Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03e1bfbd-9d2c-4e7c-af28-afa400f5f8d7.roa
File:                     03e1bfbd-9d2c-4e7c-af28-afa400f5f8d7.roa (raw, json)
Hash identifier:          GR86TzLMlojGGweQUjemkqFDjy15RQIy5dzQk4RMLAw=
Subject key identifier:   08:A6:69:B6:80:AB:5E:33:88:7A:DF:FE:D2:3C:FB:3E:B7:C9:76:DD
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       40CEAB58F612D358FBB0AD1AAE37FD8B6358A034
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03e1bfbd-9d2c-4e7c-af28-afa400f5f8d7.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:8800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ce:ab:58:f6:12:d3:58:fb:b0:ad:1a:ae:37:fd:8b:63:58:a0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=36ad333dd9c037ad3d934ed87aee62bd283caa0baabec53d0c9dea9fbffd9797, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:51:b1:ad:c8:f8:2f:db:7f:42:27:09:60:
                    9f:97:25:f5:0c:08:a8:7e:1a:f5:bf:cc:ba:de:75:
                    42:4e:75:f4:5b:53:0e:6c:d2:0f:27:25:fe:1a:a3:
                    bd:46:d2:46:b2:84:72:f8:1b:cb:c1:2a:96:18:5e:
                    86:c9:19:fc:6d:e4:13:5b:3d:f1:3f:26:00:c0:6b:
                    a4:dd:72:ba:d1:0c:31:f7:b1:c4:f8:55:58:f5:e2:
                    f9:12:94:24:f6:d7:ce:f5:87:56:05:d5:1b:63:7b:
                    a8:3f:16:11:08:79:bd:b8:05:cc:46:ff:40:08:1b:
                    34:de:bd:fb:2d:6d:6c:c5:11:5c:1c:b1:a1:8c:d0:
                    7f:df:98:6c:44:a8:cc:bd:62:43:51:83:45:12:d7:
                    03:b6:e2:04:16:0e:40:b0:90:8a:8b:f4:75:cc:b2:
                    ab:cb:dd:9f:80:6a:b6:13:97:cc:d5:37:dd:93:33:
                    29:a6:3d:7b:4f:ea:01:0e:37:3b:51:fb:98:b7:87:
                    84:31:82:05:83:b0:a1:d2:69:a4:49:ea:27:8d:b9:
                    3a:6a:e5:89:c8:d3:4f:2a:da:cc:52:09:31:3e:41:
                    78:89:4d:ab:b6:b4:46:95:81:d0:49:f6:be:10:0a:
                    98:d2:1d:58:0a:da:12:f3:1a:0f:a1:06:01:ee:7b:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A6:69:B6:80:AB:5E:33:88:7A:DF:FE:D2:3C:FB:3E:B7:C9:76:DD
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/03e1bfbd-9d2c-4e7c-af28-afa400f5f8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:aa:04:31:fc:95:ed:93:f8:b6:7a:cf:95:40:74:49:42:
         28:16:06:85:9f:8d:d7:8f:9e:47:71:cc:3a:6c:aa:08:60:76:
         14:a3:66:65:b5:be:9a:b1:77:de:64:96:60:71:4b:92:3f:a7:
         64:52:72:b1:e7:26:31:9a:d8:96:18:11:71:6b:ae:de:b9:7f:
         3c:f1:f0:f3:b3:81:c4:22:3c:fe:b6:ba:a7:c0:ab:bd:ee:8c:
         0a:20:8f:47:c0:b5:32:2c:d9:e4:c0:ba:59:30:15:ba:ec:39:
         ba:03:65:84:c8:29:7d:87:d1:4a:96:0e:25:a7:dd:c1:1e:f1:
         fc:29:29:6d:76:e9:85:98:d9:76:c6:0a:75:81:ea:f2:40:8c:
         2a:60:3e:cc:4c:1c:10:4e:03:d8:ea:0d:ee:3d:a0:fc:b9:b2:
         38:3d:c1:44:d8:83:80:f0:2f:a4:0f:95:e7:78:d2:d9:40:74:
         14:67:f7:3e:3b:62:c6:ee:1d:64:f5:c0:03:28:02:be:29:97:
         15:30:43:62:b8:36:23:e2:c5:5c:e2:dd:c0:61:03:76:39:34:
         8d:2b:9b:d4:e7:bb:75:78:1d:76:97:7a:8f:e4:ee:a7:32:e6:
         08:0e:69:08:ca:4f:69:49:f4:8f:3a:8c:c5:fc:7e:7a:ea:b1:
         6c:43:1f:72
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUQM6rWPYS01j7sK0arjf9i2NYoDQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMzZhZDMzM2RkOWMwMzdhZDNkOTM0
ZWQ4N2FlZTYyYmQyODNjYWEwYmFhYmVjNTNkMGM5ZGVhOWZiZmZkOTc5NzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KRRsa3I+C/bf0InCWCflyX1DAio
fhr1v8y63nVCTnX0W1MObNIPJyX+GqO9RtJGsoRy+BvLwSqWGF6GyRn8beQTWz3x
PyYAwGuk3XK60Qwx97HE+FVY9eL5EpQk9tfO9YdWBdUbY3uoPxYRCHm9uAXMRv9A
CBs03r37LW1sxRFcHLGhjNB/35hsRKjMvWJDUYNFEtcDtuIEFg5AsJCKi/R1zLKr
y92fgGq2E5fM1TfdkzMppj17T+oBDjc7UfuYt4eEMYIFg7Ch0mmkSeonjbk6auWJ
yNNPKtrMUgkxPkF4iU2rtrRGlYHQSfa+EAqY0h1YCtoS8xoPoQYB7nsiPQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFAimabaAq14ziHrf/tI8+z63yXbdMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzAzZTFiZmJkLTlkMmMtNGU3Yy1hZjI4LWFmYTQwMGY1ZjhkNy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba94gwDQYJKoZIhvcNAQELBQADggEBACZvqgQx/JXtk/i2es+V
QHRJQigWBoWfjdePnkdxzDpsqghgdhSjZmW1vpqxd95klmBxS5I/p2RScrHnJjGa
2JYYEXFrrt65fzzx8POzgcQiPP62uqfAq73ujAogj0fAtTIs2eTAulkwFbrsOboD
ZYTIKX2H0UqWDiWn3cEe8fwpKW126YWY2XbGCnWB6vJAjCpgPsxMHBBOA9jqDe49
oPy5sjg9wUTYg4DwL6QPled40tlAdBRn9z47YsbuHWT1wAMoAr4plxUwQ2K4NiPi
xVzi3cBhA3Y5NI0rm9Tnu3V4HXaXeo/k7qcy5ggOaQjKT2lJ9I86jMX8fnrqsWxD
H3I=
-----END CERTIFICATE-----