Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa
File:                     2b24227e-4b42-4138-97ef-776285e988c1.roa (raw, json)
Hash identifier:          NaQMsRZjRlYrdWnHa6PP50ZOiEq5+7YrXExoBthWI2g=
Subject key identifier:   EB:7D:1F:58:38:C9:BE:55:70:F2:59:50:7A:09:37:F3:D1:72:59:2B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4574BE628FBE1445C5D90775F68F5152215136ED
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:6080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:74:be:62:8f:be:14:45:c5:d9:07:75:f6:8f:51:52:21:51:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=099f310c7799724afa402e5f400efaa0896b6c98afb00f6e13b0396bb3d9b6c1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:1f:c6:7e:1d:a7:4f:04:f4:16:4c:3f:cc:
                    5b:3b:92:d5:36:c5:5e:54:a9:2a:dd:50:be:8d:84:
                    0a:49:67:8a:6f:d7:cc:8e:98:f5:f4:d1:eb:de:72:
                    fb:41:c5:22:63:57:11:f8:e7:a2:9c:c1:d7:44:f5:
                    25:88:b4:c6:e3:56:19:10:8d:97:3d:bd:52:42:75:
                    7a:11:20:4d:84:1b:12:66:72:84:9f:c7:4f:69:0b:
                    aa:40:46:50:c5:1f:2c:4b:fe:a6:5f:16:36:cc:5d:
                    e8:4e:95:cb:53:8a:13:78:e2:be:9d:3d:55:ba:02:
                    8a:db:44:a5:ea:7d:22:d1:6c:78:52:e3:41:bb:8d:
                    7a:f7:a6:4c:78:f8:d6:38:ef:7b:c5:98:bd:2b:be:
                    f8:09:c2:17:0b:f9:cb:44:d7:d5:99:9e:d8:77:2c:
                    a9:33:4c:ec:93:13:bd:a3:54:bc:5a:ca:c8:7e:40:
                    85:38:51:1d:e7:c3:e0:5b:01:e5:06:3d:d4:ff:b3:
                    b6:c8:3c:c4:71:7a:3a:6a:e4:35:3c:c0:91:dd:b6:
                    6d:2d:c9:08:96:bc:eb:25:3c:b6:a5:7e:d4:60:c5:
                    36:73:c8:22:85:70:1d:e5:05:85:05:18:f2:a4:61:
                    f9:db:fb:9e:85:c3:f4:45:39:98:af:d0:5e:3c:c8:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7D:1F:58:38:C9:BE:55:70:F2:59:50:7A:09:37:F3:D1:72:59:2B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2b24227e-4b42-4138-97ef-776285e988c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:6080::/46

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:af:97:0e:a5:11:b4:6c:9d:03:36:9a:ba:72:2b:c3:27:
         ad:60:71:74:ff:c7:77:60:94:09:b7:f0:73:93:75:19:d3:67:
         94:26:35:09:63:dc:b8:d2:bd:47:d9:55:87:68:29:76:ee:f0:
         93:09:b3:e1:9d:be:1a:8d:93:b1:3b:5d:a8:54:b9:af:44:a8:
         72:e8:84:e9:3d:79:ce:2d:bc:44:a2:dc:b5:02:4d:e6:45:68:
         6f:94:d1:1a:12:76:b8:58:15:72:5c:31:92:8c:cd:2e:76:66:
         cb:a8:5c:f7:e4:67:3d:9a:bf:73:79:3a:bf:ef:ed:42:e0:96:
         b5:6b:b7:16:0c:f6:47:91:23:b2:75:be:07:c5:57:ed:4b:88:
         be:63:66:8f:1d:12:74:2b:bc:1b:09:ca:06:18:9b:b2:e5:65:
         f9:48:47:92:96:c2:a8:4f:1c:4e:c2:44:20:0f:f8:6c:74:df:
         60:b2:c1:1b:6e:73:78:4c:df:0b:c5:97:80:d3:42:62:c9:cc:
         89:fb:eb:68:30:bf:a7:ed:38:91:d1:8e:e4:a0:12:de:80:0d:
         92:9a:b3:4d:f4:99:19:aa:33:0f:6c:42:7e:c2:06:36:fa:d3:
         bb:62:88:ef:0d:8e:fb:b3:4d:21:65:ed:22:2f:cc:f5:a2:ee:
         b0:57:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----