Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d5a8513-21e5-4af7-b1b9-e85bc8e16eb8.roa
File:                     4d5a8513-21e5-4af7-b1b9-e85bc8e16eb8.roa (raw, json)
Hash identifier:          J4gbvEnvQ4EK86kxl0m6rp3SvqNoDhpUeRbXblF2dAw=
Subject key identifier:   ED:EA:27:E0:63:12:45:58:D2:02:05:F3:82:EA:99:0A:AD:B3:4F:B4
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       50B26D76BA93D775001730DEE56AEAAFA0655CBF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d5a8513-21e5-4af7-b1b9-e85bc8e16eb8.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafa:4000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b2:6d:76:ba:93:d7:75:00:17:30:de:e5:6a:ea:af:a0:65:5c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=b5c1b632fd8de8b410ac477e42e1752b9e3b34ee0710bc2701f5a04c26bfda44, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:44:f1:31:6f:81:a0:54:a8:ce:fa:46:6d:6c:
                    5c:f1:7b:9b:f5:35:0d:33:6d:05:49:eb:36:92:21:
                    de:4e:7f:bb:42:b9:cd:4b:bd:26:77:68:36:22:87:
                    fa:c2:a5:5b:a1:81:1a:63:96:c7:36:85:40:4a:a8:
                    01:7f:7a:e7:4c:1e:77:59:e9:04:23:08:f7:81:2e:
                    02:53:68:bc:ec:00:62:10:d2:b3:8a:de:1d:e4:d0:
                    63:b6:a0:99:f8:df:c9:09:09:95:39:a4:55:40:f5:
                    e7:68:d4:77:d1:1d:a8:6e:e6:ce:22:5d:0e:07:93:
                    cf:fc:d0:30:1a:8a:04:2c:8a:ad:4e:a6:d7:35:39:
                    06:80:dc:35:47:7c:c5:65:2a:54:dd:b4:fb:da:23:
                    6f:09:30:14:54:4e:64:d8:70:8d:c5:ed:09:70:28:
                    44:80:b6:27:35:51:2c:b2:28:8a:bb:c7:ec:08:16:
                    f0:7a:7b:bf:ce:93:a7:93:70:cb:6c:31:4b:50:0a:
                    84:c3:21:08:35:b8:c2:fb:63:c2:b9:b4:33:69:0d:
                    d7:64:e3:a2:22:24:c5:be:d0:72:3b:e5:02:47:7f:
                    11:20:1d:91:1d:93:ce:01:1e:9c:33:2f:42:c9:72:
                    d1:34:28:23:d7:90:88:63:14:bb:90:b3:a3:07:e8:
                    6b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:27:E0:63:12:45:58:D2:02:05:F3:82:EA:99:0A:AD:B3:4F:B4
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d5a8513-21e5-4af7-b1b9-e85bc8e16eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafa:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:e1:46:e3:a7:39:8c:9f:c3:af:d6:cd:09:0b:07:94:b7:
         a8:8e:29:21:62:be:d0:83:3d:33:42:52:a5:c1:a3:23:8c:d5:
         be:fd:c2:34:0f:68:d8:e9:73:66:c9:27:13:ca:e8:83:3e:5b:
         96:1f:76:e1:42:f4:94:f8:3b:c5:ee:60:bd:21:8e:9b:10:a5:
         f0:87:d4:f6:87:00:93:7e:db:58:ae:8b:d7:27:bc:a6:1b:4a:
         db:c5:cc:fa:5f:58:c8:24:e3:b5:26:e8:36:d1:ac:7c:9f:aa:
         87:74:d4:c3:54:b0:16:4f:ca:f0:f1:88:c9:f7:cf:78:e3:0d:
         ca:9d:16:99:99:20:35:c5:39:62:ea:17:87:7e:03:61:8f:b3:
         df:69:71:53:6d:d7:cc:17:58:10:ae:69:03:8f:16:aa:f0:73:
         cd:87:89:83:ad:58:a2:52:4e:f9:9b:90:f7:91:5f:89:8b:2c:
         58:69:9a:bd:3b:79:a0:f0:2f:46:13:6b:9d:9e:c9:0c:26:70:
         72:86:1c:fb:9f:5c:f6:1e:ba:46:4b:d1:22:72:b4:22:08:1e:
         8b:92:c4:a7:b4:81:4b:09:7c:6b:6e:c0:b2:46:02:42:bc:96:
         c3:53:50:c7:58:81:14:a4:b8:78:9b:5b:02:1f:64:0a:b6:3d:
         d4:b9:4e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----