Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f12b20dc-a186-40d2-a88f-89c1cd3fd6ba.roa
File:                     f12b20dc-a186-40d2-a88f-89c1cd3fd6ba.roa (raw, json)
Hash identifier:          gtqxjNTkAcoZjq60/3/zvApPyCWVEhWiGWx6kxt1t44=
Subject key identifier:   C9:7C:22:AF:31:00:18:69:DB:D6:E1:44:AB:D9:98:66:21:2D:06:D4
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       470057C08D6586A1F34A9FC43C908E397C36159A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f12b20dc-a186-40d2-a88f-89c1cd3fd6ba.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:2800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:00:57:c0:8d:65:86:a1:f3:4a:9f:c4:3c:90:8e:39:7c:36:15:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c544e6a41d08b790c7c4283c18998625dbd85a2c056f5b77c500e262ca011607, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:9c:b1:2b:38:a2:32:07:5c:d4:69:42:1a:
                    b7:47:c7:3c:8b:d2:43:2e:e4:13:cf:d5:5b:e8:db:
                    94:87:35:44:42:0d:e7:11:67:87:79:3d:12:4e:81:
                    d5:24:fe:4c:48:6e:68:de:d7:81:37:72:56:29:31:
                    81:9e:b4:8e:61:35:89:68:5c:54:9f:bc:d1:eb:90:
                    e9:ad:7b:c9:17:11:7e:5b:97:4a:38:41:a8:0f:17:
                    69:cd:c1:c0:95:45:b7:05:50:bf:ce:24:d0:21:34:
                    de:cb:80:ec:c5:5c:59:a5:3c:37:ec:f2:07:f9:94:
                    1a:91:54:ab:0f:9f:6e:48:b3:86:83:6f:1c:f5:67:
                    c1:83:94:dd:4a:1b:fa:77:b0:8f:f1:2c:8b:2c:98:
                    ba:70:ac:ea:ba:d0:1b:ca:05:e9:28:67:6d:c5:f6:
                    9e:b4:99:0c:30:fb:77:e5:36:4b:a9:65:55:9a:c4:
                    9c:92:0b:00:5b:78:f8:d1:1d:27:eb:71:8a:36:8a:
                    6e:29:dc:16:57:fa:06:82:63:0e:b0:4e:49:a4:cf:
                    d2:65:0e:e6:5c:9a:c1:c9:76:bd:74:17:d2:31:cf:
                    0a:39:20:47:42:b2:eb:d4:3e:9c:6c:a1:0f:5a:a7:
                    25:e0:b3:ce:36:05:c0:ea:03:8a:c2:84:74:77:ff:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7C:22:AF:31:00:18:69:DB:D6:E1:44:AB:D9:98:66:21:2D:06:D4
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f12b20dc-a186-40d2-a88f-89c1cd3fd6ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:ba:bc:5f:a2:d9:cd:23:bc:44:79:4a:ed:1f:3a:53:6b:e4:
         a7:87:57:64:5f:f5:4d:1f:00:e7:d0:04:d5:16:63:2f:7a:ee:
         99:d8:9d:0c:49:29:45:7b:a5:41:92:06:00:fc:47:84:a7:31:
         55:cf:4a:ff:7b:52:12:0d:fc:da:1c:82:42:36:c0:3b:ff:bb:
         2f:0e:c5:93:34:a5:eb:22:3b:b6:09:51:cf:80:39:e7:06:c5:
         dc:04:c6:42:eb:cd:ef:76:4c:d5:59:da:54:d7:27:35:10:fb:
         28:e0:79:97:a4:0b:7a:ce:9a:a7:70:9e:ef:e6:7a:36:f5:c4:
         c8:35:86:5f:ca:2f:f2:a2:f8:1e:b5:be:11:20:f6:f6:67:77:
         0f:28:56:b5:f2:65:94:9f:1c:c1:f0:a6:5c:be:d5:70:90:7d:
         06:43:4a:d0:45:43:31:30:82:cb:d7:61:97:c5:3f:7c:54:e1:
         f0:75:b4:21:eb:08:a4:5a:46:d3:94:59:ce:20:4f:f2:fe:50:
         14:3e:20:b9:9c:82:af:47:7d:b6:a3:11:8c:e5:6d:dd:fa:f4:
         70:49:e8:6f:2a:5a:8d:35:ce:26:50:84:fc:31:30:35:3e:35:
         b1:e7:b7:6b:7c:66:06:b5:d5:d2:26:74:66:73:9d:e0:b1:af:
         2e:c5:56:0c
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIURwBXwI1lhqHzSp/EPJCOOXw2FZowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYzU0NGU2YTQxZDA4Yjc5MGM3YzQy
ODNjMTg5OTg2MjVkYmQ4NWEyYzA1NmY1Yjc3YzUwMGUyNjJjYTAxMTYwNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIycsSs4ojIHXNRpQhq3R8c8i9JD
LuQTz9Vb6NuUhzVEQg3nEWeHeT0SToHVJP5MSG5o3teBN3JWKTGBnrSOYTWJaFxU
n7zR65DprXvJFxF+W5dKOEGoDxdpzcHAlUW3BVC/ziTQITTey4DsxVxZpTw37PIH
+ZQakVSrD59uSLOGg28c9WfBg5TdShv6d7CP8SyLLJi6cKzqutAbygXpKGdtxfae
tJkMMPt35TZLqWVVmsSckgsAW3j40R0n63GKNopuKdwWV/oGgmMOsE5JpM/SZQ7m
XJrByXa9dBfSMc8KOSBHQrLr1D6cbKEPWqcl4LPONgXA6gOKwoR0d//M0QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFMl8Iq8xABhp29bhRKvZmGYhLQbUMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2YxMmIyMGRjLWExODYtNDBkMi1hODhmLTg5YzFjZDNmZDZiYS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba+ygwDQYJKoZIhvcNAQELBQADggEBAAa6vF+i2c0jvER5Su0f
OlNr5KeHV2Rf9U0fAOfQBNUWYy967pnYnQxJKUV7pUGSBgD8R4SnMVXPSv97UhIN
/NocgkI2wDv/uy8OxZM0pesiO7YJUc+AOecGxdwExkLrze92TNVZ2lTXJzUQ+yjg
eZekC3rOmqdwnu/mejb1xMg1hl/KL/Ki+B61vhEg9vZndw8oVrXyZZSfHMHwply+
1XCQfQZDStBFQzEwgsvXYZfFP3xU4fB1tCHrCKRaRtOUWc4gT/L+UBQ+ILmcgq9H
fbajEYzlbd369HBJ6G8qWo01ziZQhPwxMDU+NbHnt2t8Zga11dImdGZzneCxry7F
Vgw=
-----END CERTIFICATE-----