Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa
File:                     2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa (raw, json)
Hash identifier:          n8+Y5/J8a3nc3BgwQg1W0pPv/WgfAis8JlwJ+PyoJL0=
Subject key identifier:   43:C3:47:9F:0F:36:3F:79:A6:E6:E6:AE:2F:32:51:26:12:41:BF:C3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2B69D0F933ED2401F4124D6491E76689B3DFFECC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:e080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:69:d0:f9:33:ed:24:01:f4:12:4d:64:91:e7:66:89:b3:df:fe:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=65bcf4b0577de2aee4fe59f9da55aa441cad652257610c836802ee40cebcb4ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:30:1f:4f:ad:65:1f:ff:56:96:b4:18:4a:
                    a2:d7:ed:cd:b4:d1:87:f8:94:93:81:ae:fc:c8:1f:
                    cf:d4:6c:bc:de:a9:42:c0:97:45:e7:d9:9d:d7:a1:
                    61:bc:21:3c:1a:f8:24:d3:41:32:69:9b:26:5e:a1:
                    13:3e:5f:55:bf:e2:43:b2:bf:52:27:22:9d:41:e2:
                    c1:bf:29:9c:f0:b6:2f:3f:be:6e:2f:6c:c8:f2:60:
                    86:e5:65:d3:ac:96:1d:91:bb:0c:1f:d8:3e:69:6d:
                    28:71:c3:be:ad:67:72:17:67:e4:85:ba:18:ae:e9:
                    7d:88:16:bc:1c:b5:84:35:df:b8:61:43:3e:e7:78:
                    04:41:e3:0f:6f:66:be:69:13:a8:12:00:43:68:b3:
                    ed:e6:9f:c4:fd:e7:2c:e7:ef:da:0b:ea:58:b6:3a:
                    d5:a2:c2:57:02:c8:1a:65:8e:e2:01:99:6c:61:20:
                    3c:07:37:0b:d9:81:62:8d:8e:d6:ee:15:f0:bd:55:
                    a5:76:62:c9:f6:2b:ff:67:06:c8:fe:6e:13:4f:13:
                    9d:ee:a3:04:71:14:45:2d:49:0c:38:62:93:b2:22:
                    b2:c0:bc:da:4f:1c:61:87:01:1c:42:8c:cd:f3:82:
                    d1:ed:e6:09:ff:e7:d8:61:3c:79:d2:73:b0:f9:b1:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C3:47:9F:0F:36:3F:79:A6:E6:E6:AE:2F:32:51:26:12:41:BF:C3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2f2d32b4-5213-4ecc-9172-ea72fd47e165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:73:ac:3a:39:e4:75:5c:3d:19:c8:91:80:16:a0:46:24:f8:
         4e:c7:1e:4a:3d:86:2b:1e:be:81:90:8d:d9:da:90:90:41:bc:
         6d:a3:64:df:9b:6f:59:d1:57:89:30:b3:ed:30:3f:ca:8b:0c:
         ae:cd:dd:c4:a7:68:be:ad:d0:8a:70:de:4e:72:f2:17:90:65:
         6b:2d:62:49:9e:68:eb:96:56:01:b5:fe:6b:35:cd:73:35:d7:
         07:d3:f8:e7:06:5c:f4:76:6a:e8:33:ba:08:4d:24:3c:e1:f3:
         7c:2d:72:70:f7:13:5e:1d:1b:d7:27:74:6c:38:ef:13:65:75:
         a1:ca:6d:e4:1a:5c:97:09:1a:e0:b1:e3:09:ba:a7:7d:a4:08:
         b2:46:4a:53:97:03:75:b1:ad:8c:f2:73:b9:52:5b:61:a8:5b:
         2c:6e:e6:11:94:90:14:77:a5:e1:2d:17:47:7d:71:d3:67:2f:
         e0:bf:0a:2b:56:ae:95:a7:68:77:6b:92:d6:84:b6:8a:12:fb:
         78:20:b5:58:01:75:31:88:77:e2:5b:80:b6:24:6e:aa:84:8a:
         d4:db:2e:61:0f:95:72:f1:d1:3e:36:4b:c8:9a:13:52:d4:e2:
         5d:b1:0f:b0:0a:50:f1:ef:3d:bf:3b:bd:01:2d:a1:bc:e1:1c:
         a1:42:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----