Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa
File:                     403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa (raw, json)
Hash identifier:          ikpm7O28iV9YrqAUUr+9bmZ7aPIlnfHylMAN8y8HL9E=
Subject key identifier:   E3:C6:96:BE:6E:1C:7C:3A:E9:68:AA:E9:EC:7D:A4:6F:12:99:B5:89
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1799C4908B3BCAF7D1717EBA30B769DA80ED5FBF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:4060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:99:c4:90:8b:3b:ca:f7:d1:71:7e:ba:30:b7:69:da:80:ed:5f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=21c95c2f9c9913cb1fd5628c8c1334115a88087612379cf7bef98b119fd32f7c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:78:df:bb:86:7f:e1:59:a2:bf:47:1d:a5:
                    f6:ec:7a:69:a1:97:c7:7f:d0:5c:c9:8b:72:ee:d7:
                    2e:4c:5a:23:5e:7d:ae:00:f5:94:1b:c3:8d:26:4e:
                    98:46:60:71:10:cb:45:b3:70:92:2c:2a:b0:e4:ce:
                    90:c0:36:c6:9f:60:25:4c:93:4e:ed:bb:4e:2d:42:
                    5d:fa:7f:8b:0b:26:16:0d:6c:84:84:7c:04:44:2b:
                    53:6e:29:24:0e:83:8e:11:2e:ef:74:c0:58:73:2f:
                    44:fe:c0:0b:5c:8e:98:ad:58:33:c9:f0:9a:23:a1:
                    07:56:4b:00:e9:6c:c4:b2:0a:a8:b7:42:06:e8:32:
                    db:37:48:e7:c1:5e:0b:5a:4e:cd:38:1c:fb:35:63:
                    a8:5c:a0:e4:95:4d:97:06:a8:7e:25:97:e6:96:b2:
                    8f:1d:6b:a4:5c:8e:98:92:e6:5c:ed:67:54:b1:cc:
                    ea:6d:f2:4e:67:f3:7f:48:1b:ee:f9:e8:13:0c:93:
                    fa:97:1e:87:9d:79:6b:28:bb:e9:92:f9:b4:0f:d4:
                    6b:98:ca:13:16:59:f4:ba:4b:f4:78:5c:56:49:7c:
                    91:33:63:4d:91:71:f1:7f:7f:57:8d:7c:24:d6:bf:
                    54:f0:1e:d8:1e:6c:1e:e2:84:3c:60:84:c2:d7:91:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:96:BE:6E:1C:7C:3A:E9:68:AA:E9:EC:7D:A4:6F:12:99:B5:89
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/403cdc26-1adf-4e8c-a40c-6cc31efe9fb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:4060::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:1d:2f:78:8d:77:ab:03:91:8f:f2:71:c6:38:e0:00:a2:ca:
         c9:31:04:ef:01:6d:98:e1:d0:67:9d:cc:93:68:68:c4:73:8c:
         d2:65:5c:58:30:ba:5c:8d:12:a9:0b:bb:88:ae:f8:4a:47:ca:
         f2:11:de:29:9c:da:82:fd:5d:77:7f:42:a3:e0:70:ce:41:4b:
         e4:5f:05:21:4a:dc:3b:e4:35:0e:d9:4a:1d:65:bf:c7:0b:51:
         dd:46:36:58:29:dd:9e:f6:40:3d:77:14:3e:d1:98:23:2a:d9:
         b1:bb:f5:1f:7c:bd:3f:0c:eb:e4:3d:5d:4b:8a:bc:19:37:e3:
         c7:e1:25:59:ab:88:65:f5:a4:67:48:35:29:eb:fb:7a:87:82:
         dd:88:29:f0:e7:e1:8a:25:31:a3:5f:1c:01:56:d0:04:7b:f7:
         b5:0f:2d:12:19:4b:77:6a:56:a1:34:b2:33:85:d1:97:18:ab:
         74:5d:fc:8b:c9:b0:44:7e:8a:51:c0:ad:10:90:b3:01:bf:a6:
         1d:2b:84:69:0e:14:e2:46:dc:fb:7e:92:92:87:3c:3c:ac:85:
         70:dd:24:cc:38:75:69:17:ba:5c:b5:e6:4c:c2:4e:91:ca:76:
         2e:71:b2:ee:e3:18:1d:fc:f3:b2:d7:fd:fb:02:d2:fb:58:f3:
         6a:4f:92:36
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUF5nEkIs7yvfRcX66MLdp2oDtX78wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMjFjOTVjMmY5Yzk5MTNjYjFmZDU2
MjhjOGMxMzM0MTE1YTg4MDg3NjEyMzc5Y2Y3YmVmOThiMTE5ZmQzMmY3YzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDx437uGf+FZor9HHaX27HppoZfH
f9BcyYty7tcuTFojXn2uAPWUG8ONJk6YRmBxEMtFs3CSLCqw5M6QwDbGn2AlTJNO
7btOLUJd+n+LCyYWDWyEhHwERCtTbikkDoOOES7vdMBYcy9E/sALXI6YrVgzyfCa
I6EHVksA6WzEsgqot0IG6DLbN0jnwV4LWk7NOBz7NWOoXKDklU2XBqh+JZfmlrKP
HWukXI6YkuZc7WdUsczqbfJOZ/N/SBvu+egTDJP6lx6HnXlrKLvpkvm0D9RrmMoT
Fln0ukv0eFxWSXyRM2NNkXHxf39XjXwk1r9U8B7YHmwe4oQ8YITC15EF9QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOPGlr5uHHw66Wiq6ex9pG8SmbWJMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQwM2NkYzI2LTFhZGYtNGU4Yy1hNDBjLTZjYzMxZWZlOWZiOC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaAEBgMA0GCSqGSIb3DQEBCwUAA4IBAQAfHS94jXerA5GP8nHG
OOAAosrJMQTvAW2Y4dBnncyTaGjEc4zSZVxYMLpcjRKpC7uIrvhKR8ryEd4pnNqC
/V13f0Kj4HDOQUvkXwUhStw75DUO2UodZb/HC1HdRjZYKd2e9kA9dxQ+0ZgjKtmx
u/UffL0/DOvkPV1LirwZN+PH4SVZq4hl9aRnSDUp6/t6h4LdiCnw5+GKJTGjXxwB
VtAEe/e1Dy0SGUt3alahNLIzhdGXGKt0XfyLybBEfopRwK0QkLMBv6YdK4RpDhTi
Rtz7fpKShzw8rIVw3STMOHVpF7pcteZMwk6RynYucbLu4xgd/POy1/37AtL7WPNq
T5I2
-----END CERTIFICATE-----