Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa
File:                     7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa (raw, json)
Hash identifier:          TjVapncajoeRg/CYN/cRiruV6vPelhw0ylmdBwjWl+Y=
Subject key identifier:   7F:D9:CE:C2:A5:55:B0:FF:5A:72:B2:F2:C2:26:ED:70:AF:05:25:D6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       56C56900A898EC439F933675DC5A6EABA827E234
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:9000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c5:69:00:a8:98:ec:43:9f:93:36:75:dc:5a:6e:ab:a8:27:e2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9d0d22071b8e2d9ac873302d695460f67341149d88984ae0b4c32ce6ac0c98c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:28:92:3e:c4:c5:57:5a:32:05:39:bf:cf:af:
                    1d:84:fb:36:c7:a8:2e:29:8e:d3:b9:41:7e:b8:76:
                    fc:45:61:4d:20:d3:27:32:9a:74:e9:84:48:07:1a:
                    60:78:60:ff:63:cd:b3:c4:36:d6:63:ac:22:b1:da:
                    2b:73:7f:5d:13:a5:22:fb:5c:76:42:2d:6d:2b:28:
                    ac:48:7e:97:bf:12:f4:fe:78:60:53:70:1e:a4:e5:
                    c2:17:c2:55:c2:8a:87:35:7c:5e:da:73:dd:7c:5c:
                    fc:10:61:c3:d8:c0:85:fe:71:47:03:0c:21:9b:f5:
                    21:a7:bf:c5:d9:38:74:de:98:a5:94:65:74:1a:86:
                    09:cd:fa:1d:4d:b7:7b:f6:fc:e6:31:fa:13:8a:9e:
                    d1:a2:d7:fb:ae:72:6b:c9:c8:d9:50:61:05:72:ec:
                    39:58:08:91:49:c1:5d:d6:7c:70:2e:b7:30:36:bf:
                    78:72:02:1a:d2:71:6c:93:df:0e:c7:0a:06:36:e8:
                    63:34:8c:14:c3:92:32:d1:ec:85:3c:1b:de:08:51:
                    88:04:6b:53:b1:b4:81:5a:33:93:8e:96:1c:16:4b:
                    5b:d4:5f:ad:81:cc:9b:f0:c7:3b:33:ad:7c:7f:8b:
                    c9:07:87:29:91:95:00:ca:e1:58:17:17:56:ca:35:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D9:CE:C2:A5:55:B0:FF:5A:72:B2:F2:C2:26:ED:70:AF:05:25:D6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d5796ce-42f6-427c-a79b-fd2e3eef5f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:57:0d:8b:b8:e2:43:36:63:fb:98:7b:cd:aa:7e:00:0e:c5:
         ba:a4:91:72:ff:75:77:68:55:ca:96:08:1a:41:5a:a5:f6:ee:
         dd:8c:5b:5b:87:00:6e:9d:13:03:4a:5c:44:47:01:56:96:57:
         6f:d2:e9:0a:02:72:a7:99:bd:2e:c8:08:3d:ab:c1:cc:b7:f5:
         60:8f:ee:fe:e8:c9:8f:1c:45:65:1c:48:f6:e8:ce:9d:30:c1:
         32:00:80:48:0f:49:bb:df:4c:cc:53:de:0c:d8:67:8a:67:3b:
         4b:c0:c1:8b:76:60:4e:a5:47:41:b8:b7:af:6c:c6:3f:f6:d7:
         f9:06:b5:4c:bd:f0:36:06:49:78:59:f6:57:f9:24:71:3d:dd:
         84:db:1a:38:b7:4a:e2:b2:23:98:14:5e:1f:b5:42:91:06:1a:
         24:9f:d0:68:fb:b4:84:7a:64:f2:74:a6:ca:5f:9c:c8:6b:40:
         85:e3:b2:a3:52:38:04:43:1a:94:4e:15:d4:c1:ec:78:f0:14:
         0c:e8:e8:92:ba:01:c6:e1:8b:c6:a8:2b:84:62:2c:31:73:37:
         1c:c6:f5:fa:bd:20:a9:52:9f:39:4e:3b:ab:af:98:69:ca:58:
         d3:38:c6:6d:2c:bb:7e:6a:3d:59:c9:36:00:55:ab:9d:42:81:
         9f:a5:dd:1c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUVsVpAKiY7EOfkzZ13Fpuq6gn4jQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAOWQwZDIyMDcxYjhlMmQ5YWM4NzMz
MDJkNjk1NDYwZjY3MzQxMTQ5ZDg4OTg0YWUwYjRjMzJjZTZhYzBjOThjMTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiiSPsTFV1oyBTm/z68dhPs2x6gu
KY7TuUF+uHb8RWFNINMnMpp06YRIBxpgeGD/Y82zxDbWY6wisdorc39dE6Ui+1x2
Qi1tKyisSH6XvxL0/nhgU3AepOXCF8JVwoqHNXxe2nPdfFz8EGHD2MCF/nFHAwwh
m/Uhp7/F2Th03pillGV0GoYJzfodTbd79vzmMfoTip7Rotf7rnJrycjZUGEFcuw5
WAiRScFd1nxwLrcwNr94cgIa0nFsk98OxwoGNuhjNIwUw5Iy0eyFPBveCFGIBGtT
sbSBWjOTjpYcFktb1F+tgcyb8Mc7M618f4vJB4cpkZUAyuFYFxdWyjUxvQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFH/ZzsKlVbD/WnKy8sIm7XCvBSXWMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzdkNTc5NmNlLTQyZjYtNDI3Yy1hNzliLWZkMmUzZWVmNWY5Ny5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba95AwDQYJKoZIhvcNAQELBQADggEBAIJXDYu44kM2Y/uYe82q
fgAOxbqkkXL/dXdoVcqWCBpBWqX27t2MW1uHAG6dEwNKXERHAVaWV2/S6QoCcqeZ
vS7ICD2rwcy39WCP7v7oyY8cRWUcSPbozp0wwTIAgEgPSbvfTMxT3gzYZ4pnO0vA
wYt2YE6lR0G4t69sxj/21/kGtUy98DYGSXhZ9lf5JHE93YTbGji3SuKyI5gUXh+1
QpEGGiSf0Gj7tIR6ZPJ0pspfnMhrQIXjsqNSOARDGpROFdTB7HjwFAzo6JK6Acbh
i8aoK4RiLDFzNxzG9fq9IKlSnzlOO6uvmGnKWNM4xm0su35qPVnJNgBVq51CgZ+l
3Rw=
-----END CERTIFICATE-----