Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa
File:                     78c73c91-1977-4091-b393-5358d5bcfdd5.roa (raw, json)
Hash identifier:          lbuLkW/X6UMxrjt1mtmZK5SZziBZV/vjP4DPToR5OuE=
Subject key identifier:   42:6F:B7:5E:EE:68:39:28:73:E4:FA:2C:A9:D3:0A:34:2D:2C:97:4A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       575571D2B8121ACA587F2DDC5EABCEB1F0E282A8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa
Signing time:             Thu 30 Jan 2025 00:00:00 +0000
ROA not before:           Thu 30 Jan 2025 00:00:00 +0000
ROA not after:            Thu 06 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:9000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:55:71:d2:b8:12:1a:ca:58:7f:2d:dc:5e:ab:ce:b1:f0:e2:82:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 30 00:00:00 2025 GMT
            Not After : Mar  6 23:59:59 2025 GMT
        Subject: serialNumber=f7320dfcb2c34ebd3bd8ad23459d0173bbeee2431b99f681c2a229461d028d5b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:dd:13:6c:d2:18:e7:53:07:a3:66:b2:15:
                    70:84:83:66:a9:96:21:a5:5f:ad:dd:b5:8e:94:c7:
                    28:b5:26:d9:96:fb:8e:5c:c6:f8:0c:7e:c7:79:dd:
                    ea:bc:b8:8d:d0:c0:ac:56:7f:76:18:3c:ad:24:b0:
                    cb:44:48:64:7e:66:d4:e6:1d:9b:e8:34:f7:6c:fe:
                    68:44:a0:e6:6c:d2:bd:ab:f5:5f:02:6a:55:95:6c:
                    61:2b:ed:6b:df:83:4f:19:12:36:f8:05:f9:f2:6c:
                    0d:6a:03:54:44:ec:44:6e:90:e1:b3:22:4d:7b:6e:
                    9c:ef:f6:2c:47:23:14:d6:f5:a7:28:39:06:6b:be:
                    dc:6a:dc:db:98:f9:35:29:36:f6:09:68:6d:df:f3:
                    dc:3e:1d:f4:68:d5:98:8a:35:bb:9f:ff:5d:a2:88:
                    c5:f0:3e:cf:8e:28:af:b2:94:56:a2:3f:7f:48:2b:
                    b8:14:12:07:17:56:28:94:85:f8:28:9c:d3:71:78:
                    43:26:f0:8c:35:b4:9c:00:1c:a0:56:df:16:8c:ea:
                    af:54:63:88:60:c7:c7:01:d8:79:60:33:52:4e:8e:
                    e7:92:e4:b1:7e:ea:a8:56:85:07:b6:15:e5:d9:1a:
                    9c:3d:67:08:d4:0f:b1:1f:af:61:4d:2e:b8:c2:46:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:B7:5E:EE:68:39:28:73:E4:FA:2C:A9:D3:0A:34:2D:2C:97:4A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:31:7d:70:e4:5b:08:dd:51:56:52:7a:44:c9:c7:84:76:f3:
         71:82:e3:87:22:7f:e5:b9:2c:e4:ac:13:62:5b:7e:5a:da:38:
         0d:f9:19:2e:57:b0:c6:07:62:14:e0:67:17:ba:c4:22:9d:c7:
         44:d5:13:c9:6f:90:7a:29:4f:7e:43:30:18:72:ea:23:d4:62:
         7c:85:36:25:28:bb:64:34:c2:30:3f:12:a0:1f:23:a6:e9:4c:
         f4:a2:87:7e:cb:ec:59:be:b2:94:54:d4:ec:9d:eb:d9:a6:f9:
         f2:59:0e:63:6d:89:21:b4:46:ef:94:01:b1:e4:e6:57:4d:89:
         75:c7:8e:27:d7:5b:89:ff:f8:0d:ab:69:be:21:57:12:07:64:
         b7:85:19:b8:31:be:ff:2e:e7:a6:5d:d9:e5:90:78:95:8f:bd:
         63:96:92:b0:db:d2:0b:74:80:ba:a4:1b:1f:ae:17:6c:15:d6:
         31:2e:c3:1d:8c:4d:47:c4:34:03:1e:16:3d:00:b4:3d:2a:8a:
         29:4a:25:37:47:60:54:ae:ba:f9:33:41:a2:ab:d8:f5:12:a4:
         00:f1:9b:b6:d8:75:5e:c3:dc:be:bc:86:34:6a:a7:23:54:3d:
         65:de:24:07:33:41:b8:c2:4a:7d:b5:c7:33:37:56:10:e7:57:
         6a:49:50:78
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUV1Vx0rgSGspYfy3cXqvOsfDigqgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEzMDAwMDAwMFoX
DTI1MDMwNjIzNTk1OVowejFJMEcGA1UEBRNAZjczMjBkZmNiMmMzNGViZDNiZDhh
ZDIzNDU5ZDAxNzNiYmVlZTI0MzFiOTlmNjgxYzJhMjI5NDYxZDAyOGQ1YjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjLdE2zSGOdTB6NmshVwhINmqZYh
pV+t3bWOlMcotSbZlvuOXMb4DH7Hed3qvLiN0MCsVn92GDytJLDLREhkfmbU5h2b
6DT3bP5oRKDmbNK9q/VfAmpVlWxhK+1r34NPGRI2+AX58mwNagNUROxEbpDhsyJN
e26c7/YsRyMU1vWnKDkGa77catzbmPk1KTb2CWht3/PcPh30aNWYijW7n/9doojF
8D7PjiivspRWoj9/SCu4FBIHF1YolIX4KJzTcXhDJvCMNbScABygVt8WjOqvVGOI
YMfHAdh5YDNSTo7nkuSxfuqoVoUHthXl2RqcPWcI1A+xH69hTS64wkat+wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEJvt17uaDkoc+T6LKnTCjQtLJdKMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzc4YzczYzkxLTE5NzctNDA5MS1iMzkzLTUzNThkNWJjZmRkNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9pAAMA0GCSqGSIb3DQEBCwUAA4IBAQAAMX1w5FsI3VFWUnpE
yceEdvNxguOHIn/luSzkrBNiW35a2jgN+RkuV7DGB2IU4GcXusQincdE1RPJb5B6
KU9+QzAYcuoj1GJ8hTYlKLtkNMIwPxKgHyOm6Uz0ood+y+xZvrKUVNTsnevZpvny
WQ5jbYkhtEbvlAGx5OZXTYl1x44n11uJ//gNq2m+IVcSB2S3hRm4Mb7/LuemXdnl
kHiVj71jlpKw29ILdIC6pBsfrhdsFdYxLsMdjE1HxDQDHhY9ALQ9KoopSiU3R2BU
rrr5M0Giq9j1EqQA8Zu22HVew9y+vIY0aqcjVD1l3iQHM0G4wkp9tcczN1YQ51dq
SVB4
-----END CERTIFICATE-----