Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/122b6540-2716-4812-94bd-babdad6e9125.roa
File:                     122b6540-2716-4812-94bd-babdad6e9125.roa (raw, json)
Hash identifier:          mDxwtW4ts/uNPuBiIuU+hP2QnsCLKvD8VsIYWYWDvB0=
Subject key identifier:   B5:14:AF:B3:A3:F4:38:49:34:D7:9E:CF:5F:5F:9C:4C:D4:8F:47:56
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       156DB74807CDEA15DF6D9D9BB2D3E6F232BD8BB5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/122b6540-2716-4812-94bd-babdad6e9125.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:a040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6d:b7:48:07:cd:ea:15:df:6d:9d:9b:b2:d3:e6:f2:32:bd:8b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=dda592059c083b18529f8ad460b4f7a352dff0cf748525d776d7131e07f81d41, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c1:74:bc:e8:31:84:ba:55:73:e8:17:a1:04:
                    8d:0c:86:50:af:98:ff:a0:66:e5:a6:86:ae:2f:92:
                    ef:35:d0:c4:a8:dd:d7:9e:a2:48:9d:b1:14:8d:6e:
                    82:c9:aa:98:51:91:ab:f0:d3:a9:af:69:b6:9e:8d:
                    74:5b:e2:6c:f6:a5:a9:82:75:9e:cb:c2:27:d9:2f:
                    8c:13:3c:20:a8:c0:a5:bb:2f:fd:82:33:78:f2:de:
                    bb:12:9f:a5:8c:51:55:0c:7e:2b:a1:14:d6:92:46:
                    87:5d:a3:35:0f:06:d0:1a:6c:5d:9b:07:ac:e1:53:
                    4b:fa:f9:f4:69:76:32:e8:fe:f5:b3:b4:8f:d5:5f:
                    9e:28:38:1f:d7:c3:70:8f:5e:23:e6:74:fa:a7:6c:
                    57:99:7a:97:b7:2b:70:f2:8d:c8:98:d7:b4:55:8b:
                    d7:57:ab:31:6d:01:57:8c:ce:4f:e5:64:bc:c1:51:
                    b7:b0:86:6f:85:ff:e9:7d:b2:2b:fe:97:ba:7d:39:
                    a2:92:f4:33:0e:db:22:c7:e7:d8:1b:75:71:50:0f:
                    62:a9:9b:e6:c7:aa:a1:80:f6:67:94:5a:92:2f:cc:
                    36:a6:db:e9:b8:f9:47:f1:2e:72:56:bc:2e:22:e9:
                    37:80:c5:0b:07:e8:fd:e0:d1:2a:34:14:75:a4:7c:
                    d3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:14:AF:B3:A3:F4:38:49:34:D7:9E:CF:5F:5F:9C:4C:D4:8F:47:56
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/122b6540-2716-4812-94bd-babdad6e9125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:a040::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:30:e8:d5:27:e4:44:b1:27:65:b0:ac:fc:68:93:54:d9:
         47:1e:25:00:2e:a7:16:32:cd:ba:46:fd:85:4a:e1:00:6b:9c:
         28:c2:49:29:ea:4b:46:cf:0a:ac:44:cc:90:a2:70:bb:07:0f:
         17:f5:de:67:11:ac:db:5f:5d:81:7d:a2:d3:66:3d:d6:7a:06:
         27:f0:22:1a:d0:bc:60:25:80:ec:56:64:c1:99:d9:6f:19:9a:
         40:01:6c:48:d5:23:ef:2f:4c:1f:28:c1:1b:46:f0:b5:da:26:
         a5:3b:82:51:f6:2d:80:e5:75:0e:4b:4e:6a:e0:dd:b8:a0:0e:
         f3:3a:82:fb:44:ac:0f:c1:3e:27:0d:a9:a7:e3:af:22:29:b3:
         36:c8:7d:20:1c:4a:a1:89:f1:76:75:02:07:5f:b1:12:bd:30:
         75:e6:f7:50:8f:9c:d9:3c:47:7a:3b:bd:11:f3:ad:44:d7:6c:
         9f:a0:74:5b:df:3f:fb:67:32:fb:1d:59:1f:bf:f2:b8:c7:a9:
         a4:c9:36:59:16:f2:1b:f2:ea:7c:87:b5:80:33:85:d8:d1:c6:
         8a:5a:7f:37:f1:8c:e4:50:8b:bb:8a:63:0e:f9:63:ca:89:58:
         61:b3:d0:1c:65:16:aa:32:12:de:bc:4c:42:1f:14:24:ba:ff:
         13:9b:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----