Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa
File:                     5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa (raw, json)
Hash identifier:          PRhq0tHtBid2x2+TKOW/+gkNsqEXiYzoAZvMUIXIqGg=
Subject key identifier:   A7:52:B3:03:66:77:73:C9:E9:82:EE:14:4D:B9:E6:2E:E0:CC:C9:42
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       05E08E133570E68725C00B4976DA7F519AAD01D5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e0:8e:13:35:70:e6:87:25:c0:0b:49:76:da:7f:51:9a:ad:01:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bd1b0d19457fc9998425bb50691ea5acba2a3164f21ac7e2b672f8558f834f05, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:63:8e:21:20:70:6a:1f:a4:2a:25:4d:b9:
                    af:0c:f7:62:7a:e0:8b:26:d1:dc:2b:6c:03:d2:17:
                    9b:ee:2d:77:b1:73:5e:8a:77:8b:16:6c:e4:93:25:
                    c9:37:8e:41:9d:df:f3:6f:d1:94:c9:b6:f2:d7:a5:
                    22:9e:52:96:52:ef:30:ba:c5:cb:b7:b0:d3:a0:ab:
                    c2:a6:c4:bb:cf:95:d0:b7:63:e0:df:e1:85:a3:61:
                    03:b1:a1:6f:09:16:75:a1:53:89:6f:d6:53:81:ec:
                    f5:c8:79:23:10:ef:16:be:ef:2e:29:d1:95:62:e8:
                    d1:30:90:c3:6e:c3:34:3d:0d:10:78:60:c3:e6:13:
                    b4:8e:7a:28:d7:a1:fa:93:0f:9f:93:a4:c9:2a:cd:
                    bb:af:b3:1c:79:d1:98:f1:93:62:01:f5:06:7c:16:
                    19:f7:1c:ab:30:aa:52:dd:89:eb:18:ff:a6:03:71:
                    e5:e9:0e:af:69:c6:95:38:e1:d4:34:10:85:0d:e7:
                    b2:c0:fc:48:e0:81:ea:18:b1:38:69:0d:f3:ee:c8:
                    d5:10:e2:14:44:66:32:26:ca:cd:1d:5b:e0:c3:0b:
                    a9:7e:5b:a2:e7:a8:fb:58:39:f3:3b:fb:92:0c:b3:
                    94:bb:aa:84:19:ce:40:59:3a:fe:5d:18:20:94:4b:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:52:B3:03:66:77:73:C9:E9:82:EE:14:4D:B9:E6:2E:E0:CC:C9:42
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f805aa7-7757-4dfc-8db8-2227e256fb3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:47:61:98:db:c9:1b:2b:23:c8:d2:dc:2c:34:ce:34:d6:
         d6:ad:fb:7f:87:c1:6c:34:67:25:dd:aa:c0:57:15:1c:3b:69:
         c9:74:59:08:e4:fd:18:d9:95:6e:9e:51:bf:5b:2a:aa:1f:1e:
         d9:92:eb:89:fd:39:05:04:91:33:56:a7:f5:71:3b:78:75:b6:
         2d:d2:e9:8f:e4:a0:73:fb:79:a4:7d:12:96:36:40:ac:14:fb:
         d6:31:f2:9c:02:2a:14:37:95:cf:ab:1b:86:d9:d1:7e:7e:bb:
         36:64:9b:96:2d:a0:75:9e:0a:5d:6f:9a:8c:7e:a0:96:73:ba:
         3e:f3:09:73:55:f6:3b:ad:ff:a2:d9:bd:dc:ac:38:b7:29:75:
         bb:6d:58:43:b9:71:9b:01:12:89:c6:67:12:64:1e:d8:af:71:
         b1:bf:f4:b6:89:2c:6b:0f:28:f6:09:bc:3b:e8:d3:3d:b0:56:
         c7:e5:57:8e:b2:f8:67:70:7d:f7:99:09:67:b4:6f:1c:20:0c:
         97:b6:47:6e:ae:b9:b5:8e:db:7e:36:7b:be:ab:a4:87:44:2f:
         24:17:5a:06:99:4d:47:c1:fd:81:83:c1:4f:10:32:6d:3f:cb:
         55:9d:29:14:3e:95:82:f3:34:03:e5:ff:71:76:8c:85:c9:6f:
         da:20:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----