Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa
File:                     5f0d2894-eaa1-4bae-b793-13a3b2528447.roa (raw, json)
Hash identifier:          oKBB6Th1BnZKGsv4orUxJdHWqjkUY3jQtpKhuDO9Bm4=
Subject key identifier:   D9:28:54:B6:9E:AF:46:8C:CD:B6:A3:33:B5:81:41:06:6F:BF:77:4E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1AF1FF47811883B1158323F5C189AC4A89603742
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:e080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:ff:47:81:18:83:b1:15:83:23:f5:c1:89:ac:4a:89:60:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6cbeebc208949801062fb408a8676a20d5257c9e12085367fdbcdf99afbbb0a5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:97:6e:25:d8:7b:8c:3f:b2:ad:74:4a:5d:0c:
                    79:1c:7e:68:29:bc:db:d4:04:f2:49:80:7f:c6:c7:
                    f5:74:e8:20:bb:8a:94:35:70:06:e1:7f:48:19:37:
                    55:45:16:45:51:e9:d0:8b:fb:57:2c:fd:2b:00:7d:
                    61:ef:13:0b:91:b5:4f:98:f0:bb:5d:26:22:d9:ca:
                    e3:5a:8e:14:f5:44:f2:2d:19:04:ef:83:3b:a6:18:
                    54:be:c0:8d:25:16:d3:22:20:33:6a:cc:2f:23:cb:
                    38:8b:80:0c:10:d7:1b:ff:1f:d2:ee:a3:40:a4:41:
                    c7:16:a8:5b:8e:a2:e7:e8:9e:7e:45:0a:37:36:8f:
                    fa:58:07:81:e1:ac:7e:d1:e9:5c:aa:08:92:1f:25:
                    78:11:e8:42:3b:08:98:04:8e:31:ed:bb:f8:a4:51:
                    57:3f:0b:b4:61:7d:4d:ce:e5:a1:41:f2:37:ac:40:
                    35:3b:be:1e:6d:da:35:a8:c3:f7:47:6b:3b:09:4f:
                    a0:3c:48:a1:b4:80:8e:52:28:0f:6a:a6:61:e6:4a:
                    d6:90:20:8b:21:81:c2:49:8c:35:5f:3d:48:86:c1:
                    44:b4:06:7c:cd:b7:51:24:85:e4:f2:c6:24:11:43:
                    f1:dd:72:3d:5f:8a:5d:46:c0:97:68:72:97:ae:41:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:54:B6:9E:AF:46:8C:CD:B6:A3:33:B5:81:41:06:6F:BF:77:4E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f0d2894-eaa1-4bae-b793-13a3b2528447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:e080::/46

    Signature Algorithm: sha256WithRSAEncryption
         50:29:c8:0f:5a:9a:21:81:f4:4d:08:d1:1b:bd:6c:b2:6d:f0:
         58:ff:87:2a:0d:29:5f:09:63:04:52:a8:8e:64:86:22:84:30:
         1e:69:78:5a:b3:05:5c:d9:6a:d9:c5:ad:46:06:e4:b1:a4:8e:
         39:a9:f0:1c:9c:f1:ef:9a:8c:df:b3:01:19:fd:51:b2:6d:fb:
         4a:ab:cf:8d:39:c2:d1:86:ac:aa:81:d1:a7:9e:50:d8:93:ab:
         d0:ff:ec:0e:c6:63:37:e0:7e:36:60:90:ad:9e:b9:3d:bc:41:
         47:6b:93:aa:7e:3d:4d:62:9c:a0:e5:19:7b:9b:09:9c:cf:1d:
         44:a1:0a:d8:fe:c4:26:99:b8:b2:de:34:29:50:08:73:08:63:
         78:20:7e:59:06:fe:10:8e:ea:97:88:c9:4d:d4:ce:9c:c1:ac:
         8b:98:a0:ab:fc:ea:26:54:1d:8c:10:e8:44:9c:22:45:69:31:
         b3:6e:03:9a:22:72:97:69:4d:d1:2e:02:ca:ae:84:eb:e5:05:
         e8:31:3a:28:c7:8e:06:e1:62:8e:ec:d1:dc:a6:f3:13:e5:2b:
         7f:e4:13:fd:bc:2a:67:22:ee:25:27:69:10:56:1e:07:4d:6b:
         fe:8d:7e:c4:14:83:d2:89:ef:d5:eb:fe:a5:e7:00:95:89:8a:
         58:9a:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----