Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa
File:                     fbbb78e0-9689-404e-873b-b6e1797d5078.roa (raw, json)
Hash identifier:          h8K+3snPWg5ReNYQZhc8JJoauwv+wF1XI0mpsKloKl4=
Subject key identifier:   BE:E3:1C:F6:7C:2F:59:2E:59:94:DE:8E:B5:09:97:8D:8A:38:90:7B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4D220A1DF9E8B4CB9B3E0EAE10202CB5A968131C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1e::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:0a:1d:f9:e8:b4:cb:9b:3e:0e:ae:10:20:2c:b5:a9:68:13:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=0125bde013aa1ea3f2ebf650b198fcf2e4c13a264081e5772f2ef86aef18cfc2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:16:f2:e8:2b:f0:91:74:27:96:59:d8:68:
                    19:34:e1:8b:4d:48:a9:02:79:af:6c:60:6d:ca:80:
                    74:dc:8f:c8:ab:cf:be:f4:76:0e:15:17:81:ad:0b:
                    d5:28:e2:2c:a2:a6:cb:21:ab:67:5a:a3:ca:69:06:
                    4c:e5:9a:fe:b8:d9:23:c5:20:da:d6:83:16:0d:1a:
                    61:48:b0:ef:48:25:b8:99:88:8a:07:54:f3:4a:42:
                    7b:dc:d2:cf:f0:18:df:1b:4e:28:6e:d2:2c:bb:4b:
                    3b:6a:25:eb:64:ca:f8:22:61:2f:ff:35:9f:ad:99:
                    57:30:c6:39:17:22:f0:7c:77:94:0f:4b:97:fb:e9:
                    2b:32:a1:cd:89:d5:15:51:68:75:37:b8:56:03:c3:
                    5b:24:62:d8:90:d5:ce:0d:30:21:36:0d:8b:05:fb:
                    83:a7:0a:91:1c:c5:01:4a:99:57:91:0a:f3:ef:cc:
                    49:52:9f:4e:f3:98:33:c7:15:ff:65:ff:33:7e:3c:
                    89:4d:b2:3b:9b:7f:c9:73:a2:cd:e7:ae:94:f6:e1:
                    bd:ad:c2:0d:d7:bf:e2:d5:b4:2f:7a:0c:2c:f9:7d:
                    05:0b:8f:8b:b8:c7:8e:f1:69:94:9c:1b:08:76:97:
                    b0:34:af:a8:ed:1a:4d:1a:42:67:e2:92:e6:87:26:
                    f3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E3:1C:F6:7C:2F:59:2E:59:94:DE:8E:B5:09:97:8D:8A:38:90:7B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fbbb78e0-9689-404e-873b-b6e1797d5078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1e::/38

    Signature Algorithm: sha256WithRSAEncryption
         73:70:a4:d6:ed:95:30:b8:db:85:30:b3:56:d8:4e:29:f9:91:
         9f:33:d2:7f:17:e1:95:2c:41:5d:15:75:4b:40:04:7f:57:03:
         6b:33:38:75:e8:59:52:fe:1d:4e:09:55:ed:6f:c6:c0:0c:4d:
         57:bd:b8:1c:e9:27:19:6f:67:b5:11:c2:5b:ec:24:24:d7:38:
         be:e5:7b:30:43:85:7d:f1:17:0b:d0:ff:96:f5:93:1b:57:37:
         de:6d:a2:a2:05:c6:1c:1c:41:53:78:d6:7f:9a:d9:4d:b9:d9:
         9f:5c:75:f5:7d:f9:e7:f4:77:f8:be:13:eb:5a:af:fa:e8:c9:
         3b:62:7e:70:55:45:d3:71:0d:97:43:fb:f0:56:66:bc:b8:8e:
         12:5c:da:6f:c0:74:da:1b:62:48:d7:2d:d8:b5:95:13:c8:9b:
         ee:46:5b:2e:2d:40:b3:07:ff:66:23:98:6f:2c:5d:17:43:78:
         fd:39:c3:65:8d:27:1c:b8:75:8e:aa:54:58:f6:d1:34:f0:7c:
         2c:60:c7:4f:93:71:20:d4:46:4f:26:6f:d2:99:d9:bb:47:19:
         18:40:f8:84:b5:6b:ff:4c:e2:2f:3c:1c:5b:dd:57:8e:c3:54:
         e0:69:23:9c:75:dc:20:58:a4:e8:85:be:9c:31:fc:67:8b:b0:
         cc:1b:9e:d0
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUTSIKHfnotMubPg6uECAstaloExwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMDEyNWJkZTAxM2FhMWVhM2YyZWJm
NjUwYjE5OGZjZjJlNGMxM2EyNjQwODFlNTc3MmYyZWY4NmFlZjE4Y2ZjMjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArboW8ugr8JF0J5ZZ2GgZNOGLTUip
AnmvbGBtyoB03I/Iq8++9HYOFReBrQvVKOIsoqbLIatnWqPKaQZM5Zr+uNkjxSDa
1oMWDRphSLDvSCW4mYiKB1TzSkJ73NLP8BjfG04obtIsu0s7aiXrZMr4ImEv/zWf
rZlXMMY5FyLwfHeUD0uX++krMqHNidUVUWh1N7hWA8NbJGLYkNXODTAhNg2LBfuD
pwqRHMUBSplXkQrz78xJUp9O85gzxxX/Zf8zfjyJTbI7m3/Jc6LN566U9uG9rcIN
17/i1bQvegws+X0FC4+LuMeO8WmUnBsIdpewNK+o7RpNGkJn4pLmhybzAQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFL7jHPZ8L1kuWZTejrUJl42KOJB7MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2ZiYmI3OGUwLTk2ODktNDA0ZS04NzNiLWI2ZTE3OTdkNTA3OC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJAbaHgAwDQYJKoZIhvcNAQELBQADggEBAHNwpNbtlTC424Uws1bY
Tin5kZ8z0n8X4ZUsQV0VdUtABH9XA2szOHXoWVL+HU4JVe1vxsAMTVe9uBzpJxlv
Z7URwlvsJCTXOL7lezBDhX3xFwvQ/5b1kxtXN95toqIFxhwcQVN41n+a2U252Z9c
dfV9+ef0d/i+E+tar/royTtifnBVRdNxDZdD+/BWZry4jhJc2m/AdNobYkjXLdi1
lRPIm+5GWy4tQLMH/2YjmG8sXRdDeP05w2WNJxy4dY6qVFj20TTwfCxgx0+TcSDU
Rk8mb9KZ2btHGRhA+IS1a/9M4i88HFvdV47DVOBpI5x13CBYpOiFvpwx/GeLsMwb
ntA=
-----END CERTIFICATE-----