Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa
File:                     9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa (raw, json)
Hash identifier:          nngc31ip/IGNzIfxbGSTQl798BI+Uy2ix+CyrJrCD5g=
Subject key identifier:   C1:EA:09:17:88:10:EA:50:00:3A:D0:8E:42:DB:C7:88:E5:E8:6B:A3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       425F1484C18D57B704985F8B27165D3049F4E45D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1a:800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5f:14:84:c1:8d:57:b7:04:98:5f:8b:27:16:5d:30:49:f4:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a29a30fce7041b6d27e9623ceeb8056d9e06dcc6491024af1c5b93b060d8a01a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:f2:1a:81:b6:9c:39:d1:ba:f0:76:1f:ee:
                    21:8a:28:c7:38:62:0c:9c:fc:76:a1:3e:48:51:92:
                    18:3c:4f:15:08:fc:71:6c:99:c8:03:39:cb:3d:a4:
                    3a:6e:09:a6:13:99:58:81:c6:5a:7c:ef:c0:19:62:
                    ee:55:8d:f8:ff:9e:53:71:0b:f0:b0:e6:64:30:00:
                    da:68:61:96:19:17:3e:03:ca:25:b8:19:b6:30:ca:
                    2a:58:47:00:93:b7:24:f8:a4:db:45:46:dc:c3:39:
                    ef:be:1e:43:88:a9:b2:d2:14:5b:e5:59:2e:e3:c4:
                    97:42:0d:ac:0e:af:e3:37:e1:61:d2:78:72:a4:1f:
                    0e:da:e0:2f:9e:8a:f2:7a:e5:f9:a7:f0:40:28:d5:
                    9e:72:bd:a1:41:d8:bd:0b:91:3e:4f:2f:2a:3d:d9:
                    19:14:ed:09:4d:80:49:fe:8c:c2:78:8d:c1:b7:72:
                    40:a1:c0:9f:1a:af:eb:3d:8d:73:e5:f7:2d:91:a6:
                    6a:fa:9b:21:ca:9b:66:20:3b:29:bc:01:d3:32:a6:
                    5e:24:69:67:76:0e:c4:60:da:dd:ce:85:f4:19:80:
                    19:46:65:19:0a:8b:ae:27:93:68:31:03:a3:94:a6:
                    fd:5a:ed:55:05:82:b2:c9:55:04:66:2e:22:d7:46:
                    f7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EA:09:17:88:10:EA:50:00:3A:D0:8E:42:DB:C7:88:E5:E8:6B:A3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9771a9b1-0ca1-4d5c-aabf-23e3c1aeecb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1a:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         ac:f2:e8:23:a4:32:1e:d6:4c:47:21:c5:ce:8e:42:74:70:22:
         bd:d7:2a:68:6f:62:8c:62:57:06:f9:c6:38:85:a5:c0:c3:ce:
         3e:c8:6e:03:97:2a:ca:df:d9:46:bf:32:19:0e:55:d4:9a:3e:
         56:ec:43:f2:9a:4f:72:34:82:d9:bb:5c:84:85:16:00:42:c4:
         f9:37:9d:4b:ea:21:97:8b:b2:82:f3:10:fe:da:1e:b1:4c:66:
         1f:98:e3:61:88:c6:a5:94:d1:81:e4:d7:11:65:16:22:ee:f1:
         f7:f7:a5:9e:9b:7e:39:4c:9b:60:06:a7:fc:41:14:7b:27:fb:
         a4:54:08:68:7e:39:7c:ad:40:07:37:54:3d:e9:36:9c:21:35:
         09:4d:1d:f4:57:48:8e:1b:91:b9:ca:d9:8b:16:d7:51:5a:57:
         2a:2d:33:ee:58:fd:c8:00:59:bd:26:56:70:50:5c:11:53:bb:
         67:09:1a:d0:78:4e:17:b2:46:1f:37:4a:6d:55:de:f5:2c:2c:
         5e:32:06:38:21:21:62:10:df:ed:85:2c:c0:6e:33:f6:49:44:
         63:33:b9:93:f9:d5:4a:ba:25:bc:c5:e7:25:50:66:db:16:9f:
         31:2e:f5:91:6a:06:76:14:d6:e0:fd:a4:d5:a7:6e:51:93:ac:
         94:f6:18:53
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUQl8UhMGNV7cEmF+LJxZdMEn05F0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYTI5YTMwZmNlNzA0MWI2ZDI3ZTk2
MjNjZWViODA1NmQ5ZTA2ZGNjNjQ5MTAyNGFmMWM1YjkzYjA2MGQ4YTAxYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5XyGoG2nDnRuvB2H+4hiijHOGIM
nPx2oT5IUZIYPE8VCPxxbJnIAznLPaQ6bgmmE5lYgcZafO/AGWLuVY34/55TcQvw
sOZkMADaaGGWGRc+A8oluBm2MMoqWEcAk7ck+KTbRUbcwznvvh5DiKmy0hRb5Vku
48SXQg2sDq/jN+Fh0nhypB8O2uAvnoryeuX5p/BAKNWecr2hQdi9C5E+Ty8qPdkZ
FO0JTYBJ/ozCeI3Bt3JAocCfGq/rPY1z5fctkaZq+pshyptmIDspvAHTMqZeJGln
dg7EYNrdzoX0GYAZRmUZCouuJ5NoMQOjlKb9Wu1VBYKyyVUEZi4i10b3nwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFMHqCReIEOpQADrQjkLbx4jl6GujMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzk3NzFhOWIxLTBjYTEtNGQ1Yy1hYWJmLTIzZTNjMWFlZWNiMy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJAbaGggwDQYJKoZIhvcNAQELBQADggEBAKzy6COkMh7WTEchxc6O
QnRwIr3XKmhvYoxiVwb5xjiFpcDDzj7IbgOXKsrf2Ua/MhkOVdSaPlbsQ/KaT3I0
gtm7XISFFgBCxPk3nUvqIZeLsoLzEP7aHrFMZh+Y42GIxqWU0YHk1xFlFiLu8ff3
pZ6bfjlMm2AGp/xBFHsn+6RUCGh+OXytQAc3VD3pNpwhNQlNHfRXSI4bkbnK2YsW
11FaVyotM+5Y/cgAWb0mVnBQXBFTu2cJGtB4TheyRh83Sm1V3vUsLF4yBjghIWIQ
3+2FLMBuM/ZJRGMzuZP51Uq6JbzF5yVQZtsWnzEu9ZFqBnYU1uD9pNWnblGTrJT2
GFM=
-----END CERTIFICATE-----