Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa
File:                     46906009-c3b9-49b3-a5f1-d017b200e422.roa (raw, json)
Hash identifier:          zTRNqhJqCQu/NZ+3+eLc9DdJHYE/7k9Szk/8VOFqZp4=
Subject key identifier:   23:A6:64:13:18:FA:59:6A:CC:3F:CE:8D:CA:75:B3:B2:49:0F:E2:ED
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       50543AA60C7DB3C911E04C74640BF56615DC22CE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:48c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:54:3a:a6:0c:7d:b3:c9:11:e0:4c:74:64:0b:f5:66:15:dc:22:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a9e038c98ec7d60cd409a413e107a54e1c0578cc174bc3055cfe42ac8893de31, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:21:8b:f7:b7:0e:1b:9f:1a:2a:10:6f:3f:
                    09:e1:41:ee:99:78:69:d8:ff:f1:e2:e6:da:f6:7e:
                    7d:5b:ec:27:1b:e4:dc:41:96:ae:70:06:2b:67:0f:
                    62:84:fd:93:bc:af:10:66:76:75:4c:ea:5b:3c:19:
                    ac:18:31:b0:63:ac:c4:19:39:66:e1:53:0d:5c:78:
                    b6:dd:81:55:8c:b1:58:9b:3f:23:57:ec:79:1d:54:
                    09:12:cb:37:d6:c0:82:18:61:73:4a:47:a1:85:a6:
                    45:ca:f4:26:f6:9d:db:e1:74:92:66:58:08:62:04:
                    be:2c:a3:d9:26:01:a1:ad:2a:03:3c:44:1b:80:c0:
                    58:2d:c0:f5:b9:86:a2:98:1d:df:08:02:1b:d4:84:
                    26:a6:17:77:7a:63:4e:22:13:99:65:f1:a3:ac:8c:
                    3e:2c:78:46:2b:d9:ee:30:49:c8:41:8d:2c:23:08:
                    fb:ba:3d:ab:76:23:56:69:92:8c:db:52:29:a6:c7:
                    81:e3:ff:7b:5b:6b:15:7f:bb:dd:c4:e4:2c:7d:c9:
                    b2:23:03:19:33:08:b1:df:0c:ff:f8:98:7f:42:cd:
                    ed:4f:79:92:ce:f9:7e:2d:da:9d:61:73:be:ca:01:
                    f7:ae:be:08:34:be:43:c8:4d:a0:ab:c6:ea:23:59:
                    47:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A6:64:13:18:FA:59:6A:CC:3F:CE:8D:CA:75:B3:B2:49:0F:E2:ED
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46906009-c3b9-49b3-a5f1-d017b200e422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:ef:39:fc:7e:18:51:42:7d:12:f9:ad:0c:8b:89:c8:99:95:
         f3:78:6c:f8:b2:08:61:ba:6c:f4:ec:b3:cf:d5:0d:21:58:96:
         f0:1c:27:a4:5a:fc:58:0a:e0:4e:ab:46:b0:dc:d6:85:35:74:
         3d:e0:17:8b:88:04:92:28:84:94:58:a2:e4:e4:c2:fc:ac:ca:
         42:7e:0b:58:c4:4e:22:58:c8:37:a4:54:2b:ee:23:65:dd:c9:
         f2:e6:a5:18:0f:da:6a:c9:8f:4d:a2:2b:07:46:5f:12:2d:80:
         2d:ca:2b:07:cf:01:6f:7a:a4:02:35:72:41:0e:38:eb:ca:35:
         5a:4b:a4:32:5a:ca:2c:7c:4f:22:03:9f:a9:2c:f1:b1:19:bc:
         8e:0d:02:7d:79:c5:2c:25:29:50:a0:88:b8:57:39:51:5b:37:
         22:a7:0c:a5:23:8c:6c:61:7f:32:16:51:bf:c7:bb:a9:1f:4a:
         7a:f8:f7:f9:6d:d9:2d:25:fd:a3:9c:57:9c:f5:86:df:5c:95:
         e8:00:f2:34:d0:c6:29:69:22:67:57:99:25:b2:16:09:79:f4:
         d8:ad:74:97:46:f3:b7:54:5b:25:c0:ed:de:2c:d5:0c:c1:85:
         fb:29:4f:a7:54:a0:ac:9d:9a:c7:41:f1:98:fe:8c:8c:07:63:
         f8:0d:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----