Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa
File:                     f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa (raw, json)
Hash identifier:          Fgzx8hayJYEcMigkzbBMiFV5AXQ925+GVENlSpFr5RQ=
Subject key identifier:   66:00:12:21:31:5B:69:DC:46:86:5D:F4:07:47:58:2E:57:5A:8B:F2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       75D75C34EF96B8E23AD88C5C16A0A203B6022C5B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:7080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d7:5c:34:ef:96:b8:e2:3a:d8:8c:5c:16:a0:a2:03:b6:02:2c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=3cdbaac2573ab449f461d5c311d3d8dcfd2a895930e9be1ba91926ee64c3b963, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f7:27:ad:4d:98:ca:01:09:c5:ab:1d:b6:bf:
                    61:bc:4c:b1:e3:b7:ac:5c:00:4c:d9:07:43:49:ff:
                    c8:39:2f:f8:8c:75:eb:db:80:8d:b8:4b:1c:0a:28:
                    db:e2:60:94:77:a5:81:b3:33:31:6c:2f:19:ff:c9:
                    4f:b0:cd:3b:6a:12:80:93:2a:22:46:e8:71:d3:2d:
                    65:95:c1:d4:3e:c8:35:c4:4d:c6:22:2a:aa:10:be:
                    67:09:3f:4f:8a:5b:50:0a:81:2e:6a:64:dc:8d:b9:
                    86:c3:5b:c4:f6:2a:a0:f7:66:59:c2:41:31:4a:2e:
                    c7:c6:7c:4b:5e:a5:c4:6c:14:a0:b3:53:1d:db:eb:
                    51:58:6f:9f:e9:c5:0f:76:b1:69:db:3e:02:3e:99:
                    a9:11:8b:1e:63:ce:ce:6e:e0:b8:5b:38:1a:5c:37:
                    ff:8e:91:5d:59:6f:e7:88:0e:a5:67:5c:21:10:b4:
                    56:9b:60:76:ab:9d:7d:49:a6:13:8a:49:a8:72:ce:
                    41:bb:ba:a1:25:2b:b6:ea:f9:5f:00:39:88:06:8e:
                    94:26:aa:6d:5e:36:e4:9d:89:ae:96:d4:ba:2b:7e:
                    58:84:95:c9:c2:5a:c6:0d:16:13:78:a1:fa:2a:28:
                    56:58:e9:3f:de:6f:f5:82:33:02:f0:0a:48:10:07:
                    10:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:12:21:31:5B:69:DC:46:86:5D:F4:07:47:58:2E:57:5A:8B:F2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f6028875-2fe3-4ddf-9577-aa3cc83dfc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:7080::/46

    Signature Algorithm: sha256WithRSAEncryption
         c8:0f:b5:27:7a:9c:03:35:f6:ad:e9:38:ef:45:c1:cc:34:f9:
         91:04:95:82:48:2c:ce:41:68:11:0e:a3:39:e7:63:85:52:1a:
         cd:d1:1b:07:50:22:f6:2c:05:ba:b7:bf:82:44:af:b1:2e:4b:
         ca:6b:a8:6c:17:d2:8d:a1:fe:ff:27:94:1c:2b:2a:a3:ea:ee:
         79:b0:d4:59:d7:f1:0a:aa:45:04:73:14:61:6e:d1:21:92:35:
         c3:22:bb:2b:aa:bc:5e:6b:a8:8e:55:23:cb:86:94:e9:14:0f:
         ac:ae:ab:12:73:8d:c8:84:56:17:93:b7:de:70:b6:c8:7c:38:
         ff:5d:de:3b:1c:4c:91:62:3a:85:a6:b1:dd:52:30:45:39:86:
         4c:69:fe:48:30:b9:4d:e3:7f:7d:11:15:01:51:e7:da:b0:08:
         9a:10:d2:c5:fe:91:b6:0a:be:4f:a1:f0:f3:a7:af:01:4f:bc:
         25:9e:61:4e:28:a9:19:07:fc:87:85:e2:a6:36:d4:5b:df:a8:
         d1:f3:ee:f0:04:66:26:97:b1:a3:65:84:bf:04:23:0d:20:e3:
         ef:94:26:2c:8c:40:97:e9:d3:69:9f:e1:b1:44:37:ab:73:ce:
         51:10:d9:9c:cd:00:04:f6:95:5e:bc:11:cb:1d:22:b6:a1:22:
         97:d1:c7:6c
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUdddcNO+WuOI62IxcFqCiA7YCLFswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAM2NkYmFhYzI1NzNhYjQ0OWY0NjFk
NWMzMTFkM2Q4ZGNmZDJhODk1OTMwZTliZTFiYTkxOTI2ZWU2NGMzYjk2MzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vcnrU2YygEJxasdtr9hvEyx47es
XABM2QdDSf/IOS/4jHXr24CNuEscCijb4mCUd6WBszMxbC8Z/8lPsM07ahKAkyoi
Ruhx0y1llcHUPsg1xE3GIiqqEL5nCT9PiltQCoEuamTcjbmGw1vE9iqg92ZZwkEx
Si7HxnxLXqXEbBSgs1Md2+tRWG+f6cUPdrFp2z4CPpmpEYseY87ObuC4WzgaXDf/
jpFdWW/niA6lZ1whELRWm2B2q519SaYTikmocs5Bu7qhJSu26vlfADmIBo6UJqpt
XjbknYmultS6K35YhJXJwlrGDRYTeKH6KihWWOk/3m/1gjMC8ApIEAcQIwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFGYAEiExW2ncRoZd9AdHWC5XWovyMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2Y2MDI4ODc1LTJmZTMtNGRkZi05NTc3LWFhM2NjODNkZmM3Yi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAba93CAMA0GCSqGSIb3DQEBCwUAA4IBAQDID7UnepwDNfat6Tjv
RcHMNPmRBJWCSCzOQWgRDqM552OFUhrN0RsHUCL2LAW6t7+CRK+xLkvKa6hsF9KN
of7/J5QcKyqj6u55sNRZ1/EKqkUEcxRhbtEhkjXDIrsrqrxea6iOVSPLhpTpFA+s
rqsSc43IhFYXk7fecLbIfDj/Xd47HEyRYjqFprHdUjBFOYZMaf5IMLlN4399ERUB
UefasAiaENLF/pG2Cr5PofDzp68BT7wlnmFOKKkZB/yHheKmNtRb36jR8+7wBGYm
l7GjZYS/BCMNIOPvlCYsjECX6dNpn+GxRDerc85RENmczQAE9pVevBHLHSK2oSKX
0cds
-----END CERTIFICATE-----