Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49ee8a40-4f98-4920-8cb2-bb7c36415c8b.roa
File:                     49ee8a40-4f98-4920-8cb2-bb7c36415c8b.roa (raw, json)
Hash identifier:          QoJJ5R6ATexiPoX2+Baod1f9jOQY7J1zMwNdH19xHBY=
Subject key identifier:   4B:63:E1:58:5C:C3:6B:67:34:96:35:F8:2C:1C:D8:31:10:F3:DE:5D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4993EAE7221B4A368FC12E345CE41340ED65DA4B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49ee8a40-4f98-4920-8cb2-bb7c36415c8b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:28c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:93:ea:e7:22:1b:4a:36:8f:c1:2e:34:5c:e4:13:40:ed:65:da:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=34f35e23a4aa1e7fd7d11065fbf6900aa6246b178c4e45159df982f69cfa7108, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:7d:21:3c:4c:03:34:6b:49:17:12:9c:b9:
                    de:57:75:89:fd:92:6c:21:da:b0:2b:6c:a0:ac:54:
                    c9:b8:c8:55:79:18:e3:70:ff:82:f1:1a:25:eb:07:
                    fb:fd:92:a9:c8:27:a7:98:58:40:bc:a1:ea:1b:a3:
                    d7:38:1c:b0:a4:42:00:38:83:07:6f:97:56:36:ba:
                    bb:6a:ae:c5:a7:97:86:35:1f:d2:74:c0:10:3d:a7:
                    30:0b:24:32:26:0b:e9:86:79:28:5e:69:58:4d:84:
                    bf:bd:eb:ed:53:7c:73:46:bf:5c:47:1c:4a:f0:6e:
                    34:3c:14:c6:91:91:0f:af:64:51:6e:71:cc:46:e6:
                    8b:09:83:94:a5:ff:d3:0c:26:8d:90:db:21:ae:56:
                    a2:8e:16:cd:fe:85:98:66:31:9a:a9:2e:52:57:a7:
                    ab:4b:9b:59:61:bb:84:72:7b:0f:56:59:1c:cf:66:
                    58:c3:79:f0:ed:78:40:5d:ba:ed:af:e6:90:6c:56:
                    4c:ea:fa:d0:48:74:2f:12:42:f9:43:e8:b5:7a:72:
                    01:81:4f:64:44:73:26:2b:58:73:14:4e:7e:d1:7d:
                    ab:ce:77:b8:05:7c:ed:d1:41:3f:2a:2e:8f:2b:1c:
                    29:e8:a3:30:b0:2d:d8:68:61:e4:1a:5f:c8:9f:17:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:E1:58:5C:C3:6B:67:34:96:35:F8:2C:1C:D8:31:10:F3:DE:5D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/49ee8a40-4f98-4920-8cb2-bb7c36415c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:28c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:64:a2:a3:f8:c4:3f:01:ab:d8:a3:4b:7e:b3:21:42:fc:4f:
         2d:92:c0:41:66:88:b6:2b:98:d1:83:ea:1e:51:f8:14:d9:38:
         b2:e5:34:5f:e4:e8:22:59:b5:5d:28:80:b7:3b:3d:6e:bc:03:
         91:a1:6b:b8:d3:ca:7e:40:fe:a5:25:67:d5:01:40:a2:53:45:
         00:80:8d:75:a2:6f:a2:40:02:2a:20:5c:f7:19:01:5e:68:9b:
         10:c9:78:73:5d:88:78:38:9c:6b:a3:ba:e4:1b:cc:c0:df:98:
         33:16:8e:b6:b9:91:3d:9d:27:61:a3:94:8a:a1:ab:e9:d0:21:
         8d:ea:4b:ae:7b:61:d1:62:91:bb:92:03:4e:73:1e:c2:3f:0d:
         34:57:fe:0b:49:4a:30:31:42:f9:f1:d4:6e:79:0f:7d:b2:f8:
         77:9e:38:3b:14:90:ab:2b:6a:29:6b:5d:f2:63:fb:e5:a5:7b:
         8a:62:1c:8c:42:c6:79:c6:b5:8a:b8:0a:7a:97:a7:db:77:c5:
         31:d9:f5:5d:62:c0:78:81:c1:85:73:b9:5f:a9:c1:83:4b:20:
         ba:b3:60:17:7b:75:e8:de:67:68:fd:a3:c6:ad:e0:2a:2e:57:
         6a:7b:30:2d:66:5a:f9:fb:e9:52:09:66:c1:27:87:93:55:33:
         dc:e3:90:92
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUSZPq5yIbSjaPwS40XOQTQO1l2kswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMzRmMzVlMjNhNGFhMWU3ZmQ3ZDEx
MDY1ZmJmNjkwMGFhNjI0NmIxNzhjNGU0NTE1OWRmOTgyZjY5Y2ZhNzEwODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw99ITxMAzRrSRcSnLneV3WJ/ZJs
IdqwK2ygrFTJuMhVeRjjcP+C8Rol6wf7/ZKpyCenmFhAvKHqG6PXOBywpEIAOIMH
b5dWNrq7aq7Fp5eGNR/SdMAQPacwCyQyJgvphnkoXmlYTYS/vevtU3xzRr9cRxxK
8G40PBTGkZEPr2RRbnHMRuaLCYOUpf/TDCaNkNshrlaijhbN/oWYZjGaqS5SV6er
S5tZYbuEcnsPVlkcz2ZYw3nw7XhAXbrtr+aQbFZM6vrQSHQvEkL5Q+i1enIBgU9k
RHMmK1hzFE5+0X2rzne4BXzt0UE/Ki6PKxwp6KMwsC3YaGHkGl/Inxf44QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEtj4Vhcw2tnNJY1+Cwc2DEQ895dMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzQ5ZWU4YTQwLTRmOTgtNDkyMC04Y2IyLWJiN2MzNjQxNWM4Yi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba9yjAMA0GCSqGSIb3DQEBCwUAA4IBAQCWZKKj+MQ/AavYo0t+
syFC/E8tksBBZoi2K5jRg+oeUfgU2Tiy5TRf5OgiWbVdKIC3Oz1uvAORoWu408p+
QP6lJWfVAUCiU0UAgI11om+iQAIqIFz3GQFeaJsQyXhzXYh4OJxro7rkG8zA35gz
Fo62uZE9nSdho5SKoavp0CGN6kuue2HRYpG7kgNOcx7CPw00V/4LSUowMUL58dRu
eQ99svh3njg7FJCrK2opa13yY/vlpXuKYhyMQsZ5xrWKuAp6l6fbd8Ux2fVdYsB4
gcGFc7lfqcGDSyC6s2AXe3Xo3mdo/aPGreAqLldqezAtZlr5++lSCWbBJ4eTVTPc
45CS
-----END CERTIFICATE-----