Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa
File:                     04a34ce3-dd89-4dc8-af98-17645f710d46.roa (raw, json)
Hash identifier:          vl9BZ0NR/ki9V9DOgQAxbfSBFFGG/i1Ah1yUY6pSeJ4=
Subject key identifier:   B6:B4:9B:55:A9:CD:36:36:F0:60:AC:6C:70:FD:75:04:48:9F:D2:88
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       352FF8945E156A3D854D20C214454C79FF118B9A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:8880::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2f:f8:94:5e:15:6a:3d:85:4d:20:c2:14:45:4c:79:ff:11:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4c9bb13bf59e880dc29ee8334efa795aa0d83a857d8b7acb9f9659300aed4071, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:31:b8:e1:b0:cd:f7:91:37:02:03:b5:c7:
                    26:88:a1:a7:ce:8c:ca:75:f7:0e:f0:4e:76:3b:e8:
                    cd:2b:85:4c:52:c6:c8:4c:ce:6c:43:d2:28:ec:3d:
                    7f:65:b8:e6:f3:b8:de:64:89:8f:72:18:65:7a:83:
                    54:a3:7d:9e:bc:ff:22:36:a2:c7:aa:4a:ef:b6:17:
                    d5:95:7f:31:a7:8d:c4:83:75:4b:25:95:d9:6a:4e:
                    a7:2c:01:e5:1d:a6:ad:99:a1:b3:79:25:83:6f:6f:
                    73:2c:5a:50:1a:cc:7d:0d:05:a1:92:a1:7a:97:c2:
                    ae:47:36:32:b5:d5:00:c2:a9:b9:7a:df:fc:8c:5f:
                    e7:1c:e0:2a:28:96:05:b3:47:86:4d:85:02:e8:d3:
                    c2:fe:e4:23:fe:c5:40:10:5a:b7:8a:d4:d3:92:f1:
                    39:a6:6e:d6:76:f7:a0:b7:c6:b4:a8:e1:6f:c7:58:
                    2e:d7:76:36:85:37:cf:6d:c7:2a:55:17:40:87:91:
                    fa:cb:69:52:9b:a9:d1:5f:ad:f3:ce:8f:56:d3:74:
                    9b:ff:a6:56:1b:d4:b8:5a:9f:5f:54:39:a7:a3:18:
                    2c:19:5a:ae:35:b6:8e:02:f4:d4:27:d3:8b:9c:1c:
                    2c:8f:30:b0:85:6f:54:95:d7:48:5e:f1:f2:10:09:
                    12:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:9B:55:A9:CD:36:36:F0:60:AC:6C:70:FD:75:04:48:9F:D2:88
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a34ce3-dd89-4dc8-af98-17645f710d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:8880::/46

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:cd:5a:a6:89:60:b4:73:74:5b:79:59:bf:96:56:64:f0:
         53:2a:2b:d4:b8:e3:b4:7c:cb:6e:f9:d4:8a:5c:b8:28:68:76:
         2c:76:cd:e8:2b:3e:29:6c:a5:8a:30:be:3c:08:bd:60:1c:d2:
         97:ab:07:d6:71:bb:dc:e9:cf:d2:ec:ff:d9:47:4f:36:f2:37:
         80:f4:95:c3:fc:8a:6e:e9:39:bb:20:74:9d:e6:c3:27:08:c0:
         01:e9:c4:cd:78:86:18:20:53:68:d6:af:92:06:f7:5a:e7:7b:
         fc:74:fe:fc:07:85:86:c6:c8:03:be:84:46:7e:e3:1c:f8:2e:
         6a:a1:16:ae:96:e9:92:ea:c9:37:dc:e9:9f:d3:06:71:1e:dc:
         0d:69:b5:96:98:d0:0f:9b:1b:74:20:c7:30:bd:b2:06:9b:0b:
         29:26:d0:bd:22:e2:d4:1d:34:f2:0b:98:37:18:28:1d:21:6c:
         a9:36:5d:f7:65:8e:88:03:89:91:42:40:8d:41:3c:c1:ce:db:
         4a:32:4d:47:44:c9:9b:8b:99:e6:e1:16:6e:44:56:dc:2c:9a:
         bd:52:fc:03:06:8a:7a:40:bf:96:08:e0:92:0c:be:55:0f:25:
         58:8d:66:50:16:df:a4:8f:18:83:1e:e4:e3:70:eb:1c:c0:db:
         11:ef:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----