Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa
File:                     8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa (raw, json)
Hash identifier:          VAC9CqUCk/S82cakg2c//zBuk4BrGlldLak0hZF9OB4=
Subject key identifier:   80:43:26:55:16:47:2D:DB:6A:6D:CE:48:F3:59:C8:F7:CA:D2:AA:E0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4386B9E3B7ACF1D9ACCD080EA8503554564003A1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:c840::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:86:b9:e3:b7:ac:f1:d9:ac:cd:08:0e:a8:50:35:54:56:40:03:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d85a1347e368efe7cb8ac849a357c8ea15bf2d03247c4973de7bb2765c8cc7da, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:09:21:6a:28:9b:04:70:a6:ca:b4:b7:6f:
                    97:05:e5:22:35:13:91:55:4b:2d:59:77:4f:87:f1:
                    8d:cf:a6:23:21:4d:c7:f7:2d:3e:b2:de:e5:d1:6e:
                    ee:30:30:81:63:1c:50:45:84:0a:b1:d0:cc:44:82:
                    2d:f2:93:9f:79:3d:22:09:b2:45:56:f7:4e:66:1d:
                    65:6d:7a:ca:bc:17:60:62:90:cc:dd:77:4c:dd:e7:
                    36:98:e3:99:7d:5a:25:46:c7:bd:2c:75:74:35:90:
                    dc:a4:2e:76:81:19:7c:4f:90:f8:d3:92:09:4d:80:
                    7f:5b:05:26:fb:e4:b4:34:12:1f:3c:8e:f5:56:fd:
                    a5:97:79:23:ae:f7:f3:8a:fa:0d:da:80:43:fb:15:
                    16:19:51:f5:45:36:7a:3d:65:a0:36:1e:ff:b2:ee:
                    5b:f0:39:7c:a1:fd:a8:a9:25:77:a0:2d:69:31:bb:
                    76:a2:ab:c3:b8:ca:1e:77:20:22:d6:b2:83:ea:44:
                    49:f6:f5:99:68:ce:5a:c5:cb:ef:a7:5b:d8:ec:fa:
                    ae:10:de:24:86:e8:c8:66:6f:79:a7:a6:f4:ca:76:
                    99:85:67:85:7a:46:7d:c1:6b:69:36:e6:55:f3:90:
                    4e:7b:4e:40:15:42:be:83:06:84:b2:1a:2a:7a:a4:
                    ef:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:43:26:55:16:47:2D:DB:6A:6D:CE:48:F3:59:C8:F7:CA:D2:AA:E0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dba85b7-4730-4c28-98df-3c8484e0f1cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:c840::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:85:3a:19:1e:ef:d6:65:bf:59:9f:6e:84:74:78:9e:34:
         bc:aa:3a:f4:43:b0:28:2e:ea:97:96:83:da:71:e7:49:50:12:
         1b:f8:c2:f3:39:b9:b3:e3:19:01:cc:50:34:12:ba:8b:0b:b4:
         59:ef:67:7a:8a:83:cc:4a:d8:ce:6d:19:4e:c6:d2:5c:55:32:
         1d:37:23:96:f1:3f:47:11:e6:ac:ec:f6:9f:c7:d2:e2:d8:c0:
         1c:63:c9:d5:7e:df:4f:81:8b:3f:c4:b4:af:00:88:16:9a:35:
         8f:f3:a6:d8:e3:b2:66:d2:3c:e7:f8:28:73:4a:5a:e7:24:5b:
         ab:71:13:37:bc:44:bf:01:1c:bd:95:41:f9:47:ee:be:72:ac:
         b5:44:9e:28:67:fc:33:60:7c:eb:b6:fc:36:63:2b:60:49:72:
         26:be:52:f0:c5:3c:cc:f3:60:e2:d7:0d:dc:6a:f4:98:54:0a:
         cd:77:a2:3e:81:ee:36:39:8a:08:0f:8f:33:3b:39:31:68:06:
         0c:48:60:48:e5:8c:b9:55:33:99:58:ac:dd:b8:95:ad:9c:da:
         31:0f:57:e1:c7:bc:5c:be:97:1c:ea:0a:11:fd:98:cb:7b:29:
         b9:ab:a5:1d:80:2c:d2:e8:89:53:f8:c0:17:aa:d3:aa:7c:8b:
         0c:67:30:fa
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUQ4a547es8dmszQgOqFA1VFZAA6EwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZDg1YTEzNDdlMzY4ZWZlN2NiOGFj
ODQ5YTM1N2M4ZWExNWJmMmQwMzI0N2M0OTczZGU3YmIyNzY1YzhjYzdkYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttoJIWoomwRwpsq0t2+XBeUiNROR
VUstWXdPh/GNz6YjIU3H9y0+st7l0W7uMDCBYxxQRYQKsdDMRIIt8pOfeT0iCbJF
VvdOZh1lbXrKvBdgYpDM3XdM3ec2mOOZfVolRse9LHV0NZDcpC52gRl8T5D405IJ
TYB/WwUm++S0NBIfPI71Vv2ll3kjrvfzivoN2oBD+xUWGVH1RTZ6PWWgNh7/su5b
8Dl8of2oqSV3oC1pMbt2oqvDuMoedyAi1rKD6kRJ9vWZaM5axcvvp1vY7PquEN4k
hujIZm95p6b0ynaZhWeFekZ9wWtpNuZV85BOe05AFUK+gwaEshoqeqTvbQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFIBDJlUWRy3bam3OSPNZyPfK0qrgMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzhkYmE4NWI3LTQ3MzAtNGMyOC05OGRmLTNjODQ4NGUwZjFjYy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba8shAMA0GCSqGSIb3DQEBCwUAA4IBAQBCpYU6GR7v1mW/WZ9u
hHR4njS8qjr0Q7AoLuqXloPacedJUBIb+MLzObmz4xkBzFA0ErqLC7RZ72d6ioPM
StjObRlOxtJcVTIdNyOW8T9HEeas7Pafx9Li2MAcY8nVft9PgYs/xLSvAIgWmjWP
86bY47Jm0jzn+ChzSlrnJFurcRM3vES/ARy9lUH5R+6+cqy1RJ4oZ/wzYHzrtvw2
YytgSXImvlLwxTzM82Di1w3cavSYVArNd6I+ge42OYoID48zOzkxaAYMSGBI5Yy5
VTOZWKzduJWtnNoxD1fhx7xcvpcc6goR/ZjLeym5q6UdgCzS6IlT+MAXqtOqfIsM
ZzD6
-----END CERTIFICATE-----