Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa
File:                     4d6a264a-aa2a-46c2-95e0-8711aa342743.roa (raw, json)
Hash identifier:          QPzABh+igJzFhSrf8kk/S7d7tBLMX/S19uXB/74MbJo=
Subject key identifier:   A3:B6:E5:90:FC:81:C0:F9:73:7E:6D:5B:AE:F0:C1:7A:7F:57:D8:87
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2A1DC1B376EC4E60DC5BEDC18942CC26184F1D81
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:c8c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1d:c1:b3:76:ec:4e:60:dc:5b:ed:c1:89:42:cc:26:18:4f:1d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e14ea4533d4c1407bae8908157f90e1e66a8646ca10ad400a50778e49477e94c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a8:f4:3e:36:9a:4e:82:9d:41:9f:0d:93:b5:
                    7c:93:b4:6b:ac:af:fb:57:f5:10:01:4a:f7:64:e9:
                    a1:c1:f5:95:17:16:50:47:ce:71:04:65:53:12:8b:
                    1b:3c:59:50:5a:a4:ed:99:4e:7c:a3:c8:86:60:63:
                    ee:2e:00:18:29:bd:dd:86:83:23:dd:7e:15:e0:c7:
                    ae:62:8e:2d:6e:b6:9b:f5:ee:d0:a8:e4:b7:a0:84:
                    ef:f6:d8:bb:f0:c9:0d:1f:04:eb:0f:89:77:dd:27:
                    c7:65:a2:a3:d8:ff:41:6b:31:42:c7:93:ae:63:de:
                    3f:1e:b6:72:3d:3c:ca:d9:d0:76:ab:00:36:27:11:
                    15:fc:96:ac:d2:67:54:5e:e3:fb:bb:a8:36:95:bc:
                    44:86:73:af:f7:f9:d6:df:65:bc:3f:45:c9:b7:84:
                    3b:90:e1:52:22:6e:d3:3c:11:cb:a1:c9:99:2f:fc:
                    85:f5:c3:75:11:91:c6:48:ec:fd:d2:07:01:03:f3:
                    a5:b9:ec:2d:fa:a1:d0:a0:5b:95:1d:d3:94:e3:a0:
                    ea:86:48:0d:ac:bc:ce:a2:be:f2:51:54:e1:e4:d6:
                    0c:fe:03:65:d2:17:44:97:2e:da:9b:86:0f:09:59:
                    a0:c8:d3:52:50:13:63:c8:9f:87:e4:4b:73:13:8c:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:E5:90:FC:81:C0:F9:73:7E:6D:5B:AE:F0:C1:7A:7F:57:D8:87
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4d6a264a-aa2a-46c2-95e0-8711aa342743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:c8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:30:cc:f0:eb:6d:e6:f9:28:bb:cd:74:25:dd:6d:eb:09:48:
         75:36:7c:47:a3:0d:ad:c2:3f:66:66:11:b6:ad:87:87:87:2c:
         7b:fd:dd:2b:f2:77:e9:12:e2:43:04:93:1c:98:6f:0f:53:f3:
         c4:82:3f:8d:f7:b0:70:7d:f3:c6:f8:4e:7e:f7:62:d5:2b:65:
         21:04:b1:6b:e6:3f:cb:a2:53:ed:a2:4c:c4:7c:6d:44:17:3c:
         a2:1c:da:c3:d1:4b:ac:03:66:f6:5f:d3:52:d7:db:c2:8d:39:
         42:51:0e:cd:64:3e:6f:94:39:e2:94:a3:6b:5e:cf:c6:6d:8b:
         ea:0b:21:bb:4b:79:11:a8:b9:62:62:5b:d9:1e:6a:84:81:c6:
         d8:9f:2a:4a:74:2c:cb:6c:d5:54:b7:d7:9f:65:9a:03:e1:70:
         b1:c2:b9:77:6f:0f:02:b1:0e:a2:c3:3d:e7:64:a2:5f:75:7b:
         eb:34:4a:78:c6:fe:57:b1:04:ba:ca:f3:13:fa:de:0a:41:1d:
         df:f7:ef:30:9f:bd:23:0c:75:1d:70:dd:a5:cb:7c:49:2d:28:
         ea:b1:04:10:c9:4a:a8:47:b6:49:37:ce:49:16:05:9e:a7:bd:
         ce:76:3e:37:1e:7e:39:3c:2b:a4:8c:ae:69:58:99:4f:4e:6f:
         fe:84:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----