Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa
File:                     08d6a815-c62c-48d3-872d-9a2734403bca.roa (raw, json)
Hash identifier:          uots2x2HRtNzD7Xzt1uxaI/E4QNvYOxESJB78WsLA64=
Subject key identifier:   D2:D9:BC:5D:95:80:E0:FB:0D:80:6B:74:CD:7D:76:77:7A:16:4F:EC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1AFF5FBF23A89B228F98E398A63927524003DCA4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:4060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ff:5f:bf:23:a8:9b:22:8f:98:e3:98:a6:39:27:52:40:03:dc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=0e1f94f9c41ec381ea2fa315c7e96849d0eecaf168d6172419f6857c941cd916, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:b4:92:5a:d4:e5:cf:f9:eb:b9:5d:d3:fc:
                    67:29:bf:1b:48:da:35:42:1d:59:98:c1:7b:e7:b0:
                    6e:0f:21:14:27:de:76:3e:5f:6e:90:6a:15:73:73:
                    c5:70:87:d3:b0:bb:be:1d:d0:fd:22:93:5a:0c:91:
                    2e:66:58:02:3c:8a:6e:35:38:06:ec:f7:a4:f3:7c:
                    23:8d:f3:d0:da:af:f0:3f:7e:2f:c9:4a:5f:c3:5d:
                    ec:f1:dd:7a:40:64:1d:a6:c7:4f:a0:79:05:5b:04:
                    04:82:8f:7f:76:db:dd:fe:9e:49:ed:58:ad:95:00:
                    b1:b8:5e:3b:2b:59:51:92:00:2a:2e:09:47:2e:00:
                    a7:56:69:22:ca:8a:d6:2f:82:ea:26:fb:a2:4e:af:
                    08:bd:23:17:e7:bb:a4:cf:d0:4f:88:e1:ef:82:4e:
                    64:ec:5a:e8:03:b8:e7:66:27:da:5c:29:d7:2c:6b:
                    e1:62:88:b1:da:26:5c:97:26:06:4a:83:0f:33:66:
                    38:ed:e2:e6:66:96:1a:6d:9e:88:12:5f:af:7d:5c:
                    12:28:2a:9e:1f:f8:0c:12:5d:1b:3f:4b:7b:ac:35:
                    91:6b:32:e9:f8:1f:9b:30:49:3a:86:61:42:02:a5:
                    85:36:0a:1a:3b:f1:9f:15:3d:53:f7:8e:c6:dd:f4:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:BC:5D:95:80:E0:FB:0D:80:6B:74:CD:7D:76:77:7A:16:4F:EC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08d6a815-c62c-48d3-872d-9a2734403bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:4060::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:bf:b0:50:1e:e8:49:f5:38:f9:7f:b3:dc:6d:7b:15:0b:
         0f:8d:56:bc:bc:fa:21:47:5c:b0:ea:3e:e2:e2:36:96:16:71:
         a8:88:cf:d9:99:8b:14:e9:a9:95:a7:45:37:51:57:5d:6a:94:
         de:41:0b:bc:54:7f:3b:69:35:3e:8b:e6:07:b9:af:5c:44:9e:
         5d:bd:0a:1a:f6:0e:56:bc:ae:71:d8:81:e1:f8:82:8e:55:3f:
         25:79:f2:32:ae:d0:b6:70:0a:4d:eb:35:28:52:ce:f3:8f:f4:
         01:90:21:3d:31:80:e8:72:88:e5:52:82:0c:cd:51:1d:01:34:
         43:56:61:53:75:62:be:c0:a6:c3:1d:7d:f6:0d:54:16:a1:37:
         59:4d:16:41:27:8f:b6:0c:38:f3:e8:02:45:37:b9:d8:03:cb:
         c1:47:5a:cd:ba:f3:11:a3:c8:55:63:36:8a:a1:4d:3a:97:e9:
         87:61:d5:9d:91:69:4d:db:fa:1b:31:56:e7:23:9a:e5:94:01:
         71:08:88:9f:f3:81:48:31:0d:e2:16:4f:cb:6d:de:e8:2e:c0:
         fb:44:ec:fb:09:7b:d2:d7:01:23:89:f0:c2:32:de:48:7d:59:
         53:a1:bd:87:62:75:50:06:45:0e:4d:23:6b:f4:68:73:34:19:
         c5:22:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----