Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa
File:                     0d508791-7f08-4c5c-94e2-b498cfd414e9.roa (raw, json)
Hash identifier:          yATBIbkIpn2geWQGFeqZTMZdXJUjCczpE8ARtnbaDhw=
Subject key identifier:   F9:B7:71:83:DB:E9:4C:13:15:B9:BF:31:6D:0B:AB:12:C6:64:68:14
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6668413E8E25EFEE92A63A6D333AA8FEACEA5110
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:4880::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:68:41:3e:8e:25:ef:ee:92:a6:3a:6d:33:3a:a8:fe:ac:ea:51:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bfdd5e6fa18b9c57ae98f124ea40d32b7eb5e2bb112f89289731a71604d32ad0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:81:b1:84:e7:20:8b:06:15:0f:55:84:73:
                    3c:fc:74:cd:08:d7:61:5b:0c:7d:09:31:65:29:06:
                    78:25:26:07:c3:81:40:1a:d8:59:6e:d0:f9:47:b5:
                    4e:78:ed:61:9b:db:2b:51:1f:79:5d:2b:72:a9:45:
                    37:62:a5:65:06:24:21:4f:31:73:2f:36:e6:62:4b:
                    a8:14:a7:6b:eb:c5:90:94:fc:18:72:c2:99:8f:75:
                    73:4e:db:78:5f:3f:26:df:3c:a2:4a:e5:94:34:96:
                    2f:8b:38:a6:ce:cb:45:b9:42:af:03:1f:61:55:be:
                    94:e7:e1:ee:8a:83:44:ef:e0:ce:12:d5:a3:b1:b7:
                    00:3d:ab:49:b9:1d:fb:d0:69:f4:7c:32:5f:7a:fd:
                    1b:c9:bd:0e:b6:43:54:7d:ff:26:35:ca:42:a7:1f:
                    1e:b8:8b:9c:95:a1:6c:90:f9:1b:1c:55:a3:83:d9:
                    5b:31:1a:2e:2e:7c:a4:7f:2f:ac:93:4e:da:47:87:
                    68:f5:b6:ff:09:59:f8:e3:4f:f3:d4:46:84:d4:50:
                    14:55:61:4c:e2:fa:05:f6:ec:9c:7b:f9:c9:ae:2c:
                    12:d3:24:94:c2:bf:b6:45:82:8c:ea:03:62:0c:94:
                    80:ba:c7:06:eb:4e:d0:7a:82:2a:a2:e4:73:13:19:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B7:71:83:DB:E9:4C:13:15:B9:BF:31:6D:0B:AB:12:C6:64:68:14
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0d508791-7f08-4c5c-94e2-b498cfd414e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:4880::/46

    Signature Algorithm: sha256WithRSAEncryption
         c8:2c:c6:39:50:93:cd:93:8a:ed:bf:f2:a6:d7:f1:3b:ab:31:
         e6:a6:6f:a5:e3:19:b4:0e:2f:59:e6:a7:25:28:52:67:cd:0e:
         30:e3:20:23:e0:a1:6e:64:b6:6c:47:35:35:69:07:4f:e6:3d:
         d5:6f:92:df:42:a4:6a:7d:c7:f6:17:49:1b:ed:f6:2c:79:6c:
         af:af:4a:be:a2:9d:27:7f:cc:c8:fe:27:5d:ae:e1:d0:33:91:
         6c:ac:45:35:9c:16:db:bb:81:64:e2:3d:43:d9:c4:c4:a5:e3:
         18:04:3c:d6:5e:49:7d:1c:46:33:9f:35:33:82:32:a2:af:8e:
         28:36:36:79:a4:50:25:54:ac:45:98:91:b2:fd:07:f7:63:66:
         a8:11:97:81:d6:6d:0c:c2:78:b5:0e:30:14:30:2d:d7:6a:b7:
         87:44:9f:fa:da:3d:e1:a9:f6:46:f2:cb:28:e4:69:11:0e:f8:
         d4:e5:51:c2:aa:88:7f:6b:4c:28:38:4f:cf:8a:94:50:6a:3d:
         8c:75:14:14:1e:f5:01:4f:f1:b1:e2:95:fd:bf:d5:93:ff:b3:
         87:ac:a2:a8:01:e0:f0:ae:b0:31:b3:dc:02:7c:bf:2a:ec:c0:
         14:5b:6f:33:88:4a:a1:c7:a5:bb:b0:20:27:22:fe:4b:5b:5b:
         ec:57:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----