Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa
File:                     27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa (raw, json)
Hash identifier:          VR9vkZw1DH6WzH0eXaNstEPnvnYOkwQZH0KZLX3sw7c=
Subject key identifier:   CF:08:B0:CE:DB:34:48:5D:B6:B7:0F:CD:47:57:4C:DF:16:F7:2B:04
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       06AEECDEAFEC930912E8F61EAB33CD96EDB64C32
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:a080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:ec:de:af:ec:93:09:12:e8:f6:1e:ab:33:cd:96:ed:b6:4c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8707831c3cab3fb2f3c5ad98347f3ce132a3c52eebe772e1626c74688b28be89, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:a0:18:46:03:92:c1:60:05:9b:cf:ce:00:
                    ad:9d:58:6b:54:bc:ff:33:3e:b1:cc:22:4a:99:49:
                    d3:20:0b:7d:f9:2b:2b:f0:fc:db:a2:ac:1f:ba:e1:
                    05:6a:e5:d0:67:5b:42:e1:3e:a6:28:9c:b6:01:29:
                    9e:6b:cd:d2:0a:bd:17:8e:4a:5a:0a:2b:3a:f1:ed:
                    80:2c:ed:09:91:c9:5c:c6:03:b2:4f:be:26:13:b3:
                    2b:cd:df:f2:85:30:8c:a9:93:c0:21:cb:0a:5d:b3:
                    6e:d0:7e:e4:59:97:a9:5f:48:d0:87:9f:d9:ea:e0:
                    43:b6:5e:e1:47:b3:d3:c5:54:a3:58:1d:c9:e8:6c:
                    3b:11:97:66:8f:42:2c:a1:a0:20:b4:f4:39:dc:8d:
                    4a:db:15:df:c8:da:af:42:ea:7c:94:4f:f0:75:2f:
                    5b:bd:89:2c:8f:60:33:ff:7d:b6:dc:25:04:90:dd:
                    1a:7d:68:5d:5c:fe:6f:da:16:8c:65:65:52:2b:89:
                    53:eb:28:be:28:00:05:32:9d:be:0a:69:20:45:ba:
                    ce:e0:ad:cf:e6:21:b4:d6:24:c3:93:b1:ff:dc:90:
                    42:c3:1b:f7:37:ba:ae:d8:d9:29:4a:43:d7:10:14:
                    1e:c8:7e:88:c2:81:43:24:d2:4a:6e:02:1b:ca:b5:
                    f5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:08:B0:CE:DB:34:48:5D:B6:B7:0F:CD:47:57:4C:DF:16:F7:2B:04
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27a21914-ef78-41ce-b39a-c34fac3f4fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:a080::/46

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:49:f4:ad:ef:88:18:26:99:39:c9:53:25:06:af:2b:28:
         12:ba:fa:99:9a:28:97:65:c6:89:11:90:2e:a6:13:17:3d:ed:
         f9:cf:e7:fb:bd:b0:5a:7b:46:8d:66:88:12:cb:3e:dc:2b:84:
         ef:01:7e:bd:32:ae:66:4d:3d:b3:42:d4:de:a8:fe:d4:4f:8d:
         30:c0:f5:9c:50:4c:90:b9:e4:22:de:21:45:63:54:d6:8b:2f:
         48:25:b8:55:86:c6:c0:31:5f:1e:f2:ce:05:7f:07:87:d2:90:
         92:ee:c5:02:15:3a:c6:d5:e2:da:2f:5c:6b:aa:bb:ee:3b:e2:
         6f:f4:ab:f5:f3:d5:4e:e1:a9:d1:bf:ee:90:ae:cb:14:7f:47:
         91:51:82:b1:63:c3:6a:e0:7a:39:8f:98:0e:a6:b8:e5:af:57:
         96:de:ba:17:13:e2:d3:ce:b3:c3:37:c7:c5:62:3c:f5:5b:06:
         26:de:d7:79:c3:4b:d1:78:62:49:0a:b3:06:f5:74:cb:ea:72:
         83:63:70:ac:e2:af:ca:52:32:27:eb:b3:0f:a7:70:27:30:2f:
         17:a7:9a:d3:9b:c7:6c:f4:10:e7:36:7f:3f:a6:80:0b:75:96:
         fd:a9:53:98:8a:53:67:e4:10:4a:5c:16:03:2f:57:e9:79:cc:
         9b:a7:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----