Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/005a9212-fea0-4bc0-be12-084b81124b8f.roa
File:                     005a9212-fea0-4bc0-be12-084b81124b8f.roa (raw, json)
Hash identifier:          toXaStQ/A/JMhau+vuxm7zA69MpynxyBmbh+8WzowiQ=
Subject key identifier:   51:75:07:F4:E4:89:B1:F9:50:29:CE:C4:63:E4:6E:DD:2F:06:84:69
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3D8FC892FDF9157E0C24830A55610EDBE769910E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/005a9212-fea0-4bc0-be12-084b81124b8f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:7040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:8f:c8:92:fd:f9:15:7e:0c:24:83:0a:55:61:0e:db:e7:69:91:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f2873cd140caad3b827252b69068c97823c3d83bfa7de5c619396db51e4e8ec9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:f2:96:b9:15:cd:b4:ee:93:f6:cf:cd:35:
                    62:35:3d:b6:78:f5:89:90:bc:ee:97:8b:32:b6:b7:
                    d1:b3:05:b4:88:1c:59:bb:c5:b4:22:35:64:40:cc:
                    e7:02:a9:7b:f9:a2:59:f1:a4:10:fa:7a:76:3a:11:
                    35:55:11:8b:11:01:ee:79:b3:b4:96:f6:71:d6:b2:
                    9e:bc:1e:53:81:5b:d6:b8:7a:1d:bd:cc:52:c5:81:
                    5a:17:55:9d:2d:ed:ac:88:b7:b1:34:6d:40:a0:68:
                    8d:fa:5a:a3:cb:ba:d9:42:ec:0f:db:c4:39:21:1f:
                    3b:86:b8:12:99:66:ae:95:fd:59:a9:b5:6d:3d:c1:
                    e1:b3:80:63:5c:8a:83:b2:2f:7d:49:40:ee:1b:be:
                    72:6a:35:78:62:15:17:3c:8b:dc:8c:a6:bd:a7:18:
                    69:f1:a9:d8:53:8a:68:b1:cf:11:54:c1:0d:28:3f:
                    4b:b3:3c:51:c1:65:a3:c9:38:26:92:ec:45:0b:99:
                    1e:77:11:a5:8a:8d:05:52:ad:49:bc:33:ec:26:ec:
                    70:05:34:07:15:f8:46:4b:09:1d:cd:d8:65:f5:0c:
                    78:21:28:d1:f6:37:37:fa:df:7a:c3:db:99:b9:b4:
                    05:df:42:13:b0:e3:96:84:56:db:2f:33:06:6d:0f:
                    96:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:75:07:F4:E4:89:B1:F9:50:29:CE:C4:63:E4:6E:DD:2F:06:84:69
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/005a9212-fea0-4bc0-be12-084b81124b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:7040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:87:30:0e:83:2c:4b:fa:19:3b:06:17:21:dd:4e:21:c2:
         99:d5:47:9e:3d:9c:73:0a:cb:79:fe:3f:8d:04:57:fb:43:64:
         e5:85:f1:b0:8d:5a:f1:d8:ee:ca:fe:9d:d0:7c:85:4a:4c:3c:
         04:e0:09:bc:43:88:0a:1c:6e:4f:86:41:77:b6:c9:0c:c8:68:
         d7:db:a2:15:9c:1a:1d:89:1b:db:b8:f2:1c:1e:3c:f5:3e:72:
         40:bf:38:bc:d8:6f:be:13:52:da:98:f1:d4:d2:77:94:b0:fe:
         ee:6e:91:a0:fc:4d:94:eb:9d:91:d8:49:fa:93:fb:92:df:b2:
         25:9a:74:41:b9:2f:61:99:17:db:db:39:2b:5d:45:89:c9:5c:
         2f:e0:1b:73:13:04:63:b3:9d:a9:27:ca:6c:3e:3e:10:63:ce:
         8c:c9:7a:9e:00:9c:96:42:c6:c6:e4:36:e2:6a:cb:33:e4:65:
         1b:4c:89:98:b0:ac:4b:e3:9f:a5:ee:f2:95:cd:c1:5c:f9:c6:
         eb:94:e4:a4:0b:44:c6:11:85:ff:30:43:a3:db:78:36:1d:98:
         3c:5a:30:d7:96:02:63:44:42:e4:e0:b1:c3:b2:1a:1c:a3:8a:
         ac:4a:d6:a2:32:ef:da:61:be:09:59:89:3b:9f:fd:36:49:57:
         c1:cb:9c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----