Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/64d45338-6f0c-48d2-aacc-0b92cca1a8c5.roa
File:                     64d45338-6f0c-48d2-aacc-0b92cca1a8c5.roa (raw, json)
Hash identifier:          e5XgcoFs3gULnBwKna8c54MpBTAJpoSe7Yg20fBCuQc=
Subject key identifier:   07:E0:E5:7F:0A:0A:16:73:C1:ED:4D:31:C9:F1:E4:E6:50:70:CF:B0
Certificate issuer:       /CN=A91609040000/serialNumber=B66C17250CF07E6D99958853EE3F513E2D7B6F95
Certificate serial:       7F6ECD1E9D5B8C4B1AC0A0F4370E46EF81D0E975
Authority key identifier: B6:6C:17:25:0C:F0:7E:6D:99:95:88:53:EE:3F:51:3E:2D:7B:6F:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmwXJQzwfm2ZlYhT7j9RPi17b5U.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/64d45338-6f0c-48d2-aacc-0b92cca1a8c5.roa
Signing time:             Thu 05 May 2022 00:00:00 +0000
ROA not before:           Thu 05 May 2022 00:00:00 +0000
ROA not after:            Fri 05 Aug 2022 23:59:59 +0000
asID:                     16509
IP address blocks:        2400:6500:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6e:cd:1e:9d:5b:8c:4b:1a:c0:a0:f4:37:0e:46:ef:81:d0:e9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040000/serialNumber=B66C17250CF07E6D99958853EE3F513E2D7B6F95
        Validity
            Not Before: May  5 00:00:00 2022 GMT
            Not After : Aug  5 23:59:59 2022 GMT
        Subject: serialNumber=e6af55c619ae00df9632a248bd4465caa8eb35b04969724f4bed1e08b35e7748, CN=03aae949-20a0-4cc5-a19e-c4618f490972, OU=Amazon Test RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:6d:ac:df:50:85:81:a2:1e:52:7c:92:b3:
                    45:7e:e8:38:26:aa:f8:d7:45:67:1d:01:19:18:31:
                    25:f6:aa:3b:3d:86:be:c6:fc:e4:0b:bb:99:f6:4a:
                    78:fd:ff:79:9a:37:1b:b2:41:b9:e9:6f:91:4b:bc:
                    0c:7f:2d:dc:c3:d3:c2:21:bf:0e:58:ea:b5:cb:6f:
                    6a:05:ac:1f:bd:cc:0d:4e:87:7b:da:c7:02:e8:09:
                    94:19:30:14:61:fc:ef:8d:34:55:66:85:28:c2:5c:
                    f0:2b:9f:09:b2:7d:d5:1b:e5:80:ba:4b:cd:cb:e7:
                    c2:0f:df:be:d2:25:67:44:3b:de:00:8e:e1:ee:cc:
                    0c:01:fb:22:2a:96:18:1d:ac:91:a6:c9:84:f4:d6:
                    9a:11:ef:b9:93:1e:74:eb:3f:f4:d0:48:c0:22:61:
                    ca:dc:f1:ec:16:f3:c4:24:57:9b:c2:72:90:da:54:
                    9d:ff:b3:f3:00:86:ba:c3:cd:c1:59:d6:6e:fc:df:
                    bf:12:ea:c4:ef:ff:85:a9:62:b4:44:03:04:67:5c:
                    82:9a:e5:f0:ea:ef:a3:f4:63:af:80:e4:78:aa:2c:
                    d3:2a:70:e0:81:a8:d2:ef:bd:39:67:e2:81:2e:d3:
                    89:5c:ff:f6:ee:5e:21:85:21:b6:97:13:c4:5c:e4:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E0:E5:7F:0A:0A:16:73:C1:ED:4D:31:C9:F1:E4:E6:50:70:CF:B0
            X509v3 Authority Key Identifier:
                keyid:B6:6C:17:25:0C:F0:7E:6D:99:95:88:53:EE:3F:51:3E:2D:7B:6F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmwXJQzwfm2ZlYhT7j9RPi17b5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/64d45338-6f0c-48d2-aacc-0b92cca1a8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2410520f-a6ff-46b5-91e9-abd919dd2d6e/d46716b5-4e56-4ad5-a94f-600ab193eec1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6500:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:54:43:d6:8b:45:80:d3:29:68:79:28:60:67:6e:a6:e1:
