Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d65ab995-dc40-402e-8ae6-67b5a55b9835.roa
File:                     d65ab995-dc40-402e-8ae6-67b5a55b9835.roa (raw, json)
Hash identifier:          0nCbPVSTtWxlEWTtXLYKoXuZT+IeM2EQlr4ucPeLCr4=
Subject key identifier:   B4:31:D5:0A:9D:49:08:71:27:CA:15:DC:FC:C5:A7:37:B7:D9:F4:38
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       39D8DA84616964C62DC02C38C3986B1CBA397183
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d65ab995-dc40-402e-8ae6-67b5a55b9835.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:a040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d8:da:84:61:69:64:c6:2d:c0:2c:38:c3:98:6b:1c:ba:39:71:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d1099fc4e55694d466403042450959f17bb4270fb1b7d8cb7142319121510ef2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:96:e1:ff:b5:d2:e5:25:fd:d2:47:db:15:
                    38:a3:c9:82:a8:fc:19:43:e2:d4:98:04:6b:0c:22:
                    43:85:18:37:21:08:c9:a2:31:6e:42:c8:7d:51:d6:
                    4d:04:3a:2a:f1:cf:fb:2c:65:49:3b:8b:85:c8:28:
                    d8:70:78:60:2d:e3:80:f3:3b:17:ba:24:07:2b:a2:
                    e7:36:1c:4f:bf:1f:46:1c:3d:a5:33:b7:20:52:eb:
                    db:95:08:58:24:ea:10:61:70:21:09:cd:13:f2:94:
                    d8:d6:bd:01:ea:c8:a0:ce:30:dc:39:68:fd:d8:70:
                    61:a1:69:6c:f3:85:29:1c:b6:b1:63:40:ea:da:73:
                    db:1d:30:10:e2:8c:c7:b0:b8:6e:e9:57:0f:03:83:
                    fb:a8:18:a3:e0:50:52:87:81:b4:bd:81:58:73:20:
                    f5:5c:1d:97:e9:81:a4:0d:11:be:41:63:c5:71:8c:
                    a1:91:4c:0a:b5:29:50:3c:12:00:b5:67:50:14:e4:
                    0f:30:29:8f:82:78:1d:ea:66:a8:e9:f9:d4:f1:b7:
                    8b:ce:fd:43:2d:5e:3f:9e:ac:d9:32:7d:3c:7b:8f:
                    58:33:e9:9f:73:76:57:e9:d2:c0:ff:07:73:01:94:
                    8a:08:8a:b2:8c:6a:7e:e6:75:51:d9:ff:74:ef:5e:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:31:D5:0A:9D:49:08:71:27:CA:15:DC:FC:C5:A7:37:B7:D9:F4:38
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d65ab995-dc40-402e-8ae6-67b5a55b9835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:ef:26:b4:4c:5a:b4:48:49:0f:63:ac:f7:3b:21:77:2c:1e:
         4c:34:d4:00:d6:bb:94:94:1d:71:63:32:b0:5f:1c:21:dc:83:
         da:61:fd:8b:36:de:22:f7:24:9d:2c:1c:53:b4:70:92:76:f1:
         e8:54:bd:9c:3d:5d:ff:4f:bd:a4:68:72:e3:30:a7:99:e8:33:
         6f:32:2b:52:0e:9c:6b:78:fd:79:25:45:21:e3:6f:55:7c:b5:
         36:88:60:9c:42:94:d5:3b:fb:0f:54:68:f9:0d:52:e0:40:1b:
         a5:c0:a1:9b:b6:71:b8:81:1b:e0:6f:06:dc:e9:61:f7:4d:32:
         17:d2:69:b2:9d:dc:b3:2d:3f:41:7c:d3:3c:24:1a:af:2a:3d:
         ca:7b:db:4b:3a:4e:5d:5a:fa:b0:0a:24:d0:5c:ab:5f:d0:eb:
         f0:bd:61:4c:37:35:e7:c9:e4:8f:62:d7:de:22:ac:99:87:78:
         70:c8:b9:12:41:fc:34:b5:75:cf:56:ef:ce:97:c7:de:cd:ec:
         0d:12:d1:70:b8:c4:72:14:2b:f4:cd:12:0e:5d:b2:4f:56:7b:
         5b:3b:85:15:b1:05:b5:80:aa:04:60:a8:46:a7:ae:35:69:24:
         a0:40:ce:ab:27:cb:e1:f2:6b:d4:a1:e8:79:cb:7a:1b:ec:d3:
         05:ed:48:f6
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUOdjahGFpZMYtwCw4w5hrHLo5cYMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZDEwOTlmYzRlNTU2OTRkNDY2NDAz
MDQyNDUwOTU5ZjE3YmI0MjcwZmIxYjdkOGNiNzE0MjMxOTEyMTUxMGVmMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WW4f+10uUl/dJH2xU4o8mCqPwZ
Q+LUmARrDCJDhRg3IQjJojFuQsh9UdZNBDoq8c/7LGVJO4uFyCjYcHhgLeOA8zsX
uiQHK6LnNhxPvx9GHD2lM7cgUuvblQhYJOoQYXAhCc0T8pTY1r0B6sigzjDcOWj9
2HBhoWls84UpHLaxY0Dq2nPbHTAQ4ozHsLhu6VcPA4P7qBij4FBSh4G0vYFYcyD1
XB2X6YGkDRG+QWPFcYyhkUwKtSlQPBIAtWdQFOQPMCmPgngd6mao6fnU8beLzv1D
LV4/nqzZMn08e49YM+mfc3ZX6dLA/wdzAZSKCIqyjGp+5nVR2f90714L3wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFLQx1QqdSQhxJ8oV3PzFpze32fQ4MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Q2NWFiOTk1LWRjNDAtNDAyZS04YWU2LTY3YjVhNTViOTgzNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9KBAMA0GCSqGSIb3DQEBCwUAA4IBAQB07ya0TFq0SEkPY6z3
OyF3LB5MNNQA1ruUlB1xYzKwXxwh3IPaYf2LNt4i9ySdLBxTtHCSdvHoVL2cPV3/
T72kaHLjMKeZ6DNvMitSDpxreP15JUUh429VfLU2iGCcQpTVO/sPVGj5DVLgQBul
wKGbtnG4gRvgbwbc6WH3TTIX0mmyndyzLT9BfNM8JBqvKj3Ke9tLOk5dWvqwCiTQ
XKtf0OvwvWFMNzXnyeSPYtfeIqyZh3hwyLkSQfw0tXXPVu/Ol8fezewNEtFwuMRy
FCv0zRIOXbJPVntbO4UVsQW1gKoEYKhGp641aSSgQM6rJ8vh8mvUoeh5y3ob7NMF
7Uj2
-----END CERTIFICATE-----