Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa
File:                     2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa (raw, json)
Hash identifier:          PmV1uxiuFaY+gUVDXxPOz+wIMG+nYHp1F2o4YtUsMls=
Subject key identifier:   E3:90:4A:FC:F6:BC:7A:BD:59:45:07:46:40:EE:4E:A8:F7:54:60:90
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       62E283C7AD47C878B148068F2AEE8EC9368526AF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:48c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e2:83:c7:ad:47:c8:78:b1:48:06:8f:2a:ee:8e:c9:36:85:26:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=21b9dc67586a5bfce095ef674a70ffcda4cd57432e8cbaa7cf28b298f33627ff, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:67:ac:25:18:ae:1a:6b:f3:f8:5f:a1:7c:
                    32:b9:02:e6:44:c5:06:ab:17:f0:a6:4c:3a:8d:03:
                    e0:73:48:d9:02:80:f1:c1:a4:2d:0e:43:d3:1b:c3:
                    45:4e:eb:d5:7c:c1:7b:58:78:52:73:e6:28:27:d3:
                    16:8a:6a:8c:a9:99:7a:44:5a:b1:45:29:eb:af:73:
                    f5:28:ec:dd:6b:10:63:e4:0a:e4:1e:b7:09:39:c2:
                    5c:93:ac:e4:bb:fc:48:5d:de:82:09:9b:39:dd:32:
                    8b:52:c2:b6:eb:3b:dd:ad:28:40:be:1c:48:0e:01:
                    a3:da:e3:0c:53:92:62:97:09:f9:b8:b1:51:28:30:
                    1a:99:9b:80:3e:9b:47:0c:16:41:4b:7a:e7:9c:e4:
                    28:70:ef:74:5d:79:97:c8:f2:de:57:d5:14:17:d8:
                    c7:9d:bf:03:41:6d:80:f7:f7:f8:dd:5f:d1:e6:16:
                    b3:12:9c:d0:7e:c7:57:dc:25:9a:33:55:ce:0e:b4:
                    4b:5c:4d:55:3d:3b:c1:4b:f5:88:c2:05:f2:80:84:
                    db:f5:98:05:33:25:90:0e:0c:8c:32:02:40:5e:11:
                    2e:3a:1e:64:e9:25:55:62:85:10:54:b3:00:89:1d:
                    6c:00:65:1f:92:74:80:7d:c2:16:80:dc:4e:90:44:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:4A:FC:F6:BC:7A:BD:59:45:07:46:40:EE:4E:A8:F7:54:60:90
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2dcd175c-d836-48eb-86d0-63d1c2f1c6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:48c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         a3:b7:31:42:5b:83:e9:8a:02:cc:6c:67:80:d7:dd:35:c5:27:
         45:86:8b:98:dc:4b:a3:7b:7d:ce:38:99:66:82:f8:2d:59:d4:
         10:b7:11:9b:6e:a3:43:0e:b9:8b:9c:65:ec:26:f3:dc:80:5b:
         d5:fd:20:87:e1:e2:bd:dc:02:0f:6d:64:d5:40:4c:a9:f0:79:
         55:ee:3c:82:a9:b4:ca:13:10:4f:1b:93:87:11:de:bc:1c:3b:
         ae:04:9b:93:18:97:94:f2:01:7e:08:a7:4d:96:f0:61:ed:d9:
         55:de:fa:dc:54:59:c2:43:81:b3:0d:64:c8:5d:95:50:bc:3a:
         a8:bf:43:e7:0c:60:d8:21:7f:ea:6e:b8:3e:06:ea:26:75:7f:
         07:37:b5:aa:7b:23:1a:69:79:63:38:d4:92:99:a8:3c:60:03:
         e2:4c:70:cf:7e:55:35:94:c6:e5:05:6e:7a:14:6d:9f:81:63:
         44:0e:e1:7d:f3:2b:73:bb:73:ba:6b:92:b8:d7:2d:73:52:1f:
         3f:45:7c:10:d9:a8:a1:c8:62:80:53:75:53:d6:32:e9:7e:7c:
         94:8d:24:4d:65:68:07:b3:5f:e6:24:2d:1f:1e:aa:a1:fb:c1:
         1d:b7:1e:01:5f:1d:db:08:fb:4c:77:86:9b:ba:63:39:f0:05:
         90:a3:5f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----