Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d82d68c-b660-4018-9fb1-a96c9fdd7793.roa
File:                     2d82d68c-b660-4018-9fb1-a96c9fdd7793.roa (raw, json)
Hash identifier:          cKj2YCPz4QdLL93umGPh+DRIyyLShk+46sgiRqoicJI=
Subject key identifier:   27:E8:F5:D4:C9:14:AC:87:2C:B6:C7:76:91:E3:D7:88:EB:BA:CC:2D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4F432783448F81BDD1E5F0CC536E7A3A69E4F224
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d82d68c-b660-4018-9fb1-a96c9fdd7793.roa
Signing time:             Tue 28 Jan 2025 00:00:00 +0000
ROA not before:           Tue 28 Jan 2025 00:00:00 +0000
ROA not after:            Tue 04 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf9::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:43:27:83:44:8f:81:bd:d1:e5:f0:cc:53:6e:7a:3a:69:e4:f2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 28 00:00:00 2025 GMT
            Not After : Mar  4 23:59:59 2025 GMT
        Subject: serialNumber=af2972e5cf6f0e1d636d35fff60a8bb6d630e97c3bc3e666ae19d7efda4c917d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:2d:48:f2:f8:69:c9:d9:0d:dc:d2:d9:15:
                    6e:67:ab:0f:55:ec:05:8b:0f:bb:7e:9e:ba:0a:84:
                    0c:fa:48:1f:5e:19:db:df:15:e5:f1:b0:1e:33:4a:
                    21:8e:1c:e4:bc:42:20:a2:e1:02:20:d2:32:60:fc:
                    37:dc:5f:bf:64:91:3e:0f:8c:d6:2d:cb:a2:97:3f:
                    27:a6:df:cf:86:45:af:f9:07:56:cb:4c:0c:9b:a1:
                    fb:ec:5b:ee:16:89:7f:42:36:1c:2f:87:0b:62:60:
                    dd:51:ff:85:96:7a:26:9c:f2:ec:71:46:02:a7:64:
                    d8:0b:c5:c2:fe:d5:78:e8:9b:f7:04:73:b9:11:85:
                    b3:05:f9:6d:8b:8c:60:b2:09:6f:5e:86:e8:06:54:
                    82:ba:fc:94:63:c2:19:48:fa:9c:d2:3f:d9:85:8a:
                    77:33:93:47:ed:b3:c8:fd:3c:59:69:20:e5:33:a5:
                    38:96:65:0c:01:1e:e6:60:90:0f:c5:5d:48:a8:17:
                    82:39:15:bb:74:3d:ad:eb:b1:1f:9f:e6:3d:39:ef:
                    1e:05:95:32:ea:ca:28:92:29:f6:0d:e4:76:85:da:
                    7e:d7:f1:a3:dd:ba:8c:d4:c2:5c:c7:18:33:0e:a8:
                    3f:4d:66:be:81:a0:b2:25:5f:58:4c:ed:10:c4:01:
                    1d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:F5:D4:C9:14:AC:87:2C:B6:C7:76:91:E3:D7:88:EB:BA:CC:2D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2d82d68c-b660-4018-9fb1-a96c9fdd7793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf9::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:ea:ef:d5:f9:7a:0a:cb:6d:54:bc:dd:4c:90:6d:1c:f7:
         3b:92:14:a4:cb:c9:e2:a0:ac:34:ef:21:c6:1e:9b:6f:c2:c1:
         f5:2c:a6:94:1f:4a:b4:c3:c1:d2:ce:6c:8b:5d:c6:cf:fa:70:
         03:fe:25:5e:f6:eb:6c:97:96:dc:7c:db:df:12:49:cd:5a:86:
         7c:95:15:0a:15:24:ce:dc:14:1e:02:df:8b:21:c3:9f:48:3b:
         d5:c5:27:bc:ed:1f:77:9b:fd:78:02:19:d6:55:b6:1f:30:fd:
         a7:e9:e5:e4:bf:54:8d:f1:e9:0f:56:85:97:36:c4:a7:a4:d7:
         3c:68:73:79:79:c0:02:43:97:b5:c3:da:8f:72:dd:c5:c3:4a:
         ed:c8:7b:60:93:13:8b:0a:45:64:d9:37:9d:d5:c8:ae:33:4b:
         47:79:62:74:0b:f8:b8:fa:98:bc:8b:b0:7e:6a:28:91:b8:f0:
         ce:cd:9d:26:ad:56:0e:d3:5d:d2:1b:42:3e:82:a0:e9:97:8b:
         64:fc:16:85:7d:96:b5:75:dd:e5:3e:d2:06:89:0d:1f:5e:30:
         e8:41:9e:bd:09:0b:8f:93:43:dc:a8:d1:47:f1:ac:73:98:2b:
         6c:42:b4:c0:2a:5d:eb:41:7e:b6:d3:9b:0f:fe:57:8b:9d:79:
         cd:ba:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----