba:f6:f6:4a:20:cc:32:ed:c4:62:bd:1e:36:
                    02:32:37:d7:a6:04:b3:0c:39:ff:ce:d8:b4:37:8b:
                    3c:e5:5e:76:d0:ae:73:65:77:45:61:52:7c:1f:91:
                    79:e8:d5:1d:55:7e:26:87:3a:64:1a:fe:5c:e2:3e:
                    55:d7:23:07:c6:99:c1:1c:4d:8a:98:61:33:66:eb:
                    5a:d6:26:39:0b:bc:39:98:79:2a:d1:e6:dc:68:1a:
                    e1:fd:59:54:35:d3:39:cd:b4:44:25:96:2a:7d:88:
                    11:d4:d3:df:7b:8e:23:9c:75:c1:ee:ec:03:77:3d:
                    16:a2:b1:97:0b:15:76:0f:24:db:4f:ac:3f:e6:a5:
                    81:43:95:9b:ac:ae:50:7f:77:b4:6c:a4:bc:d7:aa:
                    f4:e4:dd:0b:ea:b2:a0:cd:6e:6d:3c:49:f0:3c:9b:
                    d9:d8:43:f3:5e:c5:62:cd:35:36:31:ec:6d:96:5c:
                    c1:b3:db:5a:00:f9:a4:41:01:e0:b1:9c:8f:3d:cb:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6B:B6:44:D5:84:C8:51:B4:1A:C6:5D:6F:A8:D1:23:42:22:67:A8
            X509v3 Authority Key Identifier:
                keyid:4E:9F:45:FD:65:CE:A4:7F:CE:53:3F:11:CF:C1:5C:47:55:54:DF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tp9F_WXOpH_OUz8Rz8FcR1VU37w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/a972fe9b-c39f-48d1-8b19-c14cbaf16237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/cfadba4d-134c-4a1e-9d9c-64e8c5d613f3/Ov-his08I996RofT9UA-owflnzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:bd:12:a5:42:fa:0f:9d:18:ef:2b:c9:13:3e:30:23:1c:c5:
         99:ad:36:3b:6a:72:c0:64:1f:47:c5:e8:2c:1a:77:b8:93:dd:
         cd:bd:09:14:fb:12:f4:ff:73:31:57:e3:23:dc:fb:6e:63:a6:
         b5:01:2d:93:9d:00:51:01:a8:77:a2:8e:ed:ba:69:5b:a8:70:
         38:69:1e:52:44:e7:ea:be:fe:e1:9f:6a:2a:ff:c4:0e:29:39:
         0f:5f:15:aa:35:4b:12:64:f3:ab:54:6f:2e:a6:bd:f6:92:9a:
         d1:78:67:3d:b8:b1:89:97:62:57:e6:a4:5c:54:14:57:60:4e:
         70:b9:a2:5e:1e:f6:59:5a:20:cd:4b:b0:c3:da:9e:63:f3:be:
         44:88:f2:4c:25:11:92:bc:87:18:8e:5a:d1:d5:5c:d1:67:12:
         8f:82:2a:30:74:f4:f2:5c:4f:40:a4:c9:3c:13:98:f2:37:79:
         9b:98:51:e2:a5:65:24:7b:5e:92:f1:74:90:b8:3a:71:0f:d7:
         d6:f8:01:f8:96:4b:de:f8:96:3e:b8:95:61:9e:0c:04:d1:f0:
         d4:83:f9:e4:c1:48:2d:6b:ab:a7:81:93:1d:20:c2:9f:ff:eb:
         70:4e:d8:87:5a:8e:2d:08:e2:94:b3:be:53:70:4e:fa:c8:66:
         ba:af:48:e7
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgIUbNyqVJY8dayMQT9YvSOyJc5OmKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGU5ZjQ1ZmQ2NWNlYTQ3ZmNlNTMzZjExY2ZjMTVjNDc1
NTU0ZGZiYzAeFw0yNTAzMTExNTA3MzlaFw0yNTA0MTUyMzU5NTlaMHoxSTBHBgNV
BAUTQDdmN2M1ZWE4ZTFmMmE5NmRhMDkzMmRkODk0NzQ5OWMwOWQ1OWFkMTAzNDM0
NjVmMTY3ZDdiMjhjODMxZTQ4ZDExLTArBgNVBAMTJGY2OTAzMTM4LTQyMGEtNGM4
NC1iZjNkLTlhZWE4MWYyM2ViNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMFKNA9Tjc0Bsb9XLv4GQa6hGaHbTbR/DABsPdr+k3Ata38693vsGI0ps9q4
JWeqDDwnzL6XSNPeW/wIVhi69vZKIMwy7cRivR42AjI316YEsww5/87YtDeLPOVe
dtCuc2V3RWFSfB+ReejVHVV+Joc6ZBr+XOI+VdcjB8aZwRxNiphhM2brWtYmOQu8
OZh5KtHm3Gga4f1ZVDXTOc20RCWWKn2IEdTT33uOI5x1we7sA3c9FqKxlwsVdg8k
20+sP+algUOVm6yuUH93tGykvNeq9OTdC+qyoM1ubTxJ8Dyb2dhD817FYs01NjHs
bZZcwbPbWgD5pEEB4LGcjz3L8l8CAwEAAaOCAiIwggIeMB0GA1UdDgQWBBRsa7ZE
1YTIUbQaxl1vqNEjQiJnqDAfBgNVHSMEGDAWgBROn0X9Zc6kf85TPxHPwVxHVVTf
vDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RwOUZfV1hP
cEhfT1V6OFJ6OEZjUjFWVTM3dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS9jZmFkYmE0ZC0xMzRjLTRhMWUtOWQ5Yy02NGU4YzVkNjEzZjMv
YTk3MmZlOWItYzM5Zi00OGQxLThiMTktYzE0Y2JhZjE2MjM3LnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvY2ZhZGJhNGQtMTM0Yy00YTFlLTlkOWMtNjRlOGM1ZDYx
M2YzL092LWhpczA4STk5NlJvZlQ5VUEtb3dmbG56WS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACABP8Ew
DQYJKoZIhvcNAQELBQADggEBAJ+9EqVC+g+dGO8ryRM+MCMcxZmtNjtqcsBkH0fF
6Cwad7iT3c29CRT7EvT/czFX4yPc+25jprUBLZOdAFEBqHeiju26aVuocDhpHlJE
5+q+/uGfair/xA4pOQ9fFao1SxJk86tUby6mvfaSmtF4Zz24sYmXYlfmpFxUFFdg
TnC5ol4e9llaIM1LsMPanmPzvkSI8kwlEZK8hxiOWtHVXNFnEo+CKjB09PJcT0Ck
yTwTmPI3eZuYUeKlZSR7XpLxdJC4OnEP19b4AfiWS974lj64lWGeDATR8NSD+eTB
SC1rq6eBkx0gwp//63BO2Idaji0I4pSzvlNwTvrIZrqvSOc=
-----END CERTIFICATE-----