Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa
File:                     040a624e-81b0-4106-99cd-427e9ebc3f62.roa (raw, json)
Hash identifier:          ui9JV9n6KSRHvd1RBcQeFuCeXaFaH1OEh5UM7/daYDE=
Subject key identifier:   F9:88:DB:09:75:47:AA:D9:DE:29:4D:76:B7:51:FE:59:48:39:6F:FE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2E9553AC71C30E4F96B43445FF98AB775DFCE4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:c0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:95:53:ac:71:c3:0e:4f:96:b4:34:45:ff:98:ab:77:5d:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1646710d5fcabff66d7116a0585bea33d31fb35b4c2103c9ea4f6a9df3fcd9e4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:44:58:77:f5:c6:fa:31:09:9c:a4:46:95:
                    0a:13:26:a7:69:97:a4:2a:2a:81:f1:c4:64:e3:3f:
                    75:07:ab:c7:d9:7a:81:ec:0e:fd:d6:62:66:a4:51:
                    71:6a:0b:2d:fb:88:f0:9e:14:aa:ad:c6:44:42:72:
                    0b:27:68:ad:3f:b2:ff:e5:9e:eb:b3:25:cc:43:e1:
                    fb:58:ad:88:1d:f6:50:d8:23:ed:79:3c:5d:7b:ee:
                    12:fd:3d:cb:7c:d9:3b:a3:e5:8e:04:dc:f6:11:de:
                    d5:b8:0a:62:55:51:c8:90:0c:1f:95:28:2c:63:91:
                    6e:43:89:74:63:6b:64:cc:49:46:47:22:fc:77:f3:
                    47:d4:d9:21:bd:0b:4f:af:db:d4:26:fc:04:a6:c3:
                    3e:d0:a3:6d:1d:7d:4f:6f:9b:49:47:3f:39:2c:17:
                    b6:d4:7e:ba:f5:bb:1c:3d:64:48:20:4d:35:4e:4b:
                    3b:a6:a5:57:9f:2f:cf:d7:80:59:b7:51:b7:0b:20:
                    32:d4:15:0f:27:b2:a3:97:27:35:1b:37:5f:54:8b:
                    68:bc:8d:be:4d:37:a4:77:06:88:3b:0e:e3:0f:92:
                    fe:d5:75:41:93:b5:d6:fd:e2:37:fc:43:8d:5a:9b:
                    67:33:43:ec:5d:e5:9d:17:85:9c:e6:6b:af:93:77:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:DB:09:75:47:AA:D9:DE:29:4D:76:B7:51:FE:59:48:39:6F:FE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/040a624e-81b0-4106-99cd-427e9ebc3f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:c0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:13:ed:33:13:32:8f:83:93:81:ec:d5:7c:9b:37:b3:9c:bc:
         53:e8:f9:53:94:c3:65:0d:20:8e:08:37:df:cb:d6:44:6f:dd:
         e5:07:c3:40:e2:8d:7f:50:d8:51:91:55:00:73:33:bc:80:26:
         2e:3f:cc:35:06:b9:8b:55:57:24:6d:21:95:da:63:10:fe:8e:
         56:ed:c1:12:78:b0:e3:72:07:66:d2:29:7a:fa:f2:37:f6:ca:
         33:40:86:2f:89:6f:e1:0f:7c:e9:77:8c:b5:fe:56:71:50:0f:
         ef:9d:83:ab:c8:97:80:f8:7d:0d:4d:44:b6:be:dd:c0:91:3f:
         e8:90:fc:ea:30:b4:81:2e:9e:b0:98:5d:89:fc:10:02:99:1d:
         fc:48:1b:89:27:92:a1:9a:b6:94:22:83:4e:23:1a:54:62:10:
         9e:c0:c4:a3:ad:d7:5d:d7:9d:bd:55:e8:b4:35:6d:1a:9e:83:
         0e:e1:f5:a7:07:ef:10:53:5c:7c:ac:ec:1f:aa:f6:65:0d:ca:
         b7:cd:4e:16:0a:38:18:a6:2e:d9:8a:a5:2f:ef:8f:56:a0:f2:
         f1:5d:79:8f:23:df:52:5b:d9:6f:e0:1b:68:6f:bf:4c:cf:3c:
         c5:b3:8c:3c:7c:75:4c:31:c6:8c:66:5d:4b:35:8f:41:a8:55:
         be:f7:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----