Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa
File:                     519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa (raw, json)
Hash identifier:          Sf8iIcBMZexBcbqHY2tBP1r6tORJv0ysqZXR33emcYo=
Subject key identifier:   EA:C0:F0:22:B9:D6:65:53:E5:3E:11:F6:50:E4:C7:0D:AB:CE:AE:70
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2E9A1DFB16585799E37EB07CCEEE0297F587691E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daa0:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9a:1d:fb:16:58:57:99:e3:7e:b0:7c:ce:ee:02:97:f5:87:69:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=adba3796da04652c6d3571d826f35f485c84c5281599e14b78d8f2c04bd2fc1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:45:02:8c:10:3b:f7:da:44:52:54:78:bc:3e:
                    e0:ff:20:84:80:9e:67:64:82:1f:7f:88:e9:ef:86:
                    0d:3f:f5:31:54:27:42:16:39:27:8f:a7:ab:d4:d3:
                    65:40:6c:5e:42:ee:88:08:78:c3:89:e3:56:4c:02:
                    3c:54:c0:51:6b:8b:e8:97:8e:41:f2:da:85:bd:cc:
                    87:95:9b:ea:67:f6:6e:28:dd:f9:8e:28:72:b5:d2:
                    c8:44:b9:24:8a:07:7b:2f:3d:7c:0e:0f:bc:4b:79:
                    4b:07:9d:e4:55:c9:14:23:98:56:74:9c:67:a7:38:
                    10:aa:f1:58:be:48:bf:f5:07:26:3d:29:42:0a:0c:
                    c0:66:43:14:4f:56:6f:b4:da:e5:32:d2:da:c1:b0:
                    1f:3e:e3:11:81:f0:9b:17:70:0d:fd:62:85:9d:06:
                    4e:fd:bd:4c:a9:75:05:aa:08:ce:44:24:c2:a5:f2:
                    24:e1:95:24:47:9b:fb:32:31:ac:fa:32:af:31:cb:
                    d2:6d:58:0f:68:84:5a:d3:49:7c:47:7a:a2:95:3d:
                    c8:22:a9:80:74:72:3f:7c:5c:65:fc:1d:db:95:f4:
                    70:5c:c5:64:26:fd:71:cb:08:e0:f4:54:ab:bc:07:
                    09:57:b4:7f:0f:54:7c:7d:b9:e9:d9:2a:8e:c0:e6:
                    e2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C0:F0:22:B9:D6:65:53:E5:3E:11:F6:50:E4:C7:0D:AB:CE:AE:70
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/519f0e88-fa90-4b61-957d-57fe1cc2f6c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:69:71:6e:22:83:fe:17:08:da:61:05:6e:38:d4:8c:09:
         4f:8c:a7:62:21:95:7c:74:29:f3:46:7f:84:a5:4a:3b:c0:d2:
         f5:60:41:37:01:cc:0d:4d:53:0f:2a:b5:1d:8f:8c:b4:cf:23:
         77:28:85:df:6a:10:e2:94:b5:5a:92:6a:72:98:03:1e:13:76:
         39:e9:64:b1:00:e2:99:b5:19:6f:82:25:d5:33:8c:a8:5d:51:
         8e:ee:0b:28:36:91:0b:51:b4:a3:8e:0e:cc:6e:ae:50:6e:9d:
         78:ef:ee:e8:0b:35:f2:0c:d1:51:53:02:a0:02:2d:20:d7:8f:
         b7:b7:4a:5e:c4:cf:d4:93:a6:83:a6:6c:8e:90:f5:fe:db:35:
         df:bb:ac:50:7d:c3:99:da:91:44:4e:57:85:13:92:ad:01:1b:
         f8:d0:76:22:02:fa:59:86:04:9f:7a:e1:33:da:f1:ad:c3:1f:
         0c:d0:53:c4:a7:49:5d:45:e0:50:6f:15:e8:e2:c8:04:4c:2c:
         09:b3:c6:2b:13:87:4b:0c:ba:8e:76:33:bf:df:3f:8d:d0:cb:
         48:e7:a0:90:49:2e:9e:0f:fd:99:28:66:e0:1b:2d:39:c2:55:
         e9:a4:8a:d9:74:cd:ac:02:6c:20:eb:16:1a:57:4a:8b:c7:80:
         ad:fb:59:de
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIULpod+xZYV5njfrB8zu4Cl/WHaR4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwODAwMDAwMFoX
DTI1MDIxMjIzNTk1OVowejFJMEcGA1UEBRNAYWRiYTM3OTZkYTA0NjUyYzZkMzU3
MWQ4MjZmMzVmNDg1Yzg0YzUyODE1OTllMTRiNzhkOGYyYzA0YmQyZmMxYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EUCjBA799pEUlR4vD7g/yCEgJ5n
ZIIff4jp74YNP/UxVCdCFjknj6er1NNlQGxeQu6ICHjDieNWTAI8VMBRa4vol45B
8tqFvcyHlZvqZ/ZuKN35jihytdLIRLkkigd7Lz18Dg+8S3lLB53kVckUI5hWdJxn
pzgQqvFYvki/9QcmPSlCCgzAZkMUT1ZvtNrlMtLawbAfPuMRgfCbF3AN/WKFnQZO
/b1MqXUFqgjORCTCpfIk4ZUkR5v7MjGs+jKvMcvSbVgPaIRa00l8R3qilT3IIqmA
dHI/fFxl/B3blfRwXMVkJv1xywjg9FSrvAcJV7R/D1R8fbnp2SqOwObiUQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFOrA8CK51mVT5T4R9lDkxw2rzq5wMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzUxOWYwZTg4LWZhOTAtNGI2MS05NTdkLTU3ZmUxY2MyZjZjMS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAbaoOAwDQYJKoZIhvcNAQELBQADggEBAAfwaXFuIoP+FwjaYQVu
ONSMCU+Mp2IhlXx0KfNGf4SlSjvA0vVgQTcBzA1NUw8qtR2PjLTPI3cohd9qEOKU
tVqSanKYAx4TdjnpZLEA4pm1GW+CJdUzjKhdUY7uCyg2kQtRtKOODsxurlBunXjv
7ugLNfIM0VFTAqACLSDXj7e3Sl7Ez9STpoOmbI6Q9f7bNd+7rFB9w5nakUROV4UT
kq0BG/jQdiIC+lmGBJ964TPa8a3DHwzQU8SnSV1F4FBvFejiyARMLAmzxisTh0sM
uo52M7/fP43Qy0jnoJBJLp4P/ZkoZuAbLTnCVemkitl0zawCbCDrFhpXSovHgK37
Wd4=
-----END CERTIFICATE-----