Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa
File:                     084c90dd-efab-414c-a838-24ba0e1082e3.roa (raw, json)
Hash identifier:          xptW1iwCHYso44J94jzZew4ZWv4gGevKwjvqZGszgwo=
Subject key identifier:   DF:5A:F8:5C:B2:62:17:32:56:7E:0E:88:FA:D5:6E:D7:29:2F:3C:52
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       210E88A93B7B3A31778CF0DA1062850898DAAFE3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:4880::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:88:a9:3b:7b:3a:31:77:8c:f0:da:10:62:85:08:98:da:af:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d5842c1fe10fddbded8c88c0ca2ef8af48f936337d945f4681d4accb253cdcfc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:33:a8:ed:82:fa:b0:38:2d:d6:c4:e8:85:
                    9a:6c:97:49:36:21:d7:e3:c2:a2:cb:7d:13:5f:b0:
                    4f:f8:59:43:c0:df:85:61:46:06:d3:99:1d:fb:75:
                    6a:6f:c3:33:a7:6f:c4:b9:fe:c3:52:c0:a3:ca:bc:
                    93:fe:af:0a:dd:3e:fe:02:98:29:57:04:15:83:90:
                    0b:16:65:b6:3b:1a:6d:aa:c0:3b:66:f8:ce:9c:86:
                    50:c3:d5:1f:76:20:cd:fa:80:22:57:78:8e:a5:25:
                    ca:f8:04:89:3e:d1:62:0e:06:55:a8:eb:cb:0f:65:
                    19:52:ec:38:d0:81:a0:a0:eb:21:92:d4:e4:b5:4a:
                    6f:19:93:44:de:64:6f:95:fb:b3:c9:73:30:c1:60:
                    10:41:3c:c1:c7:db:c8:01:5e:11:3f:51:64:b8:33:
                    6a:75:86:c7:78:86:ed:94:1e:b1:b8:b4:2c:56:9f:
                    65:18:ef:31:3d:d9:59:aa:0c:30:b2:5e:3d:47:d2:
                    02:83:6f:52:e2:a9:85:9e:59:d6:f0:cb:e9:19:d6:
                    74:b9:df:b4:a0:42:39:6f:3f:86:98:66:4f:0a:b6:
                    2e:d0:84:b6:1d:da:c0:8e:c6:9f:e4:a1:67:1c:73:
                    93:4b:3c:3f:cd:8f:ce:33:52:a5:84:43:eb:2f:b9:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5A:F8:5C:B2:62:17:32:56:7E:0E:88:FA:D5:6E:D7:29:2F:3C:52
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/084c90dd-efab-414c-a838-24ba0e1082e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:4880::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:55:8a:fe:d5:80:6d:5d:7a:ba:95:52:62:32:93:74:89:5d:
         a1:32:85:53:34:6f:f3:1e:b5:4c:22:70:0b:ee:d4:9f:18:7a:
         7f:c3:45:90:83:db:6d:e0:91:fc:3e:e1:09:2f:30:9b:46:bd:
         8b:24:1d:93:ef:95:f6:5b:aa:d7:ae:b0:19:63:20:27:3f:3c:
         06:33:6e:5d:79:61:38:22:8d:87:07:97:6f:b0:dd:34:e2:f2:
         b6:ca:98:7f:b8:cb:09:2b:7a:bf:60:03:a8:17:6e:81:0c:d9:
         ab:eb:5f:39:63:5f:90:dc:11:2b:dd:ed:b5:3d:3e:fb:c5:8f:
         5c:20:6b:34:12:39:9b:09:b0:a6:8b:4c:98:df:6a:a5:f6:ec:
         f6:1b:c1:f0:f0:ce:ee:ec:bf:2c:b5:19:02:8f:4f:39:5b:bc:
         75:27:39:14:1a:c1:6e:7b:18:80:84:2f:39:14:fd:6e:f8:d7:
         8a:26:63:e5:54:9e:8c:38:81:c1:bb:4d:c7:c9:f2:2a:4d:f2:
         17:a8:80:8d:03:89:bc:0f:4f:0e:9b:44:61:86:31:cc:50:b8:
         59:b8:fa:5b:58:01:de:8a:cf:be:90:bf:60:24:01:0b:a7:f2:
         db:39:28:9f:d1:c2:fd:62:b2:bf:5c:2d:7b:43:32:b2:aa:0a:
         be:7a:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----