Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa
File:                     090248e1-67bf-4e35-a35a-d1596416a6af.roa (raw, json)
Hash identifier:          OFuILW9xWZlfgRTou3ZEq+39WE2U0nwRXMPbnfuxZlE=
Subject key identifier:   F8:55:22:21:91:0B:A0:85:D1:61:1D:D5:85:32:CB:DF:C0:E7:F3:57
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       77DE4F35F2682314F247763E67EE47145E14EF54
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:8c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:de:4f:35:f2:68:23:14:f2:47:76:3e:67:ee:47:14:5e:14:ef:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b208c9222f51380168dd838dde012eb991ed89fc7c1857170d3d913140f4b932, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:b5:bb:20:29:f3:08:4d:4f:6a:23:4b:d9:
                    87:02:0c:40:44:4b:41:fd:9c:90:dd:5e:25:91:5f:
                    43:1f:7d:1c:e2:28:9c:15:c4:9d:2b:01:0a:b0:80:
                    f0:83:bb:fa:f6:93:53:29:04:d0:1e:6a:fc:c8:05:
                    18:2b:92:51:6c:45:d0:78:b8:07:54:9e:ba:f9:87:
                    30:87:72:2e:62:2c:35:44:b8:63:0c:e0:b4:e6:a7:
                    d1:17:b6:72:a6:72:b4:e1:4a:a2:81:49:81:f5:51:
                    f4:a5:95:a0:6d:25:7f:38:b0:06:47:0c:2a:26:d2:
                    43:ee:c0:0b:cc:35:92:e3:4d:2c:30:22:24:06:83:
                    b2:e2:7f:2a:71:fe:1d:5b:b1:a0:ce:74:b4:87:d6:
                    4a:e8:59:c0:a0:54:3f:1d:13:a5:78:dd:44:58:5a:
                    91:a8:52:44:81:2b:58:c9:12:a3:d6:b8:f7:19:77:
                    c7:a7:1a:bd:69:6e:b8:14:8c:87:1d:20:9c:35:a6:
                    41:bc:8f:28:6e:9e:93:42:6a:72:12:0a:65:72:b2:
                    12:88:32:f5:5f:45:83:25:58:5c:2a:83:4f:cd:44:
                    90:ce:dd:23:8c:e0:ec:37:67:69:ec:dd:45:2c:9b:
                    e6:ca:7e:3b:21:b7:0d:2a:ee:85:63:66:de:d3:7e:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:55:22:21:91:0B:A0:85:D1:61:1D:D5:85:32:CB:DF:C0:E7:F3:57
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/090248e1-67bf-4e35-a35a-d1596416a6af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:a4:1c:1b:4f:c4:79:66:9b:47:33:45:26:4f:1d:87:eb:
         bc:e2:ad:74:e5:f7:a9:d9:f0:b8:79:c2:8c:0b:cd:31:40:2d:
         28:26:c6:51:80:44:57:af:35:2c:5e:9a:33:3b:32:87:09:6b:
         30:1c:4e:15:9c:d2:0f:d3:3a:b6:26:05:0e:3e:06:39:14:79:
         06:bc:f9:de:b3:34:d3:0f:1b:b7:2c:3f:af:d9:a7:c1:4a:7a:
         19:67:d2:01:86:d6:ba:3b:ce:46:d7:d7:7b:ae:1f:c9:ce:5f:
         e5:3a:e9:23:3c:cf:8f:96:4c:a6:7d:42:99:03:7b:16:62:03:
         91:d3:76:95:a7:94:0a:a3:2e:d2:08:f8:87:7c:83:5f:0a:dc:
         c0:3e:9c:cc:2a:d8:06:ee:a4:1f:e6:a1:57:1f:ba:91:de:0a:
         88:ff:8c:92:97:46:05:99:8f:ad:d0:35:71:36:e9:50:46:b4:
         9a:7c:18:23:eb:40:bd:d2:2f:74:06:09:5d:97:1e:fa:4c:98:
         b2:7c:b0:2b:db:40:b7:8a:68:0d:e0:a3:5b:f2:ba:20:33:5e:
         af:1f:1e:1d:36:26:d6:c7:dc:97:ce:0b:9b:76:d4:a7:14:f8:
         34:a9:9e:c5:ee:f1:1a:e2:b9:be:5d:4b:e7:76:ce:70:9a:0b:
         96:7a:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----