Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa
File:                     5418b4d0-7480-41be-a568-008f76efc155.roa (raw, json)
Hash identifier:          3K0pIutqM4cCEu3xmRjfDXnLgsKD17K+KjSRU6pWgm4=
Subject key identifier:   20:EF:3C:E7:B1:79:8E:B6:FE:2C:F6:17:B5:A4:31:64:BA:3E:9E:9B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       53D6CCBCB317E0E0BD18FDC1FC19E75582757D49
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:e040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:cc:bc:b3:17:e0:e0:bd:18:fd:c1:fc:19:e7:55:82:75:7d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e1fc4df8f38df6c2805927eaf001cc9cea47d35ea9429c515907f71926f7c124, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:47:1c:4a:1c:02:5d:dc:ad:4a:c9:68:cd:
                    d9:90:0f:10:f3:77:3d:1f:5a:54:5c:72:89:1b:53:
                    aa:b3:ae:ff:2c:de:bd:05:4b:61:08:1b:df:c1:fe:
                    ff:7b:8d:91:08:ce:ef:4e:43:e2:18:b2:fb:77:e7:
                    8a:97:b2:6a:7f:8e:c3:ed:cd:4a:ec:6e:01:93:3f:
                    0b:3f:10:e7:03:a0:3d:22:90:80:87:e4:54:e2:75:
                    4a:0f:41:7b:54:69:d1:d5:9a:ff:89:33:a9:18:a3:
                    45:6d:68:5f:98:2d:af:14:33:36:0f:6b:8d:ec:e3:
                    80:0b:f4:21:11:87:4d:fc:c6:8c:20:8b:91:e2:08:
                    f0:96:dd:e1:58:25:05:29:aa:39:db:d8:07:2d:72:
                    57:0c:5a:41:c6:9d:df:98:76:5e:20:49:5e:7c:e0:
                    20:89:42:43:68:eb:8e:a7:71:5b:0b:62:7c:3e:10:
                    0f:2c:04:09:d7:bc:1c:c1:56:ea:8b:8f:c7:2d:15:
                    0d:2a:31:5d:7f:52:90:6b:f6:61:86:48:24:2c:a7:
                    e9:9f:ae:d7:d8:62:57:70:4b:db:ac:91:4a:5d:46:
                    2d:cd:a9:fb:0f:55:05:b1:f9:2c:b0:0c:de:63:e0:
                    25:54:96:77:a2:d9:b3:e9:c0:f9:e7:93:81:1a:f5:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:3C:E7:B1:79:8E:B6:FE:2C:F6:17:B5:A4:31:64:BA:3E:9E:9B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5418b4d0-7480-41be-a568-008f76efc155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:e040::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:fd:04:f7:cb:2d:df:8c:8f:63:f0:b1:ed:3d:94:28:a5:5e:
         ed:64:fd:57:f5:f3:f0:43:9e:3f:35:b3:78:f7:70:d3:45:25:
         f8:45:50:bb:d8:ad:3b:fd:b5:be:f5:8a:3c:db:cd:1c:65:e7:
         6d:ba:a6:f3:81:f4:2f:77:36:d4:c0:ca:4f:aa:2c:22:8f:e8:
         05:c6:cc:d9:1a:cb:5c:70:24:f4:51:32:23:ec:a2:44:83:49:
         2a:a0:5e:2e:d9:f0:ac:7b:cd:c6:88:bb:28:bc:30:12:20:1b:
         b9:b2:53:0a:1b:23:f6:87:00:3d:19:27:68:06:0b:65:c7:54:
         1a:2f:d5:ec:54:e5:18:90:b8:23:66:b3:d1:fe:54:60:95:ca:
         02:fd:50:7a:1d:e1:ed:bb:6f:0c:62:b1:cd:90:ee:3a:c5:db:
         8e:fe:6f:1b:ac:d0:fd:7d:9a:f5:f8:eb:4d:40:c8:7d:a2:99:
         7e:d3:84:71:fe:77:27:dc:fc:e3:22:3e:7d:06:b6:7c:47:d3:
         e4:65:07:3e:eb:95:ea:18:82:6e:78:e4:01:7f:3e:63:e3:c6:
         de:48:ac:f1:8e:eb:f3:02:6a:d9:ba:69:87:c8:1c:fa:f7:67:
         b3:da:55:0c:3a:de:3b:61:db:d6:73:99:0e:d6:74:87:1c:42:
         e2:17:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----