Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa
File:                     bf8b7b71-dca2-49ff-944e-38a257b8554f.roa (raw, json)
Hash identifier:          daDBYuuZ4ROdmM1iCgAn3Xn9C2Pxm/PTR00mrannshs=
Subject key identifier:   57:72:9E:0F:B4:5A:FE:10:AA:FE:77:40:67:20:FA:84:A8:92:DA:5B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7A26199669F35FA1D15395C43595A1DCEA4C0257
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:26:19:96:69:f3:5f:a1:d1:53:95:c4:35:95:a1:dc:ea:4c:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=48e3dfa4333a2100064902a571cc8b289d02c051d3da3fdf38df0044b69a970b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:35:7f:10:f3:02:1f:3e:a2:d3:3a:7e:2b:
                    10:f2:74:24:eb:64:ef:f5:20:ec:a3:03:77:82:02:
                    8b:14:db:85:30:e2:d1:e4:fc:e7:9e:b6:fd:6e:ce:
                    d4:15:d4:ab:83:ac:44:73:53:07:05:3b:6a:a8:d8:
                    d8:42:9e:12:b0:57:1d:ac:f3:ce:55:40:10:c0:b7:
                    d0:37:e7:43:33:e4:d9:61:26:97:8c:23:f2:26:ea:
                    2a:24:c0:65:57:bd:48:84:ff:3d:ee:a4:7d:14:f4:
                    29:ec:63:4d:7d:f3:21:8c:34:87:e8:47:00:56:5a:
                    10:ba:95:c6:a5:e3:cd:69:29:74:69:09:0a:34:8c:
                    36:63:91:56:b9:e2:2e:0f:73:57:b5:e1:ab:c3:88:
                    e4:60:36:f8:a2:d2:4a:0a:1e:8e:f7:41:61:a4:38:
                    9b:b0:e0:14:56:28:53:bc:f4:0b:a9:7a:03:f0:2c:
                    70:a2:9a:6f:34:c6:9c:3f:b2:2f:10:de:48:81:62:
                    66:cd:0f:fa:06:55:9c:a5:64:0c:6b:c5:5b:7a:84:
                    20:19:b2:0c:ab:43:83:b7:e6:d5:1d:88:90:9c:f2:
                    12:41:3a:61:77:c3:a0:37:6a:22:95:8f:33:b4:90:
                    5d:c0:30:bb:c4:85:d5:d7:05:2d:ac:33:63:c3:6a:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:9E:0F:B4:5A:FE:10:AA:FE:77:40:67:20:FA:84:A8:92:DA:5B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/bf8b7b71-dca2-49ff-944e-38a257b8554f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:83:66:5f:85:2c:26:01:83:7a:ed:6e:67:3b:b0:59:01:68:
         81:f3:ce:5c:6a:ed:7a:f0:bb:e3:74:4a:26:55:56:d6:d9:12:
         65:ad:f5:eb:84:06:e7:20:0a:27:a0:0f:a3:40:a8:1e:79:28:
         4f:a8:54:68:d5:2f:4b:6b:4e:9c:3b:c7:a1:a1:e3:44:e8:c2:
         e5:d7:19:69:86:83:e2:41:15:9a:5c:75:4d:70:b7:28:f3:db:
         d3:8c:6b:6c:67:ee:83:5f:cb:13:d9:47:a3:b1:65:9e:7f:f7:
         52:bd:b6:80:bd:2a:cd:5f:16:04:6b:6b:ce:84:2f:40:75:af:
         4f:61:d5:e6:eb:70:19:e6:4c:5d:21:8a:64:80:ec:05:0a:a0:
         da:ef:fa:50:0a:71:41:d6:d6:9e:20:68:25:8e:fd:46:ad:d8:
         13:88:54:3a:fb:ce:dc:8f:50:2e:16:23:08:df:32:87:ec:f7:
         bb:ca:38:88:eb:70:a1:6c:2b:67:d6:5e:a6:0a:c4:c6:ef:7f:
         95:83:cc:c2:df:66:08:37:ff:48:a8:ed:c0:a4:0d:ee:47:01:
         d2:4c:3f:08:78:09:da:96:9c:41:3e:09:83:7c:02:20:8d:23:
         9a:50:72:63:a3:ae:78:6c:ec:b4:a8:eb:43:a5:f7:4c:d2:0d:
         33:57:7b:67
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUeiYZlmnzX6HRU5XENZWh3OpMAlcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNANDhlM2RmYTQzMzNhMjEwMDA2NDkw
MmE1NzFjYzhiMjg5ZDAyYzA1MWQzZGEzZmRmMzhkZjAwNDRiNjlhOTcwYjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DI1fxDzAh8+otM6fisQ8nQk62Tv
9SDsowN3ggKLFNuFMOLR5Pznnrb9bs7UFdSrg6xEc1MHBTtqqNjYQp4SsFcdrPPO
VUAQwLfQN+dDM+TZYSaXjCPyJuoqJMBlV71IhP897qR9FPQp7GNNffMhjDSH6EcA
VloQupXGpePNaSl0aQkKNIw2Y5FWueIuD3NXteGrw4jkYDb4otJKCh6O90FhpDib
sOAUVihTvPQLqXoD8CxwoppvNMacP7IvEN5IgWJmzQ/6BlWcpWQMa8VbeoQgGbIM
q0ODt+bVHYiQnPISQTphd8OgN2oilY8ztJBdwDC7xIXV1wUtrDNjw2oGbQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFFdyng+0Wv4Qqv53QGcg+oSoktpbMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2JmOGI3YjcxLWRjYTItNDlmZi05NDRlLTM4YTI1N2I4NTU0Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaOIDAMA0GCSqGSIb3DQEBCwUAA4IBAQBQg2ZfhSwmAYN67W5n
O7BZAWiB885cau168LvjdEomVVbW2RJlrfXrhAbnIAonoA+jQKgeeShPqFRo1S9L
a06cO8ehoeNE6MLl1xlphoPiQRWaXHVNcLco89vTjGtsZ+6DX8sT2UejsWWef/dS
vbaAvSrNXxYEa2vOhC9Ada9PYdXm63AZ5kxdIYpkgOwFCqDa7/pQCnFB1taeIGgl
jv1GrdgTiFQ6+87cj1AuFiMI3zKH7Pe7yjiI63ChbCtn1l6mCsTG73+Vg8zC32YI
N/9IqO3ApA3uRwHSTD8IeAnalpxBPgmDfAIgjSOaUHJjo654bOy0qOtDpfdM0g0z
V3tn
-----END CERTIFICATE-----