Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa
File:                     916d4cc7-71da-4d70-94e5-6749d742f22a.roa (raw, json)
Hash identifier:          ud9n7QSqYQcJA/4I6q8jE138DehCnEQJ7+HE5uXCox8=
Subject key identifier:   26:11:EC:14:5F:09:7E:09:89:AB:78:C3:4D:2B:E9:F5:FA:2D:B6:83
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       10DDEB112969942FFA4C34B28D9A8DF318F3B2F0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:70c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dd:eb:11:29:69:94:2f:fa:4c:34:b2:8d:9a:8d:f3:18:f3:b2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e96a3be944fbd54e15fdc96d9c8f797e0397957633a8b469625efd315c2c065c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:62:67:98:b3:ce:3f:f8:dd:41:96:88:b3:
                    24:09:96:6d:8c:3e:b7:00:85:9f:ac:f0:67:a3:08:
                    64:19:b7:57:6b:5f:79:ef:71:0b:72:35:61:4d:fb:
                    cb:a7:c9:bb:14:56:68:14:83:ab:64:b9:dc:3d:60:
                    2f:cd:61:15:51:92:a3:5d:88:06:66:ad:e4:9e:18:
                    4b:b7:b3:a9:96:f3:99:af:d5:a1:20:a0:a9:b9:cb:
                    cd:e1:40:a8:3a:c4:27:d5:87:3d:2e:e6:34:96:61:
                    36:66:07:51:a9:52:c3:99:8e:9b:f6:d4:17:d1:3b:
                    cc:28:fd:a0:95:45:cd:32:d3:8e:38:d7:72:0b:ab:
                    e5:d4:73:9e:00:da:dc:2f:d0:1e:49:bd:34:3a:e4:
                    bd:1f:7c:9c:65:f5:54:45:aa:1a:99:b0:09:b2:70:
                    f8:c2:f8:d9:ae:cf:2b:9f:20:85:c5:7a:f6:58:c9:
                    ed:63:16:8d:01:04:83:98:c2:b8:93:58:ee:1b:4f:
                    4f:c6:6b:a5:b7:3e:b6:9e:4e:26:19:a9:f5:ce:5b:
                    58:73:9e:66:b4:73:3c:34:80:06:c8:1c:67:8d:31:
                    d8:7b:f7:54:7b:98:17:ef:19:3c:85:1f:b6:25:3c:
                    e0:e9:35:e0:55:32:c8:9e:0f:c9:0c:ca:8d:72:c3:
                    3b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:11:EC:14:5F:09:7E:09:89:AB:78:C3:4D:2B:E9:F5:FA:2D:B6:83
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/916d4cc7-71da-4d70-94e5-6749d742f22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:70c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         af:29:17:ac:54:af:7f:af:48:c6:41:da:15:9e:54:ba:ac:15:
         fa:37:36:13:f7:cd:a5:80:d5:fe:74:b0:6a:39:5d:c9:17:81:
         f7:9b:cf:fe:ad:e5:82:8c:ae:01:f0:2c:6d:fa:79:79:5a:de:
         0e:f0:d7:0c:9c:fc:0c:6f:90:ff:e8:b3:a1:02:ed:aa:97:8a:
         3f:32:ab:3d:64:3d:6d:ec:28:6f:48:92:43:b2:87:62:ad:91:
         60:a3:f1:2b:2c:2a:85:50:3f:c2:04:49:5f:c3:05:e0:f2:fb:
         a6:b6:8b:67:e2:98:6b:c8:fd:e9:d9:b3:52:71:0a:17:19:33:
         58:79:c1:0f:b8:6d:8b:6d:13:15:ac:da:d5:65:00:8a:71:5c:
         7f:51:ec:bd:11:5a:e3:6f:08:4f:e1:08:0a:af:98:e2:52:4e:
         76:ae:48:92:9e:e3:1a:b7:5f:b4:c1:f4:20:2d:08:e8:db:3d:
         b1:64:29:c7:53:f1:ae:b6:73:3e:62:89:15:dc:62:70:fb:e7:
         5b:d7:2f:f4:28:62:3d:94:76:a1:95:88:83:c5:5b:ab:ab:05:
         df:5d:de:06:1c:7c:d7:6f:83:a0:c7:55:7b:f0:ae:06:6e:93:
         70:c6:d9:14:cf:8e:d8:f7:07:28:98:d6:5d:93:be:2e:b2:72:
         56:34:03:2a
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUEN3rESlplC/6TDSyjZqN8xjzsvAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZTk2YTNiZTk0NGZiZDU0ZTE1ZmRj
OTZkOWM4Zjc5N2UwMzk3OTU3NjMzYThiNDY5NjI1ZWZkMzE1YzJjMDY1YzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/NiZ5izzj/43UGWiLMkCZZtjD63
AIWfrPBnowhkGbdXa19573ELcjVhTfvLp8m7FFZoFIOrZLncPWAvzWEVUZKjXYgG
Zq3knhhLt7OplvOZr9WhIKCpucvN4UCoOsQn1Yc9LuY0lmE2ZgdRqVLDmY6b9tQX
0TvMKP2glUXNMtOOONdyC6vl1HOeANrcL9AeSb00OuS9H3ycZfVURaoambAJsnD4
wvjZrs8rnyCFxXr2WMntYxaNAQSDmMK4k1juG09Pxmultz62nk4mGan1zltYc55m
tHM8NIAGyBxnjTHYe/dUe5gX7xk8hR+2JTzg6TXgVTLIng/JDMqNcsM7pwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFCYR7BRfCX4Jiat4w00r6fX6LbaDMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzkxNmQ0Y2M3LTcxZGEtNGQ3MC05NGU1LTY3NDlkNzQyZjIyYS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAbaaXDAMA0GCSqGSIb3DQEBCwUAA4IBAQCvKResVK9/r0jGQdoV
nlS6rBX6NzYT982lgNX+dLBqOV3JF4H3m8/+reWCjK4B8Cxt+nl5Wt4O8NcMnPwM
b5D/6LOhAu2ql4o/Mqs9ZD1t7ChvSJJDsodirZFgo/ErLCqFUD/CBElfwwXg8vum
totn4phryP3p2bNScQoXGTNYecEPuG2LbRMVrNrVZQCKcVx/Uey9EVrjbwhP4QgK
r5jiUk52rkiSnuMat1+0wfQgLQjo2z2xZCnHU/GutnM+YokV3GJw++db1y/0KGI9
lHahlYiDxVurqwXfXd4GHHzXb4Ogx1V78K4GbpNwxtkUz47Y9wcomNZdk74usnJW
NAMq
-----END CERTIFICATE-----