Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b48b67a-8f34-4df2-a885-fa74261d3552.roa
File:                     0b48b67a-8f34-4df2-a885-fa74261d3552.roa (raw, json)
Hash identifier:          4yW1pdeB6Bu9cVSfkdtUhqRCRl5VAQzFbQ/JnQE/eF0=
Subject key identifier:   9D:3C:79:FE:5A:3F:8B:32:A0:31:87:27:DC:9B:FB:04:72:5F:2C:1C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       22897338BF421A62974AA0609E4EBE565B4ACF59
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b48b67a-8f34-4df2-a885-fa74261d3552.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:89:73:38:bf:42:1a:62:97:4a:a0:60:9e:4e:be:56:5b:4a:cf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=334e5153d119427e60389769707f0b4a0f956d81fc90e2a966652567b3588093, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:b2:e2:d4:8b:83:ec:6e:2d:d4:7d:0c:2a:
                    5f:5a:39:c5:9f:84:c6:57:f5:95:f9:bb:e7:f6:1f:
                    4c:2d:ef:a0:18:9a:a3:3e:52:79:98:a6:c5:21:9d:
                    2f:e5:98:c3:da:b8:34:30:6f:f0:58:2d:3d:ac:3d:
                    b1:21:0b:6f:86:31:d6:37:5d:a6:54:f8:84:09:5b:
                    d6:d6:9c:d7:c2:0a:54:8a:9c:3b:ae:c5:f3:94:3d:
                    2a:95:42:6e:e9:28:df:ae:55:db:82:06:1a:9c:c0:
                    1d:ee:89:f6:de:b2:96:f3:89:30:6a:a0:74:f4:89:
                    78:a2:0f:62:14:4f:8c:f0:bb:ff:96:f0:12:07:7c:
                    6c:2e:38:c7:10:73:10:b7:6d:a4:0e:d6:d2:85:70:
                    3c:c4:e6:41:11:4b:3a:30:e6:1c:b6:16:32:ea:f6:
                    ba:f0:0d:e1:db:ec:3c:8a:6e:d4:6c:a0:ae:23:12:
                    3b:b1:4e:1b:ef:b2:cd:d1:27:34:d1:08:68:2e:b0:
                    e4:36:cd:26:6a:50:ab:95:a8:95:02:81:f1:8e:29:
                    66:b6:c0:81:62:45:4c:f3:9b:bc:7d:12:43:6e:dd:
                    73:16:b0:fd:0e:f4:49:5c:e7:ad:64:2c:06:22:43:
                    55:bc:99:98:9d:5d:d7:63:55:cb:45:26:06:45:5c:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3C:79:FE:5A:3F:8B:32:A0:31:87:27:DC:9B:FB:04:72:5F:2C:1C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0b48b67a-8f34-4df2-a885-fa74261d3552.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:c4:77:e5:d4:66:a3:c7:a4:b6:32:e4:69:48:b1:b8:cd:
         0e:d8:54:9c:07:c3:3c:c0:1f:a1:f1:94:af:3d:e2:a8:27:e4:
         77:71:23:5c:d3:12:4e:3d:3f:9e:23:09:0a:28:20:46:ec:4e:
         47:2f:1f:c2:13:01:c3:8c:9d:94:a9:53:33:7b:fc:e8:53:0e:
         7d:e1:6f:72:00:c8:08:93:da:b6:95:e1:95:20:cd:fb:19:f9:
         05:c7:46:fc:4f:23:79:5a:e3:6b:ee:1d:e9:ca:ee:56:7d:0a:
         95:5b:4f:ca:aa:3b:10:0e:8b:a7:60:40:53:d8:0c:ca:09:5a:
         05:87:52:b7:37:5a:54:a4:f0:c4:c5:c7:71:b7:33:52:8b:f1:
         8c:84:3e:11:2d:d1:9f:ed:a4:1a:4e:49:f1:bc:7d:a7:29:76:
         85:c3:36:aa:49:c4:cf:45:83:09:b3:a7:fd:6f:36:15:45:2e:
         fa:61:04:64:9c:27:c9:7c:84:56:ee:da:28:40:28:10:80:cf:
         90:2b:51:21:56:44:c7:47:b0:46:68:f9:37:c5:fb:e2:ac:05:
         83:37:f3:e5:c1:f0:13:79:d6:f8:db:00:6d:27:4e:8e:45:e1:
         ec:c7:c5:fd:2e:55:e2:4c:01:85:e4:8c:f3:a4:c0:5e:6b:80:
         16:48:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----