Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa
File:                     f38aee75-1c20-4c34-b0d4-c226c1afc502.roa (raw, json)
Hash identifier:          aQrH1DsgJk6O4y+BIn0zg0YXLFTdSG3dyeFUnnkkNBg=
Subject key identifier:   00:59:B4:90:74:B3:C7:40:88:A3:17:13:0A:81:74:91:7D:63:84:64
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4B6A315E2415912F2C715EF4F7DD8FE32A3F5A3B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:9040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:31:5e:24:15:91:2f:2c:71:5e:f4:f7:dd:8f:e3:2a:3f:5a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f5e1e6e2b74a8ee8ebea56e80af66d34b2668b6bc924de6a37c8133484c92bb9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:3b:65:ff:97:36:91:37:7e:19:95:21:f4:
                    40:c7:1a:32:fc:d9:36:37:4a:d2:13:25:8d:7f:8d:
                    23:0e:9c:ba:16:a8:95:98:5b:7b:f9:1a:8f:81:58:
                    e9:10:de:f5:1f:e7:0b:25:84:14:e4:4d:f5:eb:4c:
                    1c:55:ff:e0:bc:5a:ba:e1:ee:92:4d:55:26:9e:26:
                    cd:f0:e0:0e:69:7d:d9:12:91:8e:ad:1b:74:76:9c:
                    7f:54:63:6d:d4:57:42:21:2b:45:50:a9:92:87:31:
                    0f:3b:9f:60:82:cf:0b:58:fd:61:70:c3:76:e6:cd:
                    02:24:be:1d:20:c6:01:f6:82:81:f6:71:c9:29:1e:
                    8a:81:1a:df:aa:b0:e6:e5:6d:92:5b:f4:e3:11:6e:
                    09:c9:e9:a4:16:89:00:89:5b:47:bc:71:b8:f3:71:
                    9f:4f:0d:0b:36:0f:a8:0b:86:86:ef:49:15:20:b2:
                    73:52:80:06:f7:02:20:41:8b:ac:07:1d:7e:29:25:
                    16:8f:ef:3b:d8:db:60:e0:6f:39:cf:71:8d:dd:20:
                    72:e7:1b:f9:35:5a:e5:32:21:ea:94:fb:0d:d6:d3:
                    58:43:40:9b:61:d6:94:b1:46:bd:09:50:b1:a0:14:
                    17:01:95:df:71:76:7c:fd:c3:47:6f:a6:45:8d:eb:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:59:B4:90:74:B3:C7:40:88:A3:17:13:0A:81:74:91:7D:63:84:64
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f38aee75-1c20-4c34-b0d4-c226c1afc502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:1d:3d:8e:df:9c:da:2c:cd:5a:22:66:21:c6:a5:fd:74:a7:
         1c:90:31:3c:c5:e8:ce:5f:f7:c4:c0:a5:27:44:91:c2:0b:31:
         13:48:45:0c:d3:a8:71:62:a5:a7:1d:83:61:11:b0:6d:b1:d1:
         de:74:2f:6c:c2:af:c8:80:15:bd:bc:df:72:3f:05:5e:60:15:
         c6:b2:93:a8:8d:03:1e:d3:09:35:50:e3:2c:72:64:41:0b:8b:
         b2:32:ad:54:48:f2:87:8d:ec:34:72:0a:29:f8:13:fe:2b:c3:
         1f:72:32:dc:ff:00:25:2e:d6:02:cd:f0:89:eb:cf:ae:84:60:
         b4:9a:6c:1a:58:5e:75:d1:60:2f:ea:dd:95:4d:df:93:58:24:
         2d:87:57:d1:3a:6d:d6:52:48:bf:4e:55:3f:22:4b:fe:63:04:
         54:25:23:b9:29:f5:8c:4c:ab:a9:84:e9:96:25:2f:1a:3c:23:
         be:14:ea:1b:16:50:7d:b5:7f:c8:02:af:77:2b:42:27:3b:21:
         24:e0:e2:71:28:37:bd:fb:1a:b2:a2:a0:9b:6a:c6:9e:29:91:
         d2:da:d8:67:a6:e8:85:18:0b:39:11:4e:c0:de:63:f4:63:0b:
         86:c7:3a:7b:e7:d2:55:a9:2a:90:5d:27:4c:c1:96:4e:a5:d9:
         79:e7:d3:79
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUS2oxXiQVkS8scV70992P4yo/WjswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZjVlMWU2ZTJiNzRhOGVlOGViZWE1
NmU4MGFmNjZkMzRiMjY2OGI2YmM5MjRkZTZhMzdjODEzMzQ4NGM5MmJiOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RE7Zf+XNpE3fhmVIfRAxxoy/Nk2
N0rSEyWNf40jDpy6FqiVmFt7+RqPgVjpEN71H+cLJYQU5E3160wcVf/gvFq64e6S
TVUmnibN8OAOaX3ZEpGOrRt0dpx/VGNt1FdCIStFUKmShzEPO59ggs8LWP1hcMN2
5s0CJL4dIMYB9oKB9nHJKR6KgRrfqrDm5W2SW/TjEW4JyemkFokAiVtHvHG483Gf
Tw0LNg+oC4aG70kVILJzUoAG9wIgQYusBx1+KSUWj+872Ntg4G85z3GN3SBy5xv5
NVrlMiHqlPsN1tNYQ0CbYdaUsUa9CVCxoBQXAZXfcXZ8/cNHb6ZFjevpiwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFABZtJB0s8dAiKMXEwqBdJF9Y4RkMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2YzOGFlZTc1LTFjMjAtNGMzNC1iMGQ0LWMyMjZjMWFmYzUwMi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba/5BAMA0GCSqGSIb3DQEBCwUAA4IBAQCfHT2O35zaLM1aImYh
xqX9dKcckDE8xejOX/fEwKUnRJHCCzETSEUM06hxYqWnHYNhEbBtsdHedC9swq/I
gBW9vN9yPwVeYBXGspOojQMe0wk1UOMscmRBC4uyMq1USPKHjew0cgop+BP+K8Mf
cjLc/wAlLtYCzfCJ68+uhGC0mmwaWF510WAv6t2VTd+TWCQth1fROm3WUki/TlU/
Ikv+YwRUJSO5KfWMTKuphOmWJS8aPCO+FOobFlB9tX/IAq93K0InOyEk4OJxKDe9
+xqyoqCbasaeKZHS2thnpuiFGAs5EU7A3mP0YwuGxzp759JVqSqQXSdMwZZOpdl5
59N5
-----END CERTIFICATE-----