Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48b29122-f009-4cd7-adac-414f1832e720.roa
File:                     48b29122-f009-4cd7-adac-414f1832e720.roa (raw, json)
Hash identifier:          5clfDKgEVgZw+HfpOuhxgmd5P2/gi3uADCoSsKQJCh8=
Subject key identifier:   E3:D0:EB:B8:17:A7:4A:E4:26:0A:BE:7E:D8:27:DC:DB:5A:F8:88:53
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0A3359435A5C3DF04845852DDB34B8EF3613C8A3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48b29122-f009-4cd7-adac-414f1832e720.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:40c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:33:59:43:5a:5c:3d:f0:48:45:85:2d:db:34:b8:ef:36:13:c8:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=019b4d1f07c660dd762bc16c0b84129ba1bee81ef2746eb9e0020bcd7f76af2b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d5:88:ab:6c:ef:79:7e:ed:a7:71:6d:97:41:
                    fc:62:13:5b:6d:4f:2f:4d:68:15:bd:08:2f:67:22:
                    25:70:1a:7e:d2:fe:59:91:36:e0:60:b9:0d:cd:d8:
                    38:da:d9:7f:c1:e4:8c:10:0f:02:7e:4c:d0:30:56:
                    19:22:27:b3:ea:26:20:bf:33:21:30:95:26:9a:ed:
                    f9:43:5e:a5:c7:0d:20:5f:e8:11:d9:09:94:d6:93:
                    c4:0a:1c:8c:a1:e8:92:2c:aa:82:c4:e4:5e:8a:42:
                    a0:9f:3a:3e:e4:18:5b:1e:23:0b:8d:32:e4:7c:6e:
                    d1:c5:65:21:9a:c2:0a:e2:4d:a8:63:75:cf:4f:33:
                    f0:94:a9:31:72:fe:ac:dd:f3:93:20:62:85:1f:fb:
                    c5:a4:19:51:b5:47:d4:dd:fc:95:09:30:de:cc:51:
                    fa:dd:d6:d2:e4:83:a0:a3:b1:41:1a:46:53:da:35:
                    f8:a6:f3:0d:7c:55:cb:36:b6:34:7e:19:07:6e:c3:
                    1e:b9:58:cb:59:70:70:97:2f:8c:00:5e:84:b4:38:
                    66:58:5f:34:d5:28:91:41:7c:8a:2c:3c:84:cd:cb:
                    2b:ff:06:7c:93:67:8e:37:9b:34:bb:4f:37:95:74:
                    f7:e3:e2:5b:9c:44:8c:1b:ef:69:c1:a1:93:2d:c0:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:EB:B8:17:A7:4A:E4:26:0A:BE:7E:D8:27:DC:DB:5A:F8:88:53
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48b29122-f009-4cd7-adac-414f1832e720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:03:04:92:5f:cb:84:99:1a:b3:bf:5b:87:29:46:d4:32:24:
         84:bf:3f:dd:48:e4:7b:f8:84:91:0f:32:98:e6:1a:74:59:62:
         41:f1:cc:a8:3d:33:73:7a:67:c7:f5:8d:27:91:36:d3:ae:55:
         d7:d1:74:f2:bc:29:96:25:b4:30:96:04:41:52:1b:0c:d5:15:
         58:69:26:e1:10:b1:56:78:90:80:de:b8:f8:75:9c:d7:6c:a1:
         15:6c:1c:73:f5:f2:1d:d4:ff:53:dd:53:27:24:e7:42:ce:7e:
         62:fc:ad:2e:e7:2f:2c:c9:a7:7e:e7:b1:09:77:30:b4:e9:9d:
         a0:2b:59:20:c8:d8:ae:4b:d5:7d:ea:55:fd:fe:d0:92:03:12:
         b7:34:d0:7e:c7:a8:a0:97:24:3c:e8:f1:52:22:61:00:62:5b:
         8f:f2:44:2f:d3:8f:b1:0a:1a:60:6d:fc:8a:40:dc:13:51:e3:
         74:06:4c:7d:13:e3:47:0b:37:9b:53:c7:e9:e9:44:f8:6a:a5:
         55:e4:3f:5d:e8:4d:e5:33:e4:c6:28:b0:b3:2a:cb:62:b0:a0:
         7c:34:fa:5b:5a:b4:7e:ad:d5:6f:26:04:a7:ca:eb:b8:10:cd:
         c6:cb:2a:b7:0f:dd:af:a8:05:f9:1f:c7:f1:b7:75:56:ae:e0:
         27:47:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----