Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa
File:                     2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa (raw, json)
Hash identifier:          ZyGMbRWTbYSL0DB49xrLb6ZR/VWDu8kyPz125pnesIc=
Subject key identifier:   CC:59:22:98:7C:3F:D7:A8:DE:3F:DD:8D:69:0A:41:75:04:C8:34:1A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2A4C2268A5FEB51B9E083589D1E4ECADA16B1F16
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:40c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:4c:22:68:a5:fe:b5:1b:9e:08:35:89:d1:e4:ec:ad:a1:6b:1f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e2520487926a9f28efd651f6ca92ca5d0c7384e1ff4b032778d3537dd2c89e1d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:65:f0:18:21:fd:c9:db:89:7b:2c:80:de:
                    55:a1:69:4c:49:bd:a0:24:46:e9:e2:b0:03:41:5e:
                    ab:06:b9:56:40:0b:e6:25:2b:1a:d4:42:09:f8:85:
                    4d:f7:02:95:f6:a6:9f:71:ea:3d:8a:ba:b3:0f:fe:
                    30:25:52:bf:b5:4a:85:63:7b:cc:75:13:76:4f:c0:
                    9f:68:2d:83:ad:ff:dd:14:63:f1:ce:96:90:42:9c:
                    e9:87:d7:e5:7d:18:bb:3d:52:77:84:72:0c:fe:b7:
                    15:56:d4:61:2e:a1:a7:70:fc:0b:da:5a:3c:36:9d:
                    d5:81:b9:a9:e1:b8:02:24:ba:63:bf:65:bb:c3:9c:
                    7f:13:e5:c1:83:ab:99:46:e6:69:bf:ab:c5:ce:42:
                    41:38:6b:79:3d:e7:21:a6:24:1b:93:c2:47:27:11:
                    91:21:9c:b0:88:97:fc:d8:2c:22:2a:87:e3:29:9d:
                    5a:0a:8b:e1:8b:1f:7d:f0:dc:40:b6:7b:87:1a:f6:
                    18:76:4d:7b:92:7f:e0:d3:80:c6:0f:f8:85:51:03:
                    9f:45:a0:79:9b:f3:57:81:ff:85:a0:a0:15:91:c7:
                    ea:a2:a0:a0:a2:2c:61:b5:43:88:6f:81:2a:98:de:
                    6d:4c:c5:b3:d7:00:52:9b:06:8c:ed:1f:eb:e1:8e:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:22:98:7C:3F:D7:A8:DE:3F:DD:8D:69:0A:41:75:04:C8:34:1A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2e7fd07c-40bf-4d7b-af7c-043c20c75a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:8d:08:1d:7e:cf:b4:5e:c5:c4:85:d5:2a:37:9d:8c:e4:a7:
         ce:22:29:3f:ed:f2:00:83:5c:77:6c:93:27:4e:69:15:bc:18:
         b4:1a:48:7b:96:0a:c1:92:be:4a:d6:bd:24:38:e2:fd:87:4d:
         9b:3a:07:f6:df:c7:e6:f9:e7:c8:fe:6d:0a:b2:02:ec:dd:00:
         f5:0c:44:20:cf:59:81:d1:d1:a7:0d:85:6d:5c:5d:42:23:e1:
         d2:cd:dc:84:5d:b4:16:b5:97:58:e1:76:50:1d:ae:3b:72:06:
         f3:f7:75:45:cb:90:d9:e8:26:6d:70:9e:17:5c:6a:8e:fe:d4:
         dc:cc:a6:c3:3f:f1:4b:4e:49:cb:1e:9a:9f:de:c4:aa:ed:9c:
         25:56:16:51:f5:ad:6d:17:08:b7:8b:04:b7:b1:45:a5:b8:77:
         fb:e0:eb:57:c9:48:d5:c7:a8:ef:3b:9e:76:26:18:c4:3f:fa:
         86:c3:1c:cb:9e:0f:44:38:ab:ff:31:05:9f:b6:a6:06:60:09:
         8c:df:88:fd:cb:a5:18:00:08:a0:9f:7b:6d:4d:88:ca:5e:45:
         a0:4a:2d:db:ee:5a:33:76:c9:10:c3:65:8e:6a:b5:84:05:5a:
         33:d1:27:94:3f:de:5f:53:34:b5:67:e9:53:12:3a:e2:6c:28:
         a3:34:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----