Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa
File:                     629f07b6-9f47-4955-89e6-77a305389cf6.roa (raw, json)
Hash identifier:          cD3yoEYenSQfMVIahD7FAD1P1uiH1YfiyzVHa1qYuWQ=
Subject key identifier:   96:C0:BC:AD:81:38:1C:9A:73:68:52:83:99:B2:EF:C8:49:77:A4:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4E8A3A3E2558A3520D578365E549A73A491BCCDC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:b040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8a:3a:3e:25:58:a3:52:0d:57:83:65:e5:49:a7:3a:49:1b:cc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=7713c397c66bd36e69b21c328b3f914548d6273209d59dca42d7d03b658604a6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:0f:c0:27:00:17:15:ee:2d:bf:22:e3:84:
                    a7:fe:15:cd:6c:2d:92:86:99:a1:f1:9e:a9:5e:99:
                    c3:87:39:be:05:7a:49:1e:84:bf:40:66:db:6b:0d:
                    f6:8c:a1:ae:93:ce:c7:ca:09:b0:e0:c4:1c:d6:6f:
                    0b:e6:a2:23:16:0e:16:1a:41:90:17:cd:c5:3a:f4:
                    6f:3e:8a:66:20:73:1f:37:e1:87:f7:f3:82:b7:51:
                    4f:67:66:ba:c5:bb:bc:c4:7b:59:70:af:06:01:5a:
                    9f:8e:91:a9:ff:b3:fa:ef:82:21:ee:39:60:50:86:
                    0f:2f:af:35:12:64:ed:66:fe:07:a7:da:6b:e2:5f:
                    ad:7c:c2:3c:70:88:c2:95:f1:40:b5:42:35:b2:8f:
                    7c:ff:53:39:b7:e9:9f:bc:d1:39:e0:08:c8:90:74:
                    3e:76:08:07:14:3e:a3:69:99:28:28:af:4c:0f:96:
                    f0:09:d0:1a:a6:46:4f:5b:f7:a4:de:b2:6e:c2:12:
                    1d:a7:7c:1e:a9:56:12:b4:17:d0:27:52:4b:07:e6:
                    e2:da:3c:0d:a8:47:d7:10:ae:53:2c:fb:24:69:33:
                    53:ec:13:4a:0e:1a:39:f4:fc:18:8b:11:72:22:d1:
                    de:d8:7f:1f:91:92:22:45:0e:40:8c:6f:70:68:e3:
                    2e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:BC:AD:81:38:1C:9A:73:68:52:83:99:B2:EF:C8:49:77:A4:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/629f07b6-9f47-4955-89e6-77a305389cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:b040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:04:a3:be:7f:e0:2d:45:a0:a5:70:f9:e8:9f:87:d9:a9:20:
         52:ec:e5:c7:e0:6f:89:65:e6:4d:7a:bc:1d:41:9f:73:07:5e:
         65:e1:80:e7:e8:a1:e5:21:30:13:c3:9b:6a:de:90:ab:94:ee:
         20:5e:53:e7:50:9c:7d:0f:83:23:5a:32:f4:36:59:03:a3:ed:
         f0:09:27:c3:44:03:9f:46:e9:c8:17:c7:99:da:13:06:fa:05:
         1e:8c:a8:2b:69:52:48:e3:ef:08:81:68:f7:d1:9f:d5:81:a3:
         a2:24:d1:43:31:83:c6:2a:e8:3f:bd:58:c9:36:c1:b9:19:d9:
         1d:d6:5a:c1:ff:d9:ff:b2:f7:c3:d3:c5:e7:5d:4a:22:72:aa:
         1b:46:34:54:e0:e1:93:3e:eb:41:46:d3:63:9c:a2:97:f4:e7:
         cd:fe:57:41:72:2b:ec:5c:af:3c:d2:19:51:0f:56:9b:a3:75:
         d6:6e:23:35:48:31:8e:3c:6a:ba:4c:fa:8b:73:fb:7a:cf:93:
         28:64:6c:8c:8d:f5:81:7e:b1:19:f1:92:c8:0f:b3:d5:35:0d:
         1d:aa:5a:fe:f3:cb:72:ed:38:95:69:bd:0b:c1:34:38:8b:36:
         c6:c8:21:98:aa:4f:e9:d6:66:ce:b2:84:d0:77:19:23:e5:ed:
         46:7b:af:4b
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUToo6PiVYo1INV4Nl5UmnOkkbzNwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNANzcxM2MzOTdjNjZiZDM2ZTY5YjIx
YzMyOGIzZjkxNDU0OGQ2MjczMjA5ZDU5ZGNhNDJkN2QwM2I2NTg2MDRhNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHcPwCcAFxXuLb8i44Sn/hXNbC2S
hpmh8Z6pXpnDhzm+BXpJHoS/QGbbaw32jKGuk87Hygmw4MQc1m8L5qIjFg4WGkGQ
F83FOvRvPopmIHMfN+GH9/OCt1FPZ2a6xbu8xHtZcK8GAVqfjpGp/7P674Ih7jlg
UIYPL681EmTtZv4Hp9pr4l+tfMI8cIjClfFAtUI1so98/1M5t+mfvNE54AjIkHQ+
dggHFD6jaZkoKK9MD5bwCdAapkZPW/ek3rJuwhIdp3weqVYStBfQJ1JLB+bi2jwN
qEfXEK5TLPskaTNT7BNKDho59PwYixFyItHe2H8fkZIiRQ5AjG9waOMueQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFJbAvK2BOByac2hSg5my78hJd6SCMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzYyOWYwN2I2LTlmNDctNDk1NS04OWU2LTc3YTMwNTM4OWNmNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba/7BAMA0GCSqGSIb3DQEBCwUAA4IBAQCkBKO+f+AtRaClcPno
n4fZqSBS7OXH4G+JZeZNerwdQZ9zB15l4YDn6KHlITATw5tq3pCrlO4gXlPnUJx9
D4MjWjL0NlkDo+3wCSfDRAOfRunIF8eZ2hMG+gUejKgraVJI4+8IgWj30Z/VgaOi
JNFDMYPGKug/vVjJNsG5Gdkd1lrB/9n/svfD08XnXUoicqobRjRU4OGTPutBRtNj
nKKX9OfN/ldBcivsXK880hlRD1abo3XWbiM1SDGOPGq6TPqLc/t6z5MoZGyMjfWB
frEZ8ZLID7PVNQ0dqlr+88ty7TiVab0LwTQ4izbGyCGYqk/p1mbOsoTQdxkj5e1G
e69L
-----END CERTIFICATE-----