Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa
File:                     67b122dd-c584-4c2f-ac76-fb1a660b79da.roa (raw, json)
Hash identifier:          ED+20mYx5ZaVlXzeSmpw/x8z5NGEqJM7sJX6AaIKdCQ=
Subject key identifier:   9B:98:FF:15:9D:91:7C:D7:86:10:A6:29:C8:98:3D:4B:AC:71:B4:C1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4E1B6838F4920E09891945A29AD4313FCFE233A5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa
Signing time:             Mon 27 Jan 2025 00:00:00 +0000
ROA not before:           Mon 27 Jan 2025 00:00:00 +0000
ROA not after:            Mon 03 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da28::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1b:68:38:f4:92:0e:09:89:19:45:a2:9a:d4:31:3f:cf:e2:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 27 00:00:00 2025 GMT
            Not After : Mar  3 23:59:59 2025 GMT
        Subject: serialNumber=8f46cf66d5173fcaa6d66b7c872360d6bff5291453677376b59bc55c8388fec3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:55:1a:4e:18:9c:6a:4e:af:be:1e:b8:d8:
                    ee:e5:3c:30:ef:e2:a3:67:4c:be:79:42:cb:1b:93:
                    d3:ea:e8:8c:48:72:67:96:c4:fc:05:e8:f0:88:1b:
                    56:fa:4a:6d:7a:bc:29:be:d0:dd:66:b4:fb:8a:dc:
                    f7:ec:f0:ec:94:11:f3:b6:99:a1:c9:64:74:e8:3d:
                    0d:33:5a:15:48:17:97:d4:5b:65:6b:4d:0f:26:af:
                    df:ef:c9:56:00:a7:5a:3f:c4:03:ef:4f:47:3d:47:
                    3c:fe:fe:ca:26:c4:82:a6:ec:f3:ba:c5:ec:ef:76:
                    6e:5f:4c:c4:69:ff:05:3c:d5:fc:17:d0:ab:89:69:
                    f2:04:f2:66:2e:ee:f0:f1:aa:ea:41:d9:db:85:33:
                    2c:fd:87:90:85:d4:91:2a:35:9f:44:11:c6:8d:e6:
                    cb:b5:43:21:da:9b:1c:80:0a:e9:8f:7d:56:4f:1c:
                    25:df:36:ce:12:bb:be:db:96:7f:6b:ce:3a:05:ab:
                    d0:c8:b4:52:9f:3f:65:37:78:42:8a:fe:6b:1b:d5:
                    1c:f0:1a:32:db:f0:86:96:b7:79:c6:66:34:6f:ca:
                    35:f6:60:85:9f:9d:63:61:07:ae:c3:68:49:ee:22:
                    55:76:16:9c:9f:ce:40:86:a9:9e:1d:60:c9:67:c8:
                    f2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:98:FF:15:9D:91:7C:D7:86:10:A6:29:C8:98:3D:4B:AC:71:B4:C1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67b122dd-c584-4c2f-ac76-fb1a660b79da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da28::/36

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:96:a6:d7:61:f9:fb:1d:ea:ca:d6:db:9a:22:df:f3:5b:
         bd:7a:6c:c6:c3:5b:d3:04:54:78:01:09:d6:37:2f:ff:39:62:
         02:b8:ac:a3:60:73:5b:e7:79:3a:39:b1:bb:8d:04:95:8e:f2:
         4e:cc:84:0e:ae:da:a3:dc:7f:19:df:33:18:3c:d1:96:8c:41:
         ca:fe:0b:2a:02:4d:5c:d8:c8:8e:0a:33:be:7a:9a:aa:45:6f:
         0a:92:aa:9f:30:c0:1b:a1:7a:a6:b7:ee:96:b2:4d:d1:b6:32:
         b9:34:da:40:bc:e0:13:3d:0a:2e:0b:d6:60:00:52:ae:ec:3d:
         15:34:76:94:c1:1d:b1:4a:cd:6c:38:04:a7:cb:18:91:ca:ed:
         59:c4:07:d8:68:67:8d:a1:09:1e:69:06:3d:60:89:03:1c:0a:
         9e:f2:06:9e:1d:39:63:62:b7:8f:7a:44:d6:7c:3f:8e:e5:a5:
         df:3e:b6:e9:30:f8:b2:df:1d:c6:11:d5:2d:2b:c8:80:ae:74:
         57:34:d7:08:66:4f:d5:d9:21:b4:5e:f8:89:b3:7f:ca:ee:26:
         62:2f:e5:92:1c:3d:4b:67:13:a8:d7:6e:f2:05:84:fd:e0:65:
         26:11:4f:8f:d3:77:39:04:be:09:ed:78:ee:17:56:42:71:0b:
         79:c6:62:19
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUThtoOPSSDgmJGUWimtQxP8/iM6UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEyNzAwMDAwMFoX
DTI1MDMwMzIzNTk1OVowejFJMEcGA1UEBRNAOGY0NmNmNjZkNTE3M2ZjYWE2ZDY2
YjdjODcyMzYwZDZiZmY1MjkxNDUzNjc3Mzc2YjU5YmM1NWM4Mzg4ZmVjMzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+JVGk4YnGpOr74euNju5Tww7+Kj
Z0y+eULLG5PT6uiMSHJnlsT8BejwiBtW+kpterwpvtDdZrT7itz37PDslBHztpmh
yWR06D0NM1oVSBeX1Ftla00PJq/f78lWAKdaP8QD709HPUc8/v7KJsSCpuzzusXs
73ZuX0zEaf8FPNX8F9CriWnyBPJmLu7w8arqQdnbhTMs/YeQhdSRKjWfRBHGjebL
tUMh2pscgArpj31WTxwl3zbOEru+25Z/a846BavQyLRSnz9lN3hCiv5rG9Uc8Boy
2/CGlrd5xmY0b8o19mCFn51jYQeuw2hJ7iJVdhacn85AhqmeHWDJZ8jymwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFJuY/xWdkXzXhhCmKciYPUuscbTBMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzY3YjEyMmRkLWM1ODQtNGMyZi1hYzc2LWZiMWE2NjBiNzlkYS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAbaKAAwDQYJKoZIhvcNAQELBQADggEBAIjdlqbXYfn7HerK1tua
It/zW716bMbDW9MEVHgBCdY3L/85YgK4rKNgc1vneTo5sbuNBJWO8k7MhA6u2qPc
fxnfMxg80ZaMQcr+CyoCTVzYyI4KM756mqpFbwqSqp8wwBuheqa37payTdG2Mrk0
2kC84BM9Ci4L1mAAUq7sPRU0dpTBHbFKzWw4BKfLGJHK7VnEB9hoZ42hCR5pBj1g
iQMcCp7yBp4dOWNit496RNZ8P47lpd8+tukw+LLfHcYR1S0ryICudFc01whmT9XZ
IbRe+Imzf8ruJmIv5ZIcPUtnE6jXbvIFhP3gZSYRT4/TdzkEvgnteO4XVkJxC3nG
Yhk=
-----END CERTIFICATE-----