Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1d4a0b-cd5d-4980-8629-6b70af1f60e6.roa
File:                     fd1d4a0b-cd5d-4980-8629-6b70af1f60e6.roa (raw, json)
Hash identifier:          aU6dUOQyl4w0qVGfYfswLVeEKjpxVFe/Pkk6x4KtaMM=
Subject key identifier:   01:92:80:68:F3:DA:F9:70:5E:5C:52:7E:78:BD:0A:5D:21:8A:F1:DB
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0B44EFC5CBD73D5FFE3D68F41A91321923B1BD54
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1d4a0b-cd5d-4980-8629-6b70af1f60e6.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:ef:c5:cb:d7:3d:5f:fe:3d:68:f4:1a:91:32:19:23:b1:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8a0994c22b6895963a41e4302fceb595b99dbc448164347a80ec574e5b2f5197, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:b0:91:b7:e9:85:10:fe:45:fa:ca:d7:62:
                    f1:2c:dd:7a:03:ca:7f:9e:06:dd:26:e9:c3:95:1e:
                    e0:7a:1d:df:dd:e9:fd:8a:51:ac:c4:da:d4:5a:82:
                    f9:36:b3:4c:6c:21:f5:d0:19:b9:9e:7a:6f:f9:d7:
                    de:56:74:ae:22:ac:73:b1:a2:d7:da:24:33:11:1c:
                    c0:57:7b:05:e6:04:3a:df:ac:40:70:2c:9f:0a:b7:
                    8c:ae:f6:47:e4:35:dc:12:aa:67:29:26:41:7f:cc:
                    f8:58:78:1d:c2:de:81:02:dc:83:fe:93:da:7e:29:
                    11:a1:67:c6:a8:55:c1:5b:e7:ad:72:6e:a9:15:de:
                    3b:f3:11:ae:9b:28:20:d8:d0:81:18:7f:75:d6:a2:
                    13:37:cb:b6:50:03:8b:95:fc:7c:3c:e2:5c:a6:b5:
                    b6:81:0f:f9:8d:14:65:ad:bc:aa:5b:fc:64:cc:cd:
                    2e:15:40:96:a4:9c:d0:4a:be:50:ca:1d:83:32:16:
                    9c:87:59:b6:a3:c0:fc:e3:e8:c5:3b:1f:cd:d8:57:
                    a5:7f:4c:dc:1a:e6:72:a4:fb:43:c1:a9:30:7a:9c:
                    24:de:20:8d:b0:93:6a:b1:62:a8:47:0a:1f:1a:f6:
                    23:57:99:e4:54:55:5c:1f:b8:87:65:d8:88:83:91:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:92:80:68:F3:DA:F9:70:5E:5C:52:7E:78:BD:0A:5D:21:8A:F1:DB
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fd1d4a0b-cd5d-4980-8629-6b70af1f60e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a8:27:b6:2e:6e:99:50:8e:0b:f3:29:cf:c6:f0:b6:2e:6e:4e:
         14:9f:01:91:6e:36:5d:68:7b:e9:f0:04:ec:e9:29:62:0b:ef:
         c8:69:28:37:1c:63:0f:a9:d8:3f:ed:c3:b1:c8:f1:4d:47:20:
         52:7d:1f:76:72:16:4e:58:78:f0:e7:52:59:0a:77:c2:63:14:
         41:aa:70:2c:19:40:4a:63:9f:bb:c2:49:28:b6:91:1c:24:ae:
         14:9f:35:66:87:ca:41:30:2c:aa:9e:f7:a9:db:7a:1e:fa:94:
         d4:d2:3b:37:77:39:7a:00:50:11:45:ec:61:d4:ab:d4:aa:c3:
         8f:93:a9:dd:b5:0d:df:0a:cb:fe:71:07:da:28:2c:c0:6d:e3:
         0e:ab:e6:de:35:dd:7e:e6:c9:9f:3d:d6:8a:00:08:bc:ef:6c:
         b9:06:e8:7e:f0:16:74:b0:b9:05:97:c0:16:05:ca:47:6d:63:
         0d:ac:30:a1:05:6d:eb:31:85:44:7b:cc:98:76:e7:34:04:24:
         71:f6:18:60:10:fc:fd:5e:18:96:c9:78:69:43:b9:d2:b8:7f:
         17:08:26:e6:82:c9:83:58:af:98:7c:e7:0a:63:89:ad:c7:98:
         bd:7b:a1:89:47:55:23:d3:72:cd:c3:22:4c:8e:0f:be:de:9a:
         17:fb:b0:58
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIUC0TvxcvXPV/+PWj0GpEyGSOxvVQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAOGEwOTk0YzIyYjY4OTU5NjNhNDFl
NDMwMmZjZWI1OTViOTlkYmM0NDgxNjQzNDdhODBlYzU3NGU1YjJmNTE5NzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx92wkbfphRD+RfrK12LxLN16A8p/
ngbdJunDlR7geh3f3en9ilGsxNrUWoL5NrNMbCH10Bm5nnpv+dfeVnSuIqxzsaLX
2iQzERzAV3sF5gQ636xAcCyfCreMrvZH5DXcEqpnKSZBf8z4WHgdwt6BAtyD/pPa
fikRoWfGqFXBW+etcm6pFd478xGumygg2NCBGH911qITN8u2UAOLlfx8POJcprW2
gQ/5jRRlrbyqW/xkzM0uFUCWpJzQSr5Qyh2DMhach1m2o8D84+jFOx/N2Felf0zc
GuZypPtDwakwepwk3iCNsJNqsWKoRwofGvYjV5nkVFVcH7iHZdiIg5ETVwIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFAGSgGjz2vlwXlxSfni9Cl0hivHbMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2ZkMWQ0YTBiLWNkNWQtNDk4MC04NjI5LTZiNzBhZjFmNjBlNi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAba92AwDQYJKoZIhvcNAQELBQADggEBAKgnti5umVCOC/Mpz8bw
ti5uThSfAZFuNl1oe+nwBOzpKWIL78hpKDccYw+p2D/tw7HI8U1HIFJ9H3ZyFk5Y
ePDnUlkKd8JjFEGqcCwZQEpjn7vCSSi2kRwkrhSfNWaHykEwLKqe96nbeh76lNTS
Ozd3OXoAUBFF7GHUq9Sqw4+Tqd21Dd8Ky/5xB9ooLMBt4w6r5t413X7myZ891ooA
CLzvbLkG6H7wFnSwuQWXwBYFykdtYw2sMKEFbesxhUR7zJh25zQEJHH2GGAQ/P1e
GJbJeGlDudK4fxcIJuaCyYNYr5h85wpjia3HmL17oYlHVSPTcs3DIkyOD77emhf7
sFg=
-----END CERTIFICATE-----