Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b38fef2-d4ec-44a2-974b-d890067e85d3.roa
File:                     4b38fef2-d4ec-44a2-974b-d890067e85d3.roa (raw, json)
Hash identifier:          u4JLexW6u1GTD6id/E1gVmfiVK9A+bziX4nABRfji0Y=
Subject key identifier:   5B:C2:F1:6F:EC:C2:FB:DC:7D:0F:69:65:AF:DE:BC:B0:83:C2:45:A8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       40965CFB0D8F82C9DDA490A1EFFC5347ECA51A84
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b38fef2-d4ec-44a2-974b-d890067e85d3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:e0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:96:5c:fb:0d:8f:82:c9:dd:a4:90:a1:ef:fc:53:47:ec:a5:1a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b7360fd0c3f288fca6c925ebf0e4070f2d275b460ac9e777935108452ef23aa2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:11:c4:14:8f:4c:9b:af:5f:c6:e6:6b:aa:
                    d7:d3:87:4e:bd:a2:64:25:07:13:ff:28:04:77:0e:
                    cd:f4:d2:b2:5c:e2:83:52:a1:df:11:5d:cb:ae:4e:
                    4d:e2:8d:4b:9a:9b:90:76:8f:1b:c7:7b:27:d0:87:
                    0a:31:c0:dd:c7:21:8f:5a:c7:19:fe:ce:df:4f:af:
                    25:77:e0:cc:ce:5f:ea:87:8e:85:bc:0a:34:07:f9:
                    e8:77:cf:93:f3:4a:3c:cf:99:76:83:1e:6c:3c:fa:
                    13:63:90:73:51:b7:9a:7c:04:73:69:f7:51:9b:06:
                    38:2f:51:3b:8c:2b:60:be:dc:dc:aa:4e:b3:c8:63:
                    ea:45:0c:4e:b5:f6:29:13:d6:d0:5e:74:e9:a7:67:
                    79:80:97:c6:48:8e:1f:49:7f:3b:dd:7e:c3:b7:c0:
                    a2:01:2b:a5:9c:0c:c5:70:c2:f7:11:96:f1:3f:ad:
                    db:7f:8c:4c:93:9d:36:82:be:b4:43:2f:50:83:44:
                    4e:48:f2:18:00:af:0a:ad:d6:7d:c8:92:3d:c6:53:
                    f7:90:06:14:e7:a2:fb:47:97:d7:73:02:41:ab:f1:
                    0f:78:a8:f4:dc:82:63:36:58:98:64:f9:f3:85:c8:
                    10:cc:be:9e:d3:36:de:b3:cf:34:61:56:1e:b6:2c:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:F1:6F:EC:C2:FB:DC:7D:0F:69:65:AF:DE:BC:B0:83:C2:45:A8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b38fef2-d4ec-44a2-974b-d890067e85d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:78:02:60:55:40:c3:7e:69:59:e1:a0:8e:7d:cf:e6:8f:80:
         06:e7:f4:38:10:74:6b:de:50:d1:d0:cc:a5:6c:cb:ab:53:2c:
         2f:78:b6:ad:b8:42:0b:94:06:e9:58:29:c1:79:87:7f:3b:ea:
         c3:63:3e:8f:de:8a:b6:3d:7d:31:13:1d:14:0c:05:ad:76:60:
         cb:52:63:5d:c7:35:ed:e7:3c:7a:e9:c1:0d:81:2a:b8:57:b4:
         7f:b8:db:b4:8e:db:a4:b2:e3:fc:b7:1c:12:94:50:c0:c5:03:
         04:7f:75:eb:48:b0:f3:6e:95:3c:66:61:03:87:3d:e1:c5:7f:
         4b:16:7a:47:4b:75:71:67:41:5d:4c:b7:e5:67:40:81:61:7f:
         95:cb:99:99:41:9f:72:d3:b1:3d:72:2f:d2:fb:3c:50:73:71:
         84:a7:75:11:dd:33:d9:89:16:b1:47:0f:2b:9c:d1:7e:84:cb:
         37:03:9c:84:67:ad:1c:58:c1:95:c0:66:cd:44:98:3c:e5:ca:
         93:1a:2a:46:3d:d1:a6:6a:9f:9a:cc:cf:20:de:dd:80:b5:e3:
         c9:44:b4:41:a6:00:8e:26:b6:99:27:3b:1c:3c:be:46:93:62:
         7e:6d:af:a1:55:01:69:38:5d:d1:ca:cd:ec:f6:85:9f:e5:76:
         4b:39:5e:e8
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUQJZc+w2PgsndpJCh7/xTR+ylGoQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYjczNjBmZDBjM2YyODhmY2E2Yzky
NWViZjBlNDA3MGYyZDI3NWI0NjBhYzllNzc3OTM1MTA4NDUyZWYyM2FhMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFgRxBSPTJuvX8bma6rX04dOvaJk
JQcT/ygEdw7N9NKyXOKDUqHfEV3Lrk5N4o1LmpuQdo8bx3sn0IcKMcDdxyGPWscZ
/s7fT68ld+DMzl/qh46FvAo0B/nod8+T80o8z5l2gx5sPPoTY5BzUbeafARzafdR
mwY4L1E7jCtgvtzcqk6zyGPqRQxOtfYpE9bQXnTpp2d5gJfGSI4fSX873X7Dt8Ci
ASulnAzFcML3EZbxP63bf4xMk502gr60Qy9Qg0ROSPIYAK8KrdZ9yJI9xlP3kAYU
56L7R5fXcwJBq/EPeKj03IJjNliYZPnzhcgQzL6e0zbes880YVYetizsfQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFFvC8W/swvvcfQ9pZa/evLCDwkWoMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzRiMzhmZWYyLWQ0ZWMtNDRhMi05NzRiLWQ4OTAwNjdlODVkMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9ODAMA0GCSqGSIb3DQEBCwUAA4IBAQADeAJgVUDDfmlZ4aCO
fc/mj4AG5/Q4EHRr3lDR0MylbMurUywveLatuEILlAbpWCnBeYd/O+rDYz6P3oq2
PX0xEx0UDAWtdmDLUmNdxzXt5zx66cENgSq4V7R/uNu0jtuksuP8txwSlFDAxQME
f3XrSLDzbpU8ZmEDhz3hxX9LFnpHS3VxZ0FdTLflZ0CBYX+Vy5mZQZ9y07E9ci/S
+zxQc3GEp3UR3TPZiRaxRw8rnNF+hMs3A5yEZ60cWMGVwGbNRJg85cqTGipGPdGm
ap+azM8g3t2AtePJRLRBpgCOJraZJzscPL5Gk2J+ba+hVQFpOF3Rys3s9oWf5XZL
OV7o
-----END CERTIFICATE-----