Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f045807a-10c9-445d-bbef-9c8e8bddb45f.roa
File:                     f045807a-10c9-445d-bbef-9c8e8bddb45f.roa (raw, json)
Hash identifier:          /6sppflxyTsGx/nsq2bawzlTdpZi9r3ev+fK2RWanQc=
Subject key identifier:   2D:2D:79:3B:B3:B4:53:07:C9:D0:55:42:AA:B0:92:CD:82:09:59:B1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       43D514679660A9D4EFA7E445C480BB3A91363CC9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f045807a-10c9-445d-bbef-9c8e8bddb45f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:20c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d5:14:67:96:60:a9:d4:ef:a7:e4:45:c4:80:bb:3a:91:36:3c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8f67902e4d02508058afdbd6838c522c2bf1a5718149ff0e03d3f4778614da9b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:24:02:bf:c3:63:8c:e7:48:38:84:f7:37:
                    5d:80:e5:e7:4e:90:62:cb:fc:c3:9c:44:ab:8f:53:
                    46:39:3a:93:3f:4f:fb:2d:14:30:12:9b:40:42:ed:
                    de:40:80:55:ac:bb:79:00:9c:c1:c9:1c:61:f8:a9:
                    61:5d:c1:e0:98:82:4f:21:05:95:aa:cb:e6:46:01:
                    ac:05:a8:7b:10:22:0c:ef:0c:2b:28:a8:52:d9:46:
                    30:8e:f9:aa:20:96:90:2d:b3:73:61:7d:79:a5:ea:
                    5f:f4:55:c3:5c:1b:2c:49:b9:e3:a1:7a:57:06:61:
                    12:db:81:e2:97:51:e9:29:0b:36:6e:89:50:87:16:
                    86:de:c1:16:c4:59:03:c4:68:fa:53:01:a6:82:db:
                    80:46:dd:66:97:59:4d:e6:aa:8d:6d:9e:03:88:1f:
                    a1:48:b6:c2:66:d8:5d:25:3e:8f:6d:e7:b3:0b:0a:
                    9d:d0:60:0f:f6:63:b7:5f:43:6f:d4:8e:be:ea:9f:
                    a7:af:a1:51:91:c6:84:84:ec:72:18:2a:ec:39:34:
                    6b:65:57:d5:1c:02:65:e3:24:fb:d5:b6:df:9b:be:
                    e0:7c:68:08:df:0b:f1:f9:d0:cd:e5:a2:4c:ec:ac:
                    44:bc:28:e4:1a:e1:83:d5:5d:dd:ee:e0:05:a1:1d:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:79:3B:B3:B4:53:07:C9:D0:55:42:AA:B0:92:CD:82:09:59:B1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f045807a-10c9-445d-bbef-9c8e8bddb45f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:9c:bc:78:64:7f:55:76:8a:9c:39:2d:55:a1:88:1c:21:
         70:bf:a3:9c:88:e1:f5:47:f9:6d:1a:24:fa:b7:3b:34:35:51:
         2f:7c:3b:9d:4d:e6:d9:57:d4:5e:1a:c0:4a:1f:27:3e:44:82:
         92:cc:31:c3:08:46:dd:d6:20:ac:d2:d4:e6:99:b0:58:1c:16:
         04:78:67:fc:8e:84:09:33:ff:e2:4d:3a:f7:00:55:1a:d3:50:
         84:7a:06:01:b0:4a:9a:51:5e:08:45:97:1e:05:70:ae:d6:2a:
         e9:6d:db:d5:ad:45:9f:75:f6:11:84:bf:13:47:7d:13:7f:ed:
         b7:c8:8a:a7:6d:0f:b0:68:55:61:d0:86:23:81:f1:49:9c:e3:
         51:b5:84:a2:5a:92:c6:dd:59:a3:53:cf:c2:ae:6a:f8:9a:20:
         34:31:bc:b7:2c:3d:32:d6:12:03:b2:b1:c1:ad:37:32:b4:58:
         40:f3:38:b3:29:3b:73:f9:9c:ac:3e:c2:23:52:23:a9:7f:af:
         e8:73:c9:c0:78:49:24:d3:35:37:fc:b1:0c:8c:f2:bc:f6:f6:
         45:7c:27:a4:77:7d:f6:3d:db:27:14:f3:ee:7a:80:9d:cb:62:
         b7:72:b7:f2:37:6f:03:ae:21:60:35:a3:4d:5f:31:9e:e0:37:
         38:ac:04:15
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUQ9UUZ5ZgqdTvp+RFxIC7OpE2PMkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAOGY2NzkwMmU0ZDAyNTA4MDU4YWZk
YmQ2ODM4YzUyMmMyYmYxYTU3MTgxNDlmZjBlMDNkM2Y0Nzc4NjE0ZGE5YjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ckAr/DY4znSDiE9zddgOXnTpBi
y/zDnESrj1NGOTqTP0/7LRQwEptAQu3eQIBVrLt5AJzByRxh+KlhXcHgmIJPIQWV
qsvmRgGsBah7ECIM7wwrKKhS2UYwjvmqIJaQLbNzYX15pepf9FXDXBssSbnjoXpX
BmES24Hil1HpKQs2bolQhxaG3sEWxFkDxGj6UwGmgtuARt1ml1lN5qqNbZ4DiB+h
SLbCZthdJT6PbeezCwqd0GAP9mO3X0Nv1I6+6p+nr6FRkcaEhOxyGCrsOTRrZVfV
HAJl4yT71bbfm77gfGgI3wvx+dDN5aJM7KxEvCjkGuGD1V3d7uAFoR38pQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFC0teTuztFMHydBVQqqwks2CCVmxMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2YwNDU4MDdhLTEwYzktNDQ1ZC1iYmVmLTljOGU4YmRkYjQ1Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9CDAMA0GCSqGSIb3DQEBCwUAA4IBAQAAsZy8eGR/VXaKnDkt
VaGIHCFwv6OciOH1R/ltGiT6tzs0NVEvfDudTebZV9ReGsBKHyc+RIKSzDHDCEbd
1iCs0tTmmbBYHBYEeGf8joQJM//iTTr3AFUa01CEegYBsEqaUV4IRZceBXCu1irp
bdvVrUWfdfYRhL8TR30Tf+23yIqnbQ+waFVh0IYjgfFJnONRtYSiWpLG3VmjU8/C
rmr4miA0Mby3LD0y1hIDsrHBrTcytFhA8zizKTtz+ZysPsIjUiOpf6/oc8nAeEkk
0zU3/LEMjPK89vZFfCekd332PdsnFPPueoCdy2K3crfyN28DriFgNaNNXzGe4Dc4
rAQV
-----END CERTIFICATE-----