Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa
File:                     30b671bd-156b-4a81-a500-a0a4b031317e.roa (raw, json)
Hash identifier:          anz7LlK8Wxm7IXZ3KxrlpKOBIXOu4FBeK5wmWaMN8DA=
Subject key identifier:   3F:AA:F3:69:77:2B:1B:64:B0:08:77:B2:37:91:FC:C8:7D:8D:82:35
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       556973D6D09C6DA5FCDE32A3E23B7277D93BDC67
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:6020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:69:73:d6:d0:9c:6d:a5:fc:de:32:a3:e2:3b:72:77:d9:3b:dc:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=20d25347bbe07ede3f2a49e1bd7b9f6509613f38700fff8f2ca72383813d2401, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:7f:48:5f:07:11:81:fc:a2:02:0f:c3:bf:
                    d6:5e:06:6e:2e:a3:28:24:6c:e6:ba:71:f2:c1:58:
                    06:65:d6:3f:51:7f:4e:e4:29:60:8e:de:3c:87:3e:
                    d7:50:19:4b:17:bb:f3:8f:9d:ef:84:7a:11:e4:66:
                    28:6c:fd:a7:91:fa:18:7d:40:50:7e:42:db:11:a7:
                    53:68:55:36:27:a6:ed:b2:f5:07:cf:7a:7b:06:b7:
                    6c:5f:0a:b1:51:3c:49:de:37:82:68:95:1d:01:56:
                    12:24:c6:f8:f6:d4:2f:78:37:fe:31:5c:2d:87:db:
                    6f:47:9b:3d:d7:3a:7b:5e:bd:f7:82:88:ed:da:4e:
                    5b:a6:8b:24:03:b2:f5:1e:5c:17:34:d3:62:88:8f:
                    a4:69:9a:92:d6:d6:25:3e:ce:ac:0d:7f:41:ec:05:
                    43:8a:cf:25:50:b0:fe:37:3c:cc:57:93:aa:20:f3:
                    91:68:8d:c2:1b:0d:fb:dd:fc:c8:a6:b7:03:f3:12:
                    16:9f:2a:5a:84:23:57:f4:47:da:ef:f1:62:4f:ca:
                    ae:c5:87:ae:a7:ff:5b:4f:1c:d5:b3:4c:36:f4:98:
                    a6:d1:0a:6e:82:de:79:db:6a:10:de:61:c9:72:f9:
                    2b:a1:6a:e5:34:1b:74:df:74:4b:56:ca:58:3d:70:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AA:F3:69:77:2B:1B:64:B0:08:77:B2:37:91:FC:C8:7D:8D:82:35
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30b671bd-156b-4a81-a500-a0a4b031317e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:6020::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:27:43:dc:db:6a:f5:87:16:65:a3:92:84:71:4f:41:03:e7:
         99:9d:a9:71:61:87:ac:0c:14:44:0b:21:ef:2d:3f:ff:d3:4a:
         3b:7e:87:3c:05:f6:47:f8:34:fb:aa:d7:fc:56:da:5d:e0:a8:
         e1:f3:78:f6:0a:38:2d:43:07:e2:b4:53:d0:5d:bf:04:13:2e:
         1e:de:7b:5a:38:9a:6b:24:3a:80:1f:1b:c3:25:bc:9e:a9:12:
         b0:55:28:bd:38:10:a6:25:d5:70:44:a9:a5:d0:07:cc:3b:36:
         43:ef:2c:ac:c2:aa:d7:05:b3:4c:89:fe:13:8e:fb:08:f1:38:
         e1:58:5c:f3:49:31:8c:5d:f9:7e:0b:39:50:af:48:30:ed:e9:
         cd:5a:36:10:da:19:9e:cf:39:95:b8:4e:44:f9:51:2a:55:70:
         54:79:75:3b:59:24:48:c3:f7:3b:45:27:a4:9f:0f:7c:42:70:
         4a:c7:19:a6:53:41:cf:7c:db:ce:67:84:0c:a1:29:77:4e:36:
         ae:10:57:9a:69:3b:f3:cc:a6:3f:d7:7d:1c:6f:90:dd:15:91:
         53:cf:f3:7d:58:97:fa:0a:3c:8a:43:cf:15:06:ad:84:75:ab:
         9b:35:24:a5:9f:06:17:29:e7:15:d4:6f:d9:04:a5:3d:80:19:
         01:05:5f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----