This is currently used to sign ROA. A rogue actor can easily work around that by including the original AS in the AS path of the announce.

Nope, that does not cover certificate issuance for IP addresses in that range.