Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/093bf138-d5d2-4fc5-9bb3-dc334c5fd7fb.roa
File:                     093bf138-d5d2-4fc5-9bb3-dc334c5fd7fb.roa (raw, json)
Hash identifier:          cUIviZ3tZq3ujp5RBGvr7W21Zvd0XyXoH71cgPJnGek=
Subject key identifier:   89:3C:C3:91:70:C6:2D:8E:30:1B:5C:FD:E1:E7:C9:8B:F8:67:1E:7A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6440127DE44EA66901601DB21025BD26C84DA043
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/093bf138-d5d2-4fc5-9bb3-dc334c5fd7fb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:40:12:7d:e4:4e:a6:69:01:60:1d:b2:10:25:bd:26:c8:4d:a0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a808d4b8b45f5668d1ff5690ab78eda6adcd49998b9f321b9166f9763bd84da2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:c0:dd:d9:8c:df:34:01:15:7f:65:94:8e:
                    31:0d:56:63:2f:76:e6:7f:20:73:16:dd:71:2e:be:
                    f6:43:b4:5b:f5:cf:91:bc:40:d2:1c:63:6a:f7:cf:
                    d3:38:d8:c1:69:aa:4e:e9:dd:58:cc:f9:0d:1e:de:
                    ad:43:58:e7:b1:99:13:92:b6:a9:43:76:e7:fe:35:
                    5e:2f:41:5e:fc:7e:37:bf:86:68:2e:c5:12:c2:49:
                    d8:f0:4a:6b:34:b6:4e:b9:2d:d1:eb:d0:b6:db:7f:
                    8a:df:3b:92:09:7a:78:76:43:bc:d5:00:3f:7d:81:
                    e7:b4:36:75:18:74:36:9b:bf:11:b8:09:47:09:17:
                    46:9b:ea:d8:04:be:f9:1c:af:01:9d:bb:03:f8:71:
                    b3:3b:e8:58:21:5d:43:ef:f9:87:36:50:c7:42:03:
                    9f:99:ae:c5:42:6b:94:32:4a:b8:d5:aa:22:d1:91:
                    dd:9c:57:d2:dd:1d:be:0a:5b:bb:57:50:e7:19:57:
                    f8:69:3d:48:ab:58:88:9a:96:e6:47:31:20:3c:6b:
                    15:63:e1:ec:5a:5d:d3:39:8c:d8:6d:40:d0:1d:f0:
                    01:73:d6:75:0d:86:36:3e:a1:01:31:3f:07:aa:fa:
                    b7:85:98:0c:e4:9b:60:9c:7a:61:95:be:82:51:5f:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3C:C3:91:70:C6:2D:8E:30:1B:5C:FD:E1:E7:C9:8B:F8:67:1E:7A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/093bf138-d5d2-4fc5-9bb3-dc334c5fd7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:2c:77:7c:97:d6:36:f2:5b:42:26:34:05:e1:93:b0:6b:
         fc:d2:a9:4b:72:f0:a1:8e:81:0e:2a:f1:06:89:dd:3c:46:1d:
         09:74:be:53:07:cd:23:19:4c:a5:60:09:89:7b:f7:a9:1e:b0:
         fe:85:c0:73:a7:5d:da:eb:ca:d3:ba:06:8b:50:e0:5c:da:72:
         40:65:f3:83:96:26:0f:bc:3e:60:da:5a:ab:d3:b9:e9:6b:40:
         53:cc:4c:12:bc:36:b1:b2:f2:15:95:9f:bf:b2:f6:a2:e1:0f:
         7e:d2:15:4a:02:8a:fd:2c:f4:1b:46:97:c3:74:4f:3d:e1:c5:
         b0:b8:6d:c0:ad:03:84:78:cf:4d:dd:94:32:8d:ff:3b:ab:15:
         70:90:57:f3:55:7f:cb:ad:5f:1e:9c:87:82:a0:8a:a3:b6:16:
         88:21:6b:f7:d4:26:87:6f:6b:c1:56:47:e1:bd:1f:33:73:80:
         b8:95:af:1c:5d:15:8b:2f:eb:75:5b:c0:b1:a4:15:54:69:d7:
         81:09:fa:97:10:fe:8e:7c:31:82:41:bd:f2:66:9f:81:fb:52:
         c3:ff:7a:ab:c5:35:d2:47:6c:79:e8:44:29:e1:a6:ab:ad:01:
         c5:ba:07:54:7d:52:ab:76:08:c5:c3:3e:84:f3:af:3c:13:b2:
         e8:86:55:a3
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUZEASfeROpmkBYB2yECW9JshNoEMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYTgwOGQ0YjhiNDVmNTY2OGQxZmY1
NjkwYWI3OGVkYTZhZGNkNDk5OThiOWYzMjFiOTE2NmY5NzYzYmQ4NGRhMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJnA3dmM3zQBFX9llI4xDVZjL3bm
fyBzFt1xLr72Q7Rb9c+RvEDSHGNq98/TONjBaapO6d1YzPkNHt6tQ1jnsZkTkrap
Q3bn/jVeL0Fe/H43v4ZoLsUSwknY8EprNLZOuS3R69C223+K3zuSCXp4dkO81QA/
fYHntDZ1GHQ2m78RuAlHCRdGm+rYBL75HK8BnbsD+HGzO+hYIV1D7/mHNlDHQgOf
ma7FQmuUMkq41aoi0ZHdnFfS3R2+Clu7V1DnGVf4aT1Iq1iImpbmRzEgPGsVY+Hs
Wl3TOYzYbUDQHfABc9Z1DYY2PqEBMT8Hqvq3hZgM5JtgnHphlb6CUV8wXwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFIk8w5Fwxi2OMBtc/eHnyYv4Zx56MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzA5M2JmMTM4LWQ1ZDItNGZjNS05YmIzLWRjMzM0YzVmZDdmYi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba9kAwDQYJKoZIhvcNAQELBQADggEBAJinLHd8l9Y28ltCJjQF
4ZOwa/zSqUty8KGOgQ4q8QaJ3TxGHQl0vlMHzSMZTKVgCYl796kesP6FwHOnXdrr
ytO6BotQ4FzackBl84OWJg+8PmDaWqvTuelrQFPMTBK8NrGy8hWVn7+y9qLhD37S
FUoCiv0s9BtGl8N0Tz3hxbC4bcCtA4R4z03dlDKN/zurFXCQV/NVf8utXx6ch4Kg
iqO2Fogha/fUJodva8FWR+G9HzNzgLiVrxxdFYsv63VbwLGkFVRp14EJ+pcQ/o58
MYJBvfJmn4H7UsP/eqvFNdJHbHnoRCnhpqutAcW6B1R9Uqt2CMXDPoTzrzwTsuiG
VaM=
-----END CERTIFICATE-----