Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa
File:                     5a0d1930-a322-4bbd-8eef-91ba17b37082.roa (raw, json)
Hash identifier:          6KgeV5v8riuS0Rix9593Z76YcbsR5wD/PKsDWcbjfiM=
Subject key identifier:   BB:B9:3B:8D:CF:36:79:1C:EB:D3:9A:B4:40:D1:C7:81:7D:2A:08:A8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       179CBDA33E82386BBB9A9FC35A1890138FC12373
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:e0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9c:bd:a3:3e:82:38:6b:bb:9a:9f:c3:5a:18:90:13:8f:c1:23:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9e33819980b7efa6952ed3fca29ea71ab422d47ac65c6b2671eafda98a215559, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:01:7a:8f:32:9f:27:d7:fb:cf:c7:ab:19:
                    45:af:9e:fb:59:cb:30:5f:5e:6f:4c:5b:a0:7f:42:
                    9e:70:90:60:0c:14:67:a7:b6:77:05:c3:68:2d:dd:
                    9a:f9:3e:ea:bb:ce:3d:bd:a3:b7:f5:eb:a4:57:bf:
                    1d:9e:4f:b4:59:45:ac:0e:94:53:e4:1f:cf:50:98:
                    e7:d7:ac:28:64:93:93:9d:bb:fb:08:36:56:c3:68:
                    17:e0:02:d2:e9:5b:04:1a:86:24:27:e9:e7:25:75:
                    9e:60:b9:c3:5a:09:80:75:a8:b7:53:cc:09:e0:9c:
                    4f:63:a7:a0:65:cb:f0:51:02:82:1a:f9:b0:11:ed:
                    45:0a:0b:67:e3:67:a8:06:80:77:32:d2:fd:99:66:
                    23:c3:ad:58:77:6d:bf:58:7e:30:73:77:3b:d1:eb:
                    08:b2:af:4d:fe:74:c5:22:1f:b0:45:b0:d5:73:f1:
                    60:ef:b0:58:f3:2f:de:cd:99:bb:42:17:3a:a9:b7:
                    66:83:fb:de:9c:6b:24:77:c6:8e:5f:64:a8:61:9f:
                    32:b7:ef:ac:8f:00:2b:87:cd:38:59:18:4e:33:65:
                    39:d9:6b:46:11:88:e2:05:79:18:2e:49:19:1d:70:
                    97:a8:12:11:11:8f:c2:de:54:ea:e5:9e:0b:d2:83:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B9:3B:8D:CF:36:79:1C:EB:D3:9A:B4:40:D1:C7:81:7D:2A:08:A8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5a0d1930-a322-4bbd-8eef-91ba17b37082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:e0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:56:8c:69:68:41:34:da:4e:fc:8b:23:76:00:9b:29:d8:
         4c:30:11:43:50:93:51:ea:93:fe:31:0e:46:27:76:29:35:17:
         ff:16:d6:30:a9:1a:c9:cb:09:d1:c7:64:38:3e:8e:05:30:e7:
         03:8f:96:34:f7:54:a4:c3:fd:8c:cf:5f:2d:fa:df:de:df:c0:
         b0:10:cb:93:64:61:3f:15:23:7f:1d:5d:3e:ab:d1:64:f0:e1:
         d6:91:79:55:ce:4d:da:29:f1:a5:c7:39:8d:b2:09:be:d5:42:
         39:0b:2a:63:cb:5f:be:38:37:fe:c6:3d:9c:b2:71:c7:4b:e8:
         ab:dd:ad:86:16:7c:e9:1f:7f:00:a4:01:ba:f7:07:40:3e:c7:
         73:0e:0b:32:0e:28:c4:23:77:8e:f9:09:5c:bc:db:70:b2:42:
         8d:c9:35:36:77:95:c7:43:50:d6:3b:f3:ed:49:9e:56:d4:6b:
         89:5d:90:50:a6:67:c9:74:96:89:ae:3d:52:42:b7:95:a1:0f:
         65:2b:b1:78:13:a7:74:61:c5:34:bd:ab:c9:37:f9:16:22:52:
         18:18:56:25:df:e8:d7:9b:d5:fb:47:62:2b:b4:0d:bf:85:cf:
         f3:b1:62:bf:99:65:4c:ba:d3:9a:96:bd:38:4b:c3:34:fd:42:
         49:89:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----