Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/329e93f6-04eb-4c13-8818-83f24142dcf6.roa
File:                     329e93f6-04eb-4c13-8818-83f24142dcf6.roa (raw, json)
Hash identifier:          qKjjavlNQeTO44xJYRWkKMbcLBUiim8tZOENq+y1pcI=
Subject key identifier:   5D:48:80:58:BE:80:F2:02:B4:DA:4E:4C:E0:7B:FF:0B:35:17:5A:6C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       71887FFE98591FFE5689F1C028A5D46EAFDD2751
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/329e93f6-04eb-4c13-8818-83f24142dcf6.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:7f:fe:98:59:1f:fe:56:89:f1:c0:28:a5:d4:6e:af:dd:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=847b4c0d0538abeb0c6f0efc80e68a67eab5ec4df50e7797f178def8d4caddf0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:f5:65:df:7f:eb:74:2b:1f:76:39:6d:e1:
                    0a:e7:0d:40:ce:8f:ff:56:ab:5c:66:4c:af:0e:f7:
                    cc:b7:3e:1e:f5:5b:6e:8a:f5:35:80:e1:fb:48:50:
                    9e:24:2b:ea:6f:4d:da:77:70:30:a6:df:1d:75:4f:
                    1f:84:e2:e6:53:a4:96:09:b4:2e:fe:00:43:0d:c4:
                    db:57:6c:8a:20:b5:1d:ed:64:7b:f8:e7:b0:61:9a:
                    c6:de:10:ab:a5:f6:a3:04:60:c6:d4:47:fd:7b:bf:
                    5a:f9:e1:71:d0:fc:35:17:5f:c9:72:e2:39:bd:87:
                    20:2b:b9:be:f7:19:18:1b:09:0b:fd:98:75:f6:a3:
                    6e:41:8f:ee:02:0b:21:bd:98:33:55:6e:b1:17:a5:
                    93:65:66:fb:78:a9:9f:5b:b5:16:f6:77:30:42:5c:
                    99:60:17:c9:45:06:e8:29:53:08:6f:c7:f9:9e:a8:
                    dd:df:d0:d1:43:97:cf:55:8e:fe:ef:80:57:eb:1d:
                    7c:43:1e:3a:70:09:8a:b2:4a:1c:d9:dc:08:4e:db:
                    e4:df:7b:2b:30:96:be:1f:44:06:d2:31:4d:9b:8c:
                    ee:1e:d1:a7:c7:b2:f5:27:cf:e1:00:48:be:e3:35:
                    01:a8:cd:68:c0:5a:a5:b0:8f:94:d6:36:e4:3d:df:
                    ff:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:80:58:BE:80:F2:02:B4:DA:4E:4C:E0:7B:FF:0B:35:17:5A:6C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/329e93f6-04eb-4c13-8818-83f24142dcf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:58:0e:75:5c:37:5b:c3:62:29:62:39:0a:b5:5a:37:63:
         9c:09:53:ff:c9:51:a3:76:b8:fe:89:03:ad:ef:f3:c4:cd:06:
         87:cb:b0:19:b6:4a:ac:6e:96:8a:d3:1d:64:12:c6:05:9b:6b:
         35:db:0a:01:20:6d:ff:34:7b:bd:1c:18:9a:6b:15:4e:97:9c:
         24:27:46:ba:53:cb:90:a0:cc:06:5e:fe:9a:48:75:6b:97:79:
         b8:44:16:bc:97:6c:30:28:f0:15:ef:7c:22:cf:d8:04:44:1a:
         b4:ca:87:17:60:f7:61:36:4e:81:75:b0:a9:8a:0e:e4:d0:13:
         24:58:ef:81:36:1a:2b:ed:6f:fc:a3:f2:d4:4e:55:e5:a5:13:
         23:d6:35:c3:f6:83:48:ec:67:71:e7:7e:b8:c5:8e:33:1b:29:
         68:7f:82:0f:b1:5f:48:6f:64:b5:34:06:bb:0b:c8:f2:7d:80:
         9f:77:02:1d:2d:6a:6e:1a:23:ba:90:e7:84:f6:5a:d0:1a:24:
         fe:af:71:d6:b2:76:fd:b4:01:90:9a:9d:eb:d5:94:b5:b2:f7:
         94:de:50:cf:83:e1:10:6c:35:dd:b9:6d:02:5d:62:68:42:65:
         f2:2b:0c:4d:c1:56:20:f3:e7:f3:5e:14:66:f6:73:3b:a0:02:
         c4:ff:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----