Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa
File:                     29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa (raw, json)
Hash identifier:          /3n9qB831pGL3Bbz6gnFvdDdnLzyw33rExfRdFdbvs4=
Subject key identifier:   99:91:C3:67:E2:DA:43:5F:55:60:49:8E:B4:E7:3A:66:F0:9C:BC:21
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6F022A03755C81F4CD2C0C577A62C62943DD33
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:2880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:02:2a:03:75:5c:81:f4:cd:2c:0c:57:7a:62:c6:29:43:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c442b373b6025a78eee80450f5269c0a025cd3dd6a83e2e44e37611f4fe6798c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:95:2f:79:9b:2a:a0:86:e5:f3:fd:43:be:
                    25:3a:b3:95:c0:28:1d:9d:2c:6a:f6:75:9c:b4:9b:
                    e6:b5:4a:98:cb:87:f9:6d:10:98:1c:8e:2e:e4:40:
                    b6:09:18:ea:b4:b9:91:fc:7a:36:7b:de:f0:c8:cf:
                    d0:37:39:44:67:e7:df:9f:67:32:3e:3c:a3:60:d0:
                    f9:c3:70:29:3b:cf:cf:42:f6:f2:3f:b2:16:75:be:
                    12:57:cb:0c:c3:01:fb:1f:50:bb:d3:3a:b7:c2:c3:
                    20:ab:75:b2:b5:36:b1:ba:a7:d7:a1:ec:72:a5:09:
                    b5:f8:c7:15:5d:e3:b1:4a:29:47:3e:b1:70:3a:c6:
                    33:6e:fb:cd:46:79:42:a1:75:14:a0:bf:49:48:25:
                    aa:81:bd:f4:07:e5:30:07:bc:98:a8:2b:cb:71:af:
                    b3:31:e8:90:7a:be:79:4b:01:41:b1:99:0e:d8:c6:
                    80:f3:64:c7:25:e8:4c:86:b1:79:96:88:63:f3:61:
                    65:1f:ff:6a:56:d9:f7:b9:2f:42:dd:a2:0c:8b:3b:
                    76:ef:e1:5c:44:d0:60:77:bf:96:18:13:c9:fb:02:
                    ac:1f:6b:1a:5e:69:4e:71:7c:84:6b:91:97:e1:14:
                    d7:bf:26:5f:c1:da:7f:7f:73:5b:71:bd:2d:6a:47:
                    67:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:C3:67:E2:DA:43:5F:55:60:49:8E:B4:E7:3A:66:F0:9C:BC:21
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/29fe97d9-befe-4ea9-8151-d76ea6e9a705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:2880::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:f9:77:22:ca:10:d5:6c:27:0e:e3:45:50:06:63:db:96:49:
         98:09:08:f0:0a:3e:0a:62:d2:0e:70:dd:fa:ca:d6:9b:29:7f:
         27:e9:66:16:bd:68:d4:11:f6:59:d1:20:99:b9:16:4d:d5:31:
         2a:21:e0:ce:24:96:95:d3:e8:fe:3e:1c:64:11:96:1e:77:a0:
         cd:26:00:9b:d0:d4:fd:91:93:1c:4e:6d:50:4e:7b:39:36:ec:
         64:e2:2d:7c:a0:66:f7:37:4b:16:1e:f2:2d:8f:48:be:74:51:
         88:a6:85:f8:b8:4a:40:af:ba:a6:b5:a9:1b:69:0c:3e:1e:8d:
         f2:9e:cd:2c:21:32:3a:5f:14:a3:39:5c:d2:24:06:78:2d:29:
         fc:c9:a8:4f:31:33:3d:da:35:15:21:d2:11:e3:d4:5b:4d:17:
         ee:46:95:1f:1a:57:ba:c0:20:67:ec:68:3d:00:87:78:fe:29:
         74:8a:08:58:96:14:48:0c:e1:87:1f:9b:80:e8:e1:67:88:8a:
         fa:51:e1:78:30:0e:57:4f:c9:62:b3:e0:82:9c:00:f6:4d:45:
         2d:7e:2f:e0:e8:e7:e3:e9:3e:6c:4b:09:ad:93:76:c0:ea:13:
         b5:6b:78:7d:33:5f:ee:8c:41:65:f7:7e:35:46:d8:d3:4a:46:
         77:a5:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----