Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa
File:                     b235d168-8a46-461c-98e6-45ec802567db.roa (raw, json)
Hash identifier:          SJ03e6p22R6rGMkeuaewdrFws1w9VS8lCYeLuMcznVg=
Subject key identifier:   04:1A:FD:A5:F9:66:2D:FD:BB:AB:9D:1F:A3:B9:AA:19:69:10:79:5E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       12974BCA367244F3D378FD0AAFD5669F6EED1132
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:9000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:4b:ca:36:72:44:f3:d3:78:fd:0a:af:d5:66:9f:6e:ed:11:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=486b19b7c4f3012e0896200aee2a4f571bd212e374b8e6bb42f3961061449dba, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:a3:b6:78:a1:84:9d:6c:12:e4:fe:6f:53:
                    04:76:f8:e6:77:c7:63:4f:b5:5d:00:11:ae:ba:c0:
                    60:a9:0b:70:c3:32:57:c2:f9:48:31:ca:96:77:ac:
                    e8:7e:5d:8c:bc:4e:88:73:4a:db:5d:b9:b3:a5:0c:
                    12:2c:bc:e4:a9:fb:8a:40:aa:cb:ae:34:0d:e1:13:
                    ae:b0:c2:d9:ab:35:1d:6e:60:a7:74:d7:7c:1b:bc:
                    51:8e:a1:15:56:b3:09:a9:91:e9:9a:c1:f4:b4:ef:
                    19:b1:c0:05:36:dc:cd:f3:58:06:86:f7:a9:36:2e:
                    b5:c9:15:3b:2a:38:19:42:da:c5:dc:de:7e:4e:ed:
                    72:28:17:e5:34:96:c1:3b:4e:49:d6:4a:9b:74:e2:
                    02:21:54:2d:c3:5b:0d:21:ad:3b:aa:bc:f0:bb:f0:
                    a7:be:c6:8b:75:16:04:29:b4:dc:d4:ac:16:ee:a6:
                    56:10:f6:84:52:ac:96:ed:55:ab:6c:7a:6e:e1:ea:
                    f8:53:0f:09:b0:f7:da:42:e4:5f:43:d3:4e:9f:6e:
                    7c:42:23:8c:a0:15:1e:42:81:04:87:84:ba:89:03:
                    86:f7:73:d1:22:17:d1:d2:5c:e7:9f:cc:cc:6d:74:
                    b3:ea:a2:b8:69:07:1e:78:0d:4e:f7:66:d4:37:ed:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:FD:A5:F9:66:2D:FD:BB:AB:9D:1F:A3:B9:AA:19:69:10:79:5E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b235d168-8a46-461c-98e6-45ec802567db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:31:91:fa:a9:67:93:6e:de:89:2c:ef:8b:e5:45:04:e1:0d:
         d7:6b:22:38:a1:fa:4f:49:b0:6e:a2:51:ce:2e:f7:1d:e6:13:
         b6:24:d3:47:92:f8:18:69:cb:f4:c5:87:59:0a:7a:5b:a7:1c:
         9f:29:21:c3:79:6a:54:47:cc:88:df:d4:e1:47:0d:77:b9:c6:
         a9:8a:92:49:15:32:e0:ec:f4:dd:c4:c1:57:9c:cd:49:d9:5c:
         c7:84:a2:ed:55:e5:fa:43:46:37:0a:c7:4b:d3:a6:23:c5:b7:
         25:ee:61:4a:ab:6a:3a:15:e1:ae:0e:04:f3:eb:dd:98:5b:13:
         76:8a:99:b0:4b:e2:fd:e7:7b:f4:c8:25:b0:fe:7c:9e:46:f4:
         50:90:dc:30:41:61:ff:06:d0:34:0f:ae:5d:d8:68:b7:95:40:
         96:75:fe:cb:9a:a7:f9:9f:82:d4:e9:91:9a:ea:23:ec:c4:16:
         a9:ef:de:26:b7:75:7b:3c:8a:9f:df:7b:e6:f0:95:2b:1f:e7:
         35:18:3c:c0:af:52:e1:8f:08:51:f4:a9:68:25:24:b0:0f:0f:
         61:12:26:24:ff:27:6d:a1:57:fd:5a:4e:0d:06:9a:0c:c0:08:
         0f:6c:da:aa:73:d7:64:84:57:f0:ab:5f:2d:1b:2c:1e:ad:cf:
         c2:b4:3e:27
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUEpdLyjZyRPPTeP0Kr9Vmn27tETIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDExMDAwMDAwMFoX
DTI1MDIxNDIzNTk1OVowejFJMEcGA1UEBRNANDg2YjE5YjdjNGYzMDEyZTA4OTYy
MDBhZWUyYTRmNTcxYmQyMTJlMzc0YjhlNmJiNDJmMzk2MTA2MTQ0OWRiYTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ajtnihhJ1sEuT+b1MEdvjmd8dj
T7VdABGuusBgqQtwwzJXwvlIMcqWd6zofl2MvE6Ic0rbXbmzpQwSLLzkqfuKQKrL
rjQN4ROusMLZqzUdbmCndNd8G7xRjqEVVrMJqZHpmsH0tO8ZscAFNtzN81gGhvep
Ni61yRU7KjgZQtrF3N5+Tu1yKBflNJbBO05J1kqbdOICIVQtw1sNIa07qrzwu/Cn
vsaLdRYEKbTc1KwW7qZWEPaEUqyW7VWrbHpu4er4Uw8JsPfaQuRfQ9NOn258QiOM
oBUeQoEEh4S6iQOG93PRIhfR0lznn8zMbXSz6qK4aQceeA1O92bUN+3dIQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFAQa/aX5Zi39u6udH6O5qhlpEHleMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IyMzVkMTY4LThhNDYtNDYxYy05OGU2LTQ1ZWM4MDI1NjdkYi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba8ZAwDQYJKoZIhvcNAQELBQADggEBALwxkfqpZ5Nu3oks74vl
RQThDddrIjih+k9JsG6iUc4u9x3mE7Yk00eS+Bhpy/TFh1kKelunHJ8pIcN5alRH
zIjf1OFHDXe5xqmKkkkVMuDs9N3EwVeczUnZXMeEou1V5fpDRjcKx0vTpiPFtyXu
YUqrajoV4a4OBPPr3ZhbE3aKmbBL4v3ne/TIJbD+fJ5G9FCQ3DBBYf8G0DQPrl3Y
aLeVQJZ1/suap/mfgtTpkZrqI+zEFqnv3ia3dXs8ip/fe+bwlSsf5zUYPMCvUuGP
CFH0qWglJLAPD2ESJiT/J22hV/1aTg0GmgzACA9s2qpz12SEV/CrXy0bLB6tz8K0
Pic=
-----END CERTIFICATE-----