Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa
File:                     616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa (raw, json)
Hash identifier:          7t0J7HG8qUU3Dmh/JhWFJ3dfdiNvfz4te7+TCpUziUs=
Subject key identifier:   5E:82:D4:73:75:7B:ED:59:6C:8D:B9:B2:E7:F2:95:CB:17:B3:13:D1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0989ACC42A113DCCC8C26D28C126310191313D35
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:89:ac:c4:2a:11:3d:cc:c8:c2:6d:28:c1:26:31:01:91:31:3d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=06b61ca386356cea057c7a97dc2cead0007bb501380ae1725ebc91523ede0d82, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:0f:2d:f2:67:0c:6b:3f:bf:87:73:b7:dd:
                    8c:59:24:71:59:74:ad:e3:b6:59:3b:b2:2d:24:11:
                    72:f0:4c:54:76:96:98:25:ea:40:ee:ae:1d:19:ec:
                    f1:e6:db:46:77:19:46:73:a0:89:ae:ce:68:f0:ea:
                    b4:f9:9a:5e:69:ca:fa:f0:cd:82:0e:63:73:c8:41:
                    e0:31:09:dd:c4:2c:8c:da:8b:a6:8c:16:f5:9f:ea:
                    fc:37:d6:65:45:3e:f5:05:76:52:bb:1f:dd:4e:e9:
                    fb:9c:93:fd:c9:c6:e0:34:2a:75:a7:b7:c9:c1:98:
                    85:ed:36:2d:62:d3:d9:95:53:c5:74:f3:9c:ba:7e:
                    df:73:b9:52:51:49:0c:a4:65:12:d2:c0:14:41:a6:
                    60:ea:7c:a9:0d:33:d5:4f:aa:8c:07:9b:65:13:c6:
                    df:eb:f6:b9:bd:1f:64:73:b9:4a:69:b6:50:aa:13:
                    a7:8d:1a:7e:bf:3c:62:a0:a5:09:96:3d:33:2e:71:
                    c7:de:d5:d8:82:98:7b:48:b3:08:e3:93:37:85:66:
                    35:c3:ec:ca:6d:44:e6:2f:d7:ea:5a:5f:67:27:24:
                    d5:a2:e4:0e:42:5b:29:76:09:d5:18:d3:52:79:23:
                    35:29:cb:fb:fe:c8:ef:5b:6b:82:4a:1f:e8:35:db:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:82:D4:73:75:7B:ED:59:6C:8D:B9:B2:E7:F2:95:CB:17:B3:13:D1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/616ddae1-2e07-4555-ab47-1eeac1d3b3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:ea:5e:46:a5:87:b5:4d:ca:2a:95:05:79:67:3e:f1:97:20:
         9d:0e:92:2b:2a:58:9c:c4:de:9d:86:35:a8:ec:ca:72:af:ce:
         fa:c2:28:42:e7:63:2c:a1:8c:fc:dd:6c:87:ad:79:7a:af:8e:
         e5:18:f7:2f:d4:fa:64:3a:48:72:74:83:f3:db:da:30:be:73:
         b8:6a:ea:5e:da:b2:d4:2a:20:f4:10:02:85:68:92:41:a0:09:
         01:ac:cf:ef:0d:8d:eb:fe:33:49:38:7d:0c:09:18:81:fb:eb:
         89:3e:55:bf:1c:e9:69:87:79:9e:23:a0:59:10:09:8d:3e:3a:
         b0:53:95:72:85:a9:02:a5:46:a8:65:30:19:34:6a:d3:b9:a0:
         00:50:91:14:6b:61:cd:55:7b:33:a9:d5:f2:21:46:a7:02:07:
         89:59:c4:f8:15:09:ba:d4:da:4a:8d:e2:8c:43:d6:23:6b:d7:
         9b:31:07:3a:b9:18:c6:3b:d7:9f:3c:4f:86:03:2e:8d:be:c0:
         e8:e1:6b:ad:4d:0a:60:75:ad:aa:57:fa:1d:57:50:e1:2d:7f:
         09:65:e0:84:6d:0e:a2:86:60:dd:a5:fd:ef:cd:e9:02:36:23:
         55:b7:e1:b7:cb:d1:93:de:a6:b6:f4:04:19:a4:0f:a9:13:bd:
         41:ff:e5:47
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIUCYmsxCoRPczIwm0owSYxAZExPTUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMzAwMDAwMFoX
DTI1MDIxNzIzNTk1OVowejFJMEcGA1UEBRNAMDZiNjFjYTM4NjM1NmNlYTA1N2M3
YTk3ZGMyY2VhZDAwMDdiYjUwMTM4MGFlMTcyNWViYzkxNTIzZWRlMGQ4MjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/MPLfJnDGs/v4dzt92MWSRxWXSt
47ZZO7ItJBFy8ExUdpaYJepA7q4dGezx5ttGdxlGc6CJrs5o8Oq0+Zpeacr68M2C
DmNzyEHgMQndxCyM2oumjBb1n+r8N9ZlRT71BXZSux/dTun7nJP9ycbgNCp1p7fJ
wZiF7TYtYtPZlVPFdPOcun7fc7lSUUkMpGUS0sAUQaZg6nypDTPVT6qMB5tlE8bf
6/a5vR9kc7lKabZQqhOnjRp+vzxioKUJlj0zLnHH3tXYgph7SLMI45M3hWY1w+zK
bUTmL9fqWl9nJyTVouQOQlspdgnVGNNSeSM1Kcv7/sjvW2uCSh/oNdtE/QIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFF6C1HN1e+1ZbI25sufylcsXsxPRMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzYxNmRkYWUxLTJlMDctNDU1NS1hYjQ3LTFlZWFjMWQzYjNmNC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUAJAba8TANBgkqhkiG9w0BAQsFAAOCAQEAuepeRqWHtU3KKpUFeWc+
8ZcgnQ6SKypYnMTenYY1qOzKcq/O+sIoQudjLKGM/N1sh615eq+O5Rj3L9T6ZDpI
cnSD89vaML5zuGrqXtqy1Cog9BAChWiSQaAJAazP7w2N6/4zSTh9DAkYgfvriT5V
vxzpaYd5niOgWRAJjT46sFOVcoWpAqVGqGUwGTRq07mgAFCRFGthzVV7M6nV8iFG
pwIHiVnE+BUJutTaSo3ijEPWI2vXmzEHOrkYxjvXnzxPhgMujb7A6OFrrU0KYHWt
qlf6HVdQ4S1/CWXghG0OooZg3aX9783pAjYjVbfht8vRk96mtvQEGaQPqRO9Qf/l
Rw==
-----END CERTIFICATE-----