Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa
File:                     78c73c91-1977-4091-b393-5358d5bcfdd5.roa (raw, json)
Hash identifier:          O1NhzqsioK404GbfysY1ohWn6pmF9LeVhxOOLxGFYXA=
Subject key identifier:   E2:9A:7F:E7:70:53:87:AD:41:D7:B0:11:13:61:2F:AB:60:BC:28:2C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3D1B8140C3FE80FFC1235118627133439838356E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa
Signing time:             Fri 21 Mar 2025 00:00:11 +0000
ROA not before:           Fri 21 Mar 2025 00:00:11 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:9000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1b:81:40:c3:fe:80:ff:c1:23:51:18:62:71:33:43:98:38:35:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000
        Validity
            Not Before: Mar 21 00:00:11 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:8d:20:c5:76:46:de:43:15:31:2b:b8:2b:
                    08:ea:1d:8c:f7:7e:14:e2:b9:d3:d4:b3:4e:29:77:
                    0d:35:cf:9b:d3:87:57:de:f5:77:86:ec:73:e1:e1:
                    80:3e:63:e7:d9:c6:25:75:52:87:51:41:9d:98:fb:
                    2b:b0:8d:c6:38:d5:06:1d:ca:aa:e9:5d:73:c7:66:
                    2f:02:e7:09:55:b5:87:8e:9a:36:32:94:ce:d6:f2:
                    77:ad:ad:ff:ba:bc:fe:cd:5c:b2:8d:db:e0:32:8d:
                    5b:35:4f:2b:c2:99:1e:6e:d3:da:2d:b3:22:04:f6:
                    c7:80:02:49:61:24:e9:40:c9:8e:1a:6b:87:41:73:
                    62:30:55:b5:45:8d:2d:2b:2e:03:80:45:1e:2f:75:
                    a2:19:d2:f3:d0:17:e3:0a:6b:6d:a7:a7:69:24:56:
                    cc:a9:91:4d:64:2c:ea:23:19:61:e1:76:d2:88:91:
                    f2:ff:18:6f:92:db:37:00:e2:c7:f1:48:98:99:c0:
                    75:47:74:2b:f9:dc:fa:a0:1d:b6:33:83:35:f5:c6:
                    a8:f7:6c:25:b3:1c:5b:d9:63:34:1a:50:7a:08:4f:
                    99:ed:4e:3d:41:ee:50:07:d0:91:19:14:b8:fb:0f:
                    d9:42:df:38:d6:33:0f:73:e4:9b:9a:0e:8b:13:f8:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:7F:E7:70:53:87:AD:41:D7:B0:11:13:61:2F:AB:60:BC:28:2C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/78c73c91-1977-4091-b393-5358d5bcfdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:5d:b4:1f:ea:96:88:0c:60:6a:a4:2a:b7:c9:7d:ec:25:
         46:50:48:c6:c7:63:89:cf:12:33:83:ed:ec:e1:8a:b1:60:02:
         9a:75:72:70:3d:be:6c:9e:67:80:d1:48:de:21:78:cb:6f:6b:
         52:ff:b4:ca:e7:e0:2f:f2:11:c3:57:a6:3b:4c:f2:09:e4:88:
         71:7a:db:5b:e7:ae:bd:b1:8f:76:a5:6c:dd:e0:51:8f:9b:05:
         d0:d4:8a:ac:92:cb:0d:71:ad:f2:c2:46:0e:7e:59:b4:68:d2:
         ff:71:31:9b:14:94:83:b9:be:f7:45:dd:e3:c1:8d:df:f9:a7:
         b8:8a:2c:e9:29:c6:72:5d:1e:e4:ac:ed:ec:c0:83:77:2a:77:
         db:2c:99:73:f7:5c:05:96:ef:0e:26:85:41:c5:c4:c7:3d:d0:
         8b:85:37:88:68:0b:c1:f8:a0:f3:00:e9:ca:12:89:5b:47:9d:
         25:84:67:90:d3:b5:d9:ca:ac:81:3c:57:7d:e9:dd:b6:fe:1e:
         cf:17:c1:8c:b8:47:71:ac:0b:17:b7:b0:7a:c0:22:85:a3:80:
         47:b5:ad:11:32:4e:bf:d6:4a:18:52:3e:5b:fd:ea:53:54:3c:
         4f:5d:e7:2d:52:43:04:8a:6b:2e:9b:4f:51:67:be:8b:92:23:
         d3:dc:fc:bb
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUPRuBQMP+gP/BI1EYYnEzQ5g4NW4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDMyMTAwMDAxMVoX
DTI1MDQyNTIzNTk1OVowejFJMEcGA1UEBRNANzI4MWFmMTk4NmJhMTY4NTJjOTE3
NzY2NmVjMTg0ZTM5YjI3N2NiZWFmZTE0YzIzZWIyODBmYTg1M2I2MjQ2MDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyveNIMV2Rt5DFTEruCsI6h2M934U
4rnT1LNOKXcNNc+b04dX3vV3huxz4eGAPmPn2cYldVKHUUGdmPsrsI3GONUGHcqq
6V1zx2YvAucJVbWHjpo2MpTO1vJ3ra3/urz+zVyyjdvgMo1bNU8rwpkebtPaLbMi
BPbHgAJJYSTpQMmOGmuHQXNiMFW1RY0tKy4DgEUeL3WiGdLz0BfjCmttp6dpJFbM
qZFNZCzqIxlh4XbSiJHy/xhvkts3AOLH8UiYmcB1R3Qr+dz6oB22M4M19cao92wl
sxxb2WM0GlB6CE+Z7U49Qe5QB9CRGRS4+w/ZQt841jMPc+Sbmg6LE/ihFQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFOKaf+dwU4etQdewERNhL6tgvCgsMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
Lzc4YzczYzkxLTE5NzctNDA5MS1iMzkzLTUzNThkNWJjZmRkNS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba9pAAMA0GCSqGSIb3DQEBCwUAA4IBAQCYL120H+qWiAxgaqQq
t8l97CVGUEjGx2OJzxIzg+3s4YqxYAKadXJwPb5snmeA0UjeIXjLb2tS/7TK5+Av
8hHDV6Y7TPIJ5Ihxettb5669sY92pWzd4FGPmwXQ1IqskssNca3ywkYOflm0aNL/
cTGbFJSDub73Rd3jwY3f+ae4iizpKcZyXR7krO3swIN3KnfbLJlz91wFlu8OJoVB
xcTHPdCLhTeIaAvB+KDzAOnKEolbR50lhGeQ07XZyqyBPFd96d22/h7PF8GMuEdx
rAsXt7B6wCKFo4BHta0RMk6/1koYUj5b/epTVDxPXectUkMEimsum09RZ76LkiPT
3Py7
-----END CERTIFICATE-----