Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa
File:                     44d45390-c4cb-45b7-a2d0-183f37c05776.roa (raw, json)
Hash identifier:          CH9FqYqjOQXazRZpUMZRckRanU+D2dhNZO5TnlbDSq0=
Subject key identifier:   68:88:B9:65:9A:C2:BE:A8:AE:28:5D:A5:2D:22:E0:A7:D6:14:30:95
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       15B6C71FF8C1C6E5432C72F90B6D28204BFDE00F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c840::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:b6:c7:1f:f8:c1:c6:e5:43:2c:72:f9:0b:6d:28:20:4b:fd:e0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=88575607ec4e12877bdbe4b3f30437d41d5761cd6ae30e279fb4126458ca5267, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:9c:2a:d3:9c:ef:14:01:67:0f:1f:d4:5c:
                    e6:c0:d8:ef:c0:88:8e:f9:05:cd:4d:95:c3:91:cd:
                    64:36:37:7b:ac:bd:b1:0f:92:c4:e5:a8:59:49:75:
                    93:a1:7d:ca:88:49:35:e6:44:46:b2:1f:fc:3e:37:
                    0a:38:5e:52:db:19:57:4c:6a:72:72:d2:72:8e:98:
                    1c:b3:3c:70:d1:a0:a2:68:cc:89:60:3d:a3:42:fb:
                    d3:8c:60:d1:53:5f:c5:57:8c:bb:83:91:20:39:31:
                    50:cd:28:0c:f1:75:11:01:08:8d:6d:1b:18:9b:71:
                    16:b5:b7:da:60:99:11:22:c1:af:09:5c:f9:36:2b:
                    7d:55:e2:95:f9:0a:55:a1:7b:a6:a8:20:20:48:2c:
                    09:4d:df:4b:16:67:93:d2:da:1d:77:1a:5a:7d:fc:
                    1e:d0:02:89:5a:53:d9:6c:5e:38:d0:4b:a9:82:5b:
                    0f:e3:12:54:dc:c9:dd:50:ff:1a:90:5f:50:72:43:
                    67:f7:bf:5b:5f:65:4c:8e:67:3d:b0:71:82:c2:79:
                    ea:3f:14:20:0a:ce:de:14:8f:69:86:14:43:92:65:
                    c3:e4:ab:26:57:eb:f6:f5:7a:bd:56:41:ad:f3:2f:
                    8c:5b:e1:d2:e8:47:70:af:ce:92:f3:7b:6a:a1:93:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:B9:65:9A:C2:BE:A8:AE:28:5D:A5:2D:22:E0:A7:D6:14:30:95
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44d45390-c4cb-45b7-a2d0-183f37c05776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c840::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:20:91:92:e8:61:36:07:1a:10:db:0b:16:11:e4:ed:7e:
         28:36:77:19:3a:b6:38:4a:8a:f3:74:57:66:f4:6d:6e:fc:be:
         1b:43:16:ea:c3:a6:de:1c:5d:17:bf:b6:9c:f9:29:4f:05:79:
         bc:af:58:a7:53:d0:32:9d:b8:a2:e3:69:9e:b9:e8:a2:8e:3d:
         7e:81:20:22:3e:83:63:62:91:bb:68:24:9f:aa:cf:00:e8:5b:
         b0:cc:b9:24:8a:8b:79:2b:dd:67:9f:ad:b0:ab:5a:4c:02:eb:
         ff:05:fa:42:bf:42:d8:78:91:89:0f:68:6d:ae:bf:6b:45:54:
         eb:e6:6d:be:f7:5a:36:60:58:d2:fa:cc:3f:17:5d:53:8d:80:
         55:e7:9d:3a:f0:e4:68:26:fa:35:0b:bf:f9:34:b8:ea:6c:e6:
         be:3b:0d:fa:06:c8:dd:b9:59:ca:47:a7:2a:34:3b:0d:1b:af:
         6e:3c:dd:7d:05:e7:2d:00:ce:55:37:75:b2:d2:db:40:3e:5f:
         f8:9a:b6:d4:39:2f:8e:04:9c:8f:54:fb:dd:a7:5b:bb:ce:14:
         df:99:1f:31:e1:4a:20:a4:a2:1f:24:97:74:3f:91:3b:c8:b2:
         f9:e0:29:8c:1d:10:2a:81:52:29:ce:7f:53:6f:a7:32:1e:2c:
         32:dc:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----