Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa
File:                     e69d97aa-b68a-4fc2-846c-38f589c4786e.roa (raw, json)
Hash identifier:          W7Ya5Q1qnP/Ecui9gTz+FbmGOpQwOj1i+AyY6Qu6VGs=
Subject key identifier:   8E:15:45:B6:BF:62:68:E9:6A:27:D4:CE:F3:1B:9E:18:86:C4:43:D3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7D1A5C4AC743E5C6E642D2450677549B04F95BD7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:7040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:5c:4a:c7:43:e5:c6:e6:42:d2:45:06:77:54:9b:04:f9:5b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2eb4993928099573e0c1cccd6418ebd55e22616c93b1b02f4c64a2f24e614668, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:b8:72:4d:d7:c8:bb:39:96:62:85:4e:78:
                    d7:a4:07:b7:a0:6b:a8:95:48:55:7e:84:0b:9b:a3:
                    20:d7:41:99:18:5e:2c:fd:a5:72:09:c3:74:1d:4a:
                    2f:0e:a4:9b:8c:d0:ec:75:e3:62:11:cd:a8:1e:d5:
                    a2:f5:0a:bf:52:df:91:dd:7d:f9:73:17:25:16:03:
                    97:85:85:2a:0d:41:68:c6:c0:3a:4b:0e:cf:87:f1:
                    3f:7f:ce:32:85:c5:50:5e:94:27:ee:f0:7c:47:82:
                    ce:15:84:f9:9e:23:00:fe:49:c6:16:35:9a:f1:14:
                    47:91:bf:b0:e3:45:1d:18:3e:59:bb:d5:c0:10:fe:
                    29:a2:57:94:b7:d8:46:fc:9f:9f:44:52:89:28:b8:
                    91:82:2b:cf:e2:b2:b1:05:58:76:c8:84:d5:66:ed:
                    db:67:91:58:c5:75:74:e9:8e:79:48:93:43:d7:4c:
                    4c:5c:39:3c:27:59:46:e0:35:7e:30:e8:b6:1e:82:
                    b9:27:6e:d4:41:e7:c9:9b:37:0e:a2:63:92:c8:64:
                    f7:ea:f1:03:b9:e9:1b:0a:98:f4:24:44:9a:62:86:
                    d9:a6:8e:08:88:38:a4:fc:6a:0d:53:b5:c0:c7:9d:
                    9a:8d:26:23:d1:84:dd:5a:78:4a:30:51:a2:94:7d:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:45:B6:BF:62:68:E9:6A:27:D4:CE:F3:1B:9E:18:86:C4:43:D3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e69d97aa-b68a-4fc2-846c-38f589c4786e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:7040::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:66:40:58:48:f1:59:4b:4c:b9:7f:7d:85:39:9e:e1:8b:c8:
         60:c8:77:35:34:8f:af:6d:8b:98:2e:00:8a:c0:07:d1:a3:5a:
         21:b3:f8:1c:16:4f:c7:6d:72:d3:a9:c0:53:10:63:cf:97:04:
         dd:72:21:9f:a8:5d:79:e5:7c:96:92:45:88:3e:6e:e1:96:a1:
         49:e3:01:d5:fb:f8:1b:54:05:ab:80:21:44:5b:a5:7c:c2:11:
         a9:bb:d3:c2:65:cf:31:8d:31:99:b7:82:f2:fd:6f:1f:7a:4b:
         d2:fc:43:32:c3:92:12:31:76:6b:14:23:ed:d5:ba:1c:f0:1f:
         70:21:9c:89:02:5d:c5:b3:06:f9:00:3b:95:05:5e:89:51:b1:
         ff:c6:85:98:61:95:41:47:0f:49:0d:0a:e3:5b:c1:43:c3:94:
         7e:33:46:83:c4:09:de:b0:c0:7a:38:2c:1a:ff:fa:10:18:0b:
         1a:e2:48:a4:02:83:60:35:f6:3a:a1:f4:0e:0e:6b:86:bf:50:
         72:01:42:83:61:b7:e7:1b:39:7e:d0:a6:5f:99:d7:b6:9c:01:
         3a:c6:9a:35:87:2c:ae:5f:42:62:c0:2a:49:8f:58:37:94:6f:
         59:1e:7c:01:0f:89:7d:16:aa:83:38:0b:a4:a6:6c:08:8a:ff:
         33:2e:c1:e7
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUfRpcSsdD5cbmQtJFBndUmwT5W9cwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMmViNDk5MzkyODA5OTU3M2UwYzFj
Y2NkNjQxOGViZDU1ZTIyNjE2YzkzYjFiMDJmNGM2NGEyZjI0ZTYxNDY2ODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuq4ck3XyLs5lmKFTnjXpAe3oGuo
lUhVfoQLm6Mg10GZGF4s/aVyCcN0HUovDqSbjNDsdeNiEc2oHtWi9Qq/Ut+R3X35
cxclFgOXhYUqDUFoxsA6Sw7Ph/E/f84yhcVQXpQn7vB8R4LOFYT5niMA/knGFjWa
8RRHkb+w40UdGD5Zu9XAEP4poleUt9hG/J+fRFKJKLiRgivP4rKxBVh2yITVZu3b
Z5FYxXV06Y55SJND10xMXDk8J1lG4DV+MOi2HoK5J27UQefJmzcOomOSyGT36vED
uekbCpj0JESaYobZpo4IiDik/GoNU7XAx52ajSYj0YTdWnhKMFGilH14GwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFI4VRba/YmjpaifUzvMbnhiGxEPTMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2U2OWQ5N2FhLWI2OGEtNGZjMi04NDZjLTM4ZjU4OWM0Nzg2ZS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaYXBAMA0GCSqGSIb3DQEBCwUAA4IBAQC1ZkBYSPFZS0y5f32F
OZ7hi8hgyHc1NI+vbYuYLgCKwAfRo1ohs/gcFk/HbXLTqcBTEGPPlwTdciGfqF15
5XyWkkWIPm7hlqFJ4wHV+/gbVAWrgCFEW6V8whGpu9PCZc8xjTGZt4Ly/W8fekvS
/EMyw5ISMXZrFCPt1boc8B9wIZyJAl3Fswb5ADuVBV6JUbH/xoWYYZVBRw9JDQrj
W8FDw5R+M0aDxAnesMB6OCwa//oQGAsa4kikAoNgNfY6ofQODmuGv1ByAUKDYbfn
Gzl+0KZfmde2nAE6xpo1hyyuX0JiwCpJj1g3lG9ZHnwBD4l9FqqDOAukpmwIiv8z
LsHn
-----END CERTIFICATE-----