Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa
File:                     1e662b58-509e-40b1-ad70-5d83c0290d98.roa (raw, json)
Hash identifier:          BdRvEcVThHQoIyjlx7s9ujCOrb142qTFwh7jZ5WRnD8=
Subject key identifier:   E8:2D:2A:B6:C8:31:ED:3C:7F:D1:93:81:CD:8D:BD:3A:CB:6B:0B:86
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       05CFED2E954CB4813E3208746E8C681A9AD407CD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafa:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:cf:ed:2e:95:4c:b4:81:3e:32:08:74:6e:8c:68:1a:9a:d4:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=bf8b313fcec2dda00bae5b22e59e1dc2c62d717ec77a59f1cb3072cf65c6ccb9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:c9:0c:e0:90:a5:25:be:20:30:91:25:02:
                    07:04:92:d1:a6:bb:01:ee:23:47:83:03:c3:e9:ee:
                    40:5d:26:65:0f:12:1d:b4:54:5d:79:51:bb:50:15:
                    c3:67:e5:1c:11:00:d8:9a:62:1f:ae:b0:a2:79:20:
                    cc:ef:8f:5c:92:56:b0:40:93:50:45:3e:9b:cb:fd:
                    d1:50:62:11:50:05:c9:2c:f0:2d:c0:02:2b:69:df:
                    64:f8:ef:d8:f1:de:96:33:7d:07:7a:e0:9f:4a:2e:
                    2d:1d:51:86:eb:74:3b:a7:9c:40:2d:31:36:ca:6a:
                    40:1d:e9:f2:07:d6:a4:07:f0:c4:ae:d3:8d:2c:78:
                    cb:4c:65:d9:77:80:e3:75:2c:f8:f2:5d:1b:36:59:
                    83:1a:65:71:05:d2:84:90:8b:e5:6a:31:7a:c7:83:
                    fd:89:98:cf:6d:9b:78:73:78:88:a7:56:e7:32:ce:
                    0e:73:ee:8f:e2:b0:5d:29:f0:27:db:15:f3:d3:df:
                    a6:f0:38:e7:25:0b:2b:f5:2e:f4:c2:8b:fd:a8:2c:
                    e8:1f:2e:29:b9:32:89:c1:7b:19:dd:98:35:29:f7:
                    4d:38:01:4a:83:8a:fb:52:3f:41:74:07:3b:c9:5a:
                    b1:28:42:7e:2f:98:be:fc:2c:27:bb:5d:93:98:a2:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:2A:B6:C8:31:ED:3C:7F:D1:93:81:CD:8D:BD:3A:CB:6B:0B:86
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1e662b58-509e-40b1-ad70-5d83c0290d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafa:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b7:cb:bb:c1:5c:b8:41:77:47:fd:89:98:f3:54:98:74:6c:6c:
         b5:82:08:e6:33:29:70:ea:63:0c:e8:a3:2f:1a:77:bf:e8:81:
         3b:6b:2d:b3:05:a3:59:5a:d1:91:85:3a:5c:09:6e:8b:06:15:
         1a:12:17:f7:eb:57:38:4e:7a:49:7e:9f:eb:21:21:33:0b:4d:
         96:1e:b6:ad:0d:08:77:b1:06:a4:da:a6:4d:29:9b:db:c7:c5:
         0c:28:df:56:54:79:99:85:55:99:f9:03:fa:fe:07:be:f3:9f:
         33:a1:cd:76:c2:bf:79:04:c4:65:e2:36:b5:ea:dc:d3:9e:f2:
         76:4e:f9:7b:9e:fb:3e:a6:9e:ad:96:84:58:af:3a:e4:4c:92:
         1b:83:bc:6a:72:a4:84:1a:8e:9a:5d:e4:dc:fd:1c:ee:34:12:
         f2:76:24:c2:fc:9f:b7:0d:d9:89:df:ec:8a:70:19:33:b6:19:
         62:ea:f9:29:ce:0f:b5:99:a1:a6:fb:6e:3b:6f:35:eb:ee:67:
         f5:5f:8f:39:ef:2e:52:a0:c3:ab:e1:1a:90:39:33:df:71:19:
         3d:bc:66:a3:da:a7:cb:bf:b7:ae:4b:31:c5:d5:f0:2a:73:da:
         51:f2:4b:f1:33:c2:7d:5b:7d:d7:0f:73:22:19:94:5e:de:74:
         06:94:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----