Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa
File:                     b352ee85-d0a5-41eb-9945-727b07289bdb.roa (raw, json)
Hash identifier:          j7Pw0QMnzVNF8wk0r6+vToiKUHrA5Cuvp+i3NCwvclQ=
Subject key identifier:   C0:95:FC:A7:4A:DB:22:D5:91:1E:72:CB:C7:50:F1:9B:AD:3D:7C:33
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       31624274F61B88A22EF55DD1912438E0F9883129
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:4880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:62:42:74:f6:1b:88:a2:2e:f5:5d:d1:91:24:38:e0:f9:88:31:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2cb8127a6cac5850aeb3411b0cdfe0f78b42853209b099c755e418416251195f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1a:42:a1:76:69:ab:7c:10:9e:a9:1b:9e:76:
                    f4:1a:19:70:9a:ff:14:21:7e:7c:fb:27:a7:1a:03:
                    c8:cc:d9:fb:f4:1b:d7:ff:a4:7c:84:31:72:bf:de:
                    ff:4c:8a:d7:71:6c:41:9b:af:fb:5f:d3:1b:6c:2b:
                    f2:3d:d9:ec:f7:0c:ac:d7:a9:92:c5:b9:90:05:6a:
                    0f:48:c1:db:6f:5d:58:11:75:08:7f:81:b2:08:d6:
                    22:a5:aa:5a:f1:08:9e:69:51:d2:72:d4:c9:db:51:
                    a3:98:a5:d0:ee:7d:ae:64:2d:40:17:7a:c2:66:58:
                    36:a9:69:4c:7e:fb:ee:7a:18:4b:9b:96:b4:d5:38:
                    3c:dd:0b:aa:c4:a3:4b:cd:be:9e:a1:5f:b0:3d:7c:
                    23:4f:c3:a7:02:9c:4f:03:4c:f2:81:29:7f:b6:23:
                    a5:01:9b:dd:ff:7e:4e:4b:8a:cd:6c:1b:79:cf:25:
                    22:f8:ce:96:0f:2a:4b:81:87:7b:a1:cd:b7:e5:6d:
                    7e:a5:e4:c7:e6:0a:69:ad:53:97:19:d2:49:c0:dd:
                    53:78:3a:7a:48:5c:bb:de:80:32:8e:ab:98:d1:32:
                    46:0a:26:b3:f0:d5:66:7f:44:13:de:3f:c8:67:9e:
                    10:d1:22:0b:43:fd:47:83:a0:e3:7c:ee:f0:a3:1c:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:95:FC:A7:4A:DB:22:D5:91:1E:72:CB:C7:50:F1:9B:AD:3D:7C:33
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b352ee85-d0a5-41eb-9945-727b07289bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:4880::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:be:31:b2:fc:dd:45:e1:88:f0:1c:fd:ed:1a:9c:26:41:
         48:c4:ce:89:78:bc:28:08:95:89:f9:04:fb:7f:16:47:07:63:
         46:e8:ac:3c:e0:8d:51:9a:9a:4c:59:02:19:a6:8b:26:c3:33:
         15:00:68:c1:22:c6:99:29:e8:a6:29:35:69:2c:67:42:28:a5:
         15:11:44:67:06:ea:5c:6c:5d:57:5d:44:0e:89:63:a4:d7:52:
         54:85:2f:6f:9d:aa:41:21:d3:ee:47:1c:17:a8:77:5a:fe:1b:
         fb:1f:fc:e9:0a:f7:46:2b:e2:e5:e3:fd:97:53:c2:0f:0d:80:
         c3:29:0c:9c:5d:3a:58:9d:a8:87:27:48:32:56:d6:37:d7:68:
         be:97:75:fc:fd:8c:fa:49:aa:53:80:6e:55:93:45:c3:04:c5:
         2a:aa:35:89:08:35:d9:95:dc:9d:fd:b1:bd:0c:db:83:b7:c8:
         40:55:aa:74:f7:09:26:1c:3e:78:ca:8c:15:1c:f7:69:85:ab:
         9f:3c:63:2e:f2:aa:a3:8a:50:57:97:43:99:c4:38:b6:78:f2:
         e0:0f:a6:6a:8f:6a:3c:ed:88:1b:ce:76:ea:cc:e9:77:7b:ff:
         89:4b:01:e6:c5:6b:d3:c6:ea:f6:a0:30:3f:2d:bc:5f:8f:03:
         35:d4:ca:90
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUMWJCdPYbiKIu9V3RkSQ44PmIMSkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMmNiODEyN2E2Y2FjNTg1MGFlYjM0
MTFiMGNkZmUwZjc4YjQyODUzMjA5YjA5OWM3NTVlNDE4NDE2MjUxMTk1ZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hpCoXZpq3wQnqkbnnb0Ghlwmv8U
IX58+yenGgPIzNn79BvX/6R8hDFyv97/TIrXcWxBm6/7X9MbbCvyPdns9wys16mS
xbmQBWoPSMHbb11YEXUIf4GyCNYipapa8QieaVHSctTJ21GjmKXQ7n2uZC1AF3rC
Zlg2qWlMfvvuehhLm5a01Tg83QuqxKNLzb6eoV+wPXwjT8OnApxPA0zygSl/tiOl
AZvd/35OS4rNbBt5zyUi+M6WDypLgYd7oc235W1+peTH5gpprVOXGdJJwN1TeDp6
SFy73oAyjquY0TJGCiaz8NVmf0QT3j/IZ54Q0SILQ/1Hg6DjfO7woxz6mwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMCV/KdK2yLVkR5yy8dQ8ZutPXwzMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IzNTJlZTg1LWQwYTUtNDFlYi05OTQ1LTcyN2IwNzI4OWJkYi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaAEiAMA0GCSqGSIb3DQEBCwUAA4IBAQCIXr4xsvzdReGI8Bz9
7RqcJkFIxM6JeLwoCJWJ+QT7fxZHB2NG6Kw84I1RmppMWQIZposmwzMVAGjBIsaZ
KeimKTVpLGdCKKUVEURnBupcbF1XXUQOiWOk11JUhS9vnapBIdPuRxwXqHda/hv7
H/zpCvdGK+Ll4/2XU8IPDYDDKQycXTpYnaiHJ0gyVtY312i+l3X8/Yz6SapTgG5V
k0XDBMUqqjWJCDXZldyd/bG9DNuDt8hAVap09wkmHD54yowVHPdphaufPGMu8qqj
ilBXl0OZxDi2ePLgD6Zqj2o87YgbznbqzOl3e/+JSwHmxWvTxur2oDA/LbxfjwM1
1MqQ
-----END CERTIFICATE-----