Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa
File:                     3479d056-3c82-4999-8725-061e01b95c31.roa (raw, json)
Hash identifier:          mGmE9H4awK5DXqdpB96s1D1LrwGE2tma1S5XTmA/EzE=
Subject key identifier:   FF:C7:0D:AE:AB:FA:4C:D2:8C:70:B8:BB:21:94:CD:6D:70:80:9E:34
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       78C35F274C571D3770228FC759CFA913DD3ACD9A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:90c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:5f:27:4c:57:1d:37:70:22:8f:c7:59:cf:a9:13:dd:3a:cd:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e2ef6811d013f97e7f0f341eacced402b5f237702269c69d7685e646ca6d3ec8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:4b:17:ca:46:53:ec:cb:62:73:a0:99:8f:
                    4c:d8:53:95:37:62:bf:f1:22:bf:2d:06:d9:f0:89:
                    38:82:58:90:d5:02:3b:2f:17:b9:0f:70:e6:23:fb:
                    10:9a:3a:55:56:a5:47:bb:b0:29:78:60:57:2d:75:
                    43:cc:62:9f:0d:85:0d:25:3c:1d:b5:4b:52:74:d1:
                    98:ec:77:b5:ad:41:d9:5b:ef:86:9e:ed:58:54:f7:
                    74:0f:76:f6:32:ef:5f:18:ad:85:65:62:a2:32:4a:
                    3b:2b:0f:b2:ab:88:0b:a8:d4:a8:49:30:93:bc:2c:
                    3f:33:8d:8b:62:07:c5:27:07:8d:0e:32:93:16:8b:
                    d7:1b:61:bc:e4:0d:7b:86:7a:e0:5a:62:89:ca:c9:
                    21:69:85:5a:6d:35:5c:d9:cf:24:56:dd:7f:45:bb:
                    1e:c5:bd:04:fe:08:44:c6:95:95:c2:88:86:67:c3:
                    d6:1b:0d:f4:16:0c:90:a5:73:bb:9f:b1:5c:7e:3e:
                    a8:ae:3b:2f:52:35:94:61:fd:4b:a4:42:f8:fb:2a:
                    68:79:ad:be:03:63:80:5f:01:b1:f9:b4:62:8c:de:
                    98:62:a3:75:fc:db:b3:66:c1:f6:be:3d:93:5c:1a:
                    7c:d5:c2:c8:40:8c:c4:e7:0f:e7:5f:22:5f:10:0a:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C7:0D:AE:AB:FA:4C:D2:8C:70:B8:BB:21:94:CD:6D:70:80:9E:34
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3479d056-3c82-4999-8725-061e01b95c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:13:a7:4c:26:22:92:2b:0d:c9:b3:e4:a2:8f:6a:43:d3:
         e2:c8:70:d4:31:8a:d8:06:32:65:70:e7:41:c6:b5:90:7f:1e:
         1c:03:ce:26:11:0f:c2:ab:ac:06:9e:6d:70:72:df:e1:84:b7:
         89:97:d8:c3:07:18:bd:15:18:b1:8b:72:dc:7a:a2:be:cb:97:
         f8:5f:37:3f:f6:71:b8:b6:db:19:d6:ec:78:e1:ba:eb:c8:03:
         94:01:89:b9:e5:20:bf:46:b5:88:92:88:8f:80:4b:99:f3:fa:
         cc:89:76:dd:c8:4d:ea:d5:06:99:bb:1a:82:7a:7f:07:00:44:
         34:71:2b:58:b3:66:96:95:b3:26:00:25:4d:d8:32:93:58:12:
         df:13:f2:05:5f:20:95:e3:1c:36:37:83:76:ec:2b:d8:86:a9:
         89:bb:1f:a6:a4:00:c4:6a:56:9a:2d:36:6b:a4:58:2e:7c:c6:
         77:e2:fa:f0:d2:ee:74:a2:bb:97:63:5b:06:ff:cb:ec:53:7a:
         87:98:6c:3d:9b:2a:f3:fa:91:26:1b:04:56:0c:48:fe:49:8c:
         8c:cd:16:a6:97:30:12:53:72:7b:7f:c9:23:8b:8e:93:ee:2e:
         f8:8b:75:da:d3:1c:0f:4e:e5:16:33:77:cc:6d:dc:1b:02:70:
         74:3e:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----