         b8:78:e9:0e:b8:41:dc:30:40:88:84:e3:ff:0d:59:dd:01:c2:
         d2:46:d8:67:6f:d0:c5:36:63:7a:7a:e2:99:a2:93:a5:43:9f:
         1c:f0:8a:5f:0e:4a:74:f2:16:c1:5c:09:a6:a3:82:bd:1f:3f:
         39:f2:c3:24:9b:27:9c:36:db:f1:ef:9d:a7:b0:ee:6d:4f:f4:
         2f:c7:4b:d4:ef:08:90:b0:f8:03:02:48:45:c7:82:4b:6e:66:
         bb:67:6d:0e:f0:a9:b1:1b:24:93:4f:01:7d:85:9c:1c:ed:e2:
         6b:2a:21:42:ac:2a:93:06:45:5f:8f:d2:b1:70:36:ee:f7:75:
         c7:4c:11:c5:14:25:98:64:f2:28:e0:5e:dc:e6:a3:64:19:55:
         12:1a:28:d3:bd:f7:20:b1:72:9e:86:b7:c8:5b:89:49:41:c8:
         e7:18:36:64:7b:03:b1:9e:51:52:cc:c6:9a:f5:e3:57:dc:f1:
         6f:51:3e:70:6f:31:9a:16:5f:d1:99:a6:57:a2:0a:d4:b0:cb:
         95:8d:32:20:fb:c2:3c:c9:85:69:ad:8d:25:ee:28:e5:65:e4:
         65:24:29:9d:05:95:03:b1:d8:54:68:3c:e9:86:a2:d6:1b:7c:
         db:17:44:10
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgIUf27NHp1bjEsawKD0Nw5G74HQ6XUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAwMTEwLwYDVQQFEyhCNjZDMTcyNTBD
RjA3RTZEOTk5NTg4NTNFRTNGNTEzRTJEN0I2Rjk1MB4XDTIyMDUwNTAwMDAwMFoX
DTIyMDgwNTIzNTk1OVowgaoxSTBHBgNVBAUTQGU2YWY1NWM2MTlhZTAwZGY5NjMy
YTI0OGJkNDQ2NWNhYThlYjM1YjA0OTY5NzI0ZjRiZWQxZTA4YjM1ZTc3NDgxLTAr
BgNVBAMTJDAzYWFlOTQ5LTIwYTAtNGNjNS1hMTllLWM0NjE4ZjQ5MDk3MjEZMBcG
A1UECxMQQW1hem9uIFRlc3QgUlBLSTETMBEGA1UEChMKQW1hem9uLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtfbazfUIWBoh5SfJKzRX7oOCaq
+NdFZx0BGRgxJfaqOz2Gvsb85Au7mfZKeP3/eZo3G7JBuelvkUu8DH8t3MPTwiG/
DljqtctvagWsH73MDU6He9rHAugJlBkwFGH87400VWaFKMJc8CufCbJ91RvlgLpL
zcvnwg/fvtIlZ0Q73gCO4e7MDAH7IiqWGB2skabJhPTWmhHvuZMedOs/9NBIwCJh
ytzx7BbzxCRXm8JykNpUnf+z8wCGusPNwVnWbvzfvxLqxO//halitEQDBGdcgprl
8Orvo/Rjr4DkeKos0ypw4IGo0u+9OWfigS7TiVz/9u5eIYUhtpcTxFzktLUCAwEA
AaOCAkswggJHMB0GA1UdDgQWBBQH4OV/CgoWc8HtTTHJ8eTmUHDPsDAfBgNVHSME
GDAWgBS2bBclDPB+bZmViFPuP1E+LXtvlTAOBgNVHQ8BAf8EBAMCB4AwfgYIKwYB
BQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3Jl
cG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdG13WEpR
endmbTJabFloVDdqOVJQaTE3YjVVLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsG
CCsGAQUFBzALhn9yc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3
cy5jb20vdm9sdW1lLzI0MTA1MjBmLWE2ZmYtNDZiNS05MWU5LWFiZDkxOWRkMmQ2
ZS82NGQ0NTMzOC02ZjBjLTQ4ZDItYWFjYy0wYjkyY2NhMWE4YzUucm9hMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjQxMDUyMGYtYTZmZi00NmI1LTkxZTktYWJk
OTE5ZGQyZDZlL2Q0NjcxNmI1LTRlNTYtNGFkNS1hOTRmLTYwMGFiMTkzZWVjMS5j
cmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACQAZQBAADANBgkqhkiG9w0BAQsFAAOCAQEAdR5UQ9aLRYDTKWh5
KGBnbqbhuHjpDrhB3DBAiITj/w1Z3QHC0kbYZ2/QxTZjenrimaKTpUOfHPCKXw5K
dPIWwVwJpqOCvR8/OfLDJJsnnDbb8e+dp7DubU/0L8dL1O8IkLD4AwJIRceCS25m
u2dtDvCpsRskk08BfYWcHO3iayohQqwqkwZFX4/SsXA27vd1x0wRxRQlmGTyKOBe
3OajZBlVEhoo0733ILFynoa3yFuJSUHI5xg2ZHsDsZ5RUszGmvXjV9zxb1E+cG8x
mhZf0ZmmV6IK1LDLlY0yIPvCPMmFaa2NJe4o5WXkZSQpnQWVA7HYVGg86Yai1ht8
2xdEEA==
-----END CERTIFICATE-----