Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f2d2820-010d-490f-87c9-2cf7cee359c2.roa
File:                     1f2d2820-010d-490f-87c9-2cf7cee359c2.roa (raw, json)
Hash identifier:          eMEAkmEG2zpsWOBki3WHYIeColKp4m5ZXtYAkqhYRlc=
Subject key identifier:   73:D1:B8:52:9B:77:89:B8:35:33:6B:1A:B1:45:C9:A2:D6:76:C4:BB
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       339F102E72A8625522AEC7F3F35AF96BBD49F381
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f2d2820-010d-490f-87c9-2cf7cee359c2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:1080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9f:10:2e:72:a8:62:55:22:ae:c7:f3:f3:5a:f9:6b:bd:49:f3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=afa40141df9431168fa87cf6d8440b83feef22192d79466c4d4ed8751c766f97, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:35:d9:f2:a0:56:b5:34:57:44:3a:14:db:
                    2c:f4:e2:4d:b3:4e:da:0e:6d:20:83:4a:1c:19:d8:
                    eb:6a:61:0e:b3:ae:cc:f4:09:e4:99:e9:88:6d:d7:
                    2f:60:a9:56:42:8e:cd:69:28:8b:79:a0:a0:d0:cd:
                    36:ff:7f:89:b6:97:92:a4:c2:0e:a1:2f:58:de:11:
                    50:e4:cf:c6:d1:55:03:a5:d5:6b:49:ad:64:19:c7:
                    79:cd:d4:7b:7b:5d:52:7b:bc:d5:01:7b:60:2a:55:
                    06:26:04:02:06:da:8a:73:44:0d:3c:0f:c4:ac:81:
                    c2:04:7a:e6:bb:c3:aa:bb:ec:a6:ee:9c:78:78:89:
                    3e:9a:c1:a7:bb:0d:f5:79:05:c7:6a:c5:50:61:9f:
                    70:41:7d:82:6c:e2:97:4b:e9:82:82:c9:6b:21:75:
                    00:98:fb:0a:ca:0e:ea:cb:81:ec:21:c1:3d:0a:38:
                    8d:42:f6:80:87:8b:ee:0e:9d:5a:2f:7a:00:88:36:
                    5e:d1:d8:6f:dd:cc:48:a2:5a:6e:e3:01:e6:1a:3f:
                    83:58:74:ea:fe:fc:d5:22:e6:2a:04:d7:75:5d:9d:
                    90:dc:eb:c7:d4:ef:f5:de:be:45:24:ef:0f:bc:31:
                    a4:02:56:f8:cc:05:de:11:e3:21:15:82:ba:e5:97:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:B8:52:9B:77:89:B8:35:33:6B:1A:B1:45:C9:A2:D6:76:C4:BB
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f2d2820-010d-490f-87c9-2cf7cee359c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:1080::/46

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:45:35:b0:be:00:4d:89:e4:b4:4e:05:3b:dd:f9:3f:cf:
         d3:69:c3:39:a7:8a:ff:98:42:d6:5c:61:8d:39:72:8d:13:7e:
         42:74:69:83:5f:a0:15:64:35:8b:56:f5:23:b9:c0:31:82:cc:
         04:47:68:d0:8d:38:9b:0c:b6:62:8a:87:2d:0a:ba:8c:14:3d:
         df:81:38:28:bb:11:10:e7:49:4d:79:ed:f6:e9:74:10:e4:b0:
         33:3a:bb:52:8a:5f:e6:3b:ee:20:5f:11:46:89:26:ab:73:02:
         a3:fd:cf:65:e0:83:4d:c1:3a:08:1d:82:ee:dc:6e:96:74:fc:
         1c:0b:0a:76:75:70:4e:22:37:46:2d:27:e9:38:82:75:63:d2:
         4b:61:6e:6e:59:ee:a0:27:b8:ee:72:82:c3:09:6f:c1:4a:c7:
         c4:d8:27:48:7a:09:2a:8b:d6:5c:53:1f:6b:9e:87:53:e0:60:
         f8:1e:0c:f4:a0:55:40:b4:3b:15:d5:59:1b:01:7d:a9:bf:3e:
         fa:cb:1c:85:48:2e:7c:fd:77:ee:cf:97:a4:44:df:7c:e0:6a:
         b4:97:e5:1d:22:29:97:0f:54:ed:e8:3e:ac:38:e9:b7:88:59:
         0f:96:4c:ca:21:f4:b5:a6:32:ba:79:ac:e5:b8:7c:d7:40:6e:
         06:c6:05:60
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUM58QLnKoYlUirsfz81r5a71J84EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYWZhNDAxNDFkZjk0MzExNjhmYTg3
Y2Y2ZDg0NDBiODNmZWVmMjIxOTJkNzk0NjZjNGQ0ZWQ4NzUxYzc2NmY5NzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn812fKgVrU0V0Q6FNss9OJNs07a
Dm0gg0ocGdjramEOs67M9AnkmemIbdcvYKlWQo7NaSiLeaCg0M02/3+JtpeSpMIO
oS9Y3hFQ5M/G0VUDpdVrSa1kGcd5zdR7e11Se7zVAXtgKlUGJgQCBtqKc0QNPA/E
rIHCBHrmu8Oqu+ym7px4eIk+msGnuw31eQXHasVQYZ9wQX2CbOKXS+mCgslrIXUA
mPsKyg7qy4HsIcE9CjiNQvaAh4vuDp1aL3oAiDZe0dhv3cxIolpu4wHmGj+DWHTq
/vzVIuYqBNd1XZ2Q3OvH1O/13r5FJO8PvDGkAlb4zAXeEeMhFYK65ZeHfwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFHPRuFKbd4m4NTNrGrFFyaLWdsS7MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzFmMmQyODIwLTAxMGQtNDkwZi04N2M5LTJjZjdjZWUzNTljMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba+xCAMA0GCSqGSIb3DQEBCwUAA4IBAQAl8UU1sL4ATYnktE4F
O935P8/TacM5p4r/mELWXGGNOXKNE35CdGmDX6AVZDWLVvUjucAxgswER2jQjTib
DLZiioctCrqMFD3fgTgouxEQ50lNee326XQQ5LAzOrtSil/mO+4gXxFGiSarcwKj
/c9l4INNwToIHYLu3G6WdPwcCwp2dXBOIjdGLSfpOIJ1Y9JLYW5uWe6gJ7jucoLD
CW/BSsfE2CdIegkqi9ZcUx9rnodT4GD4Hgz0oFVAtDsV1VkbAX2pvz76yxyFSC58
/Xfuz5ekRN984Gq0l+UdIimXD1Tt6D6sOOm3iFkPlkzKIfS1pjK6eazluHzXQG4G
xgVg
-----END CERTIFICATE-----