Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62703a29-bc16-4b4a-a5f6-a9a08ddb283d.roa
File:                     62703a29-bc16-4b4a-a5f6-a9a08ddb283d.roa (raw, json)
Hash identifier:          YA83JyeEklkey9+J5DJpt2jAEPusSLhWvZ9ku41CpD0=
Subject key identifier:   62:16:65:44:B0:D3:C2:0E:CC:15:6E:6F:77:47:B7:83:20:44:A1:06
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       63767D9986E6A3081B72ACE0A2659E7122A2A56E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62703a29-bc16-4b4a-a5f6-a9a08ddb283d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:2020::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:76:7d:99:86:e6:a3:08:1b:72:ac:e0:a2:65:9e:71:22:a2:a5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=cb3e517185969a4ac9a3738c7a6026230f3823cf51c8f92af2c1e635c94ac2d2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:91:58:e9:3f:5a:16:91:25:be:8f:bb:e3:
                    62:b6:da:a1:ee:6f:07:39:d3:be:3c:d6:09:e7:f1:
                    d6:55:98:8d:c9:1c:08:95:1a:22:9e:50:ac:25:0a:
                    08:af:49:72:62:ad:d1:4e:8e:64:56:24:59:39:47:
                    d6:c7:45:6e:4f:d6:28:03:a3:f0:32:38:05:e6:e8:
                    6d:9a:97:f2:f8:54:99:c3:3b:28:de:54:4f:60:dd:
                    bc:14:fe:fb:5a:a6:42:4f:9b:4d:d0:97:51:3a:99:
                    ce:c1:e7:ea:9b:b1:c3:eb:98:fb:15:5c:8d:34:54:
                    1b:53:c3:b8:75:7b:0f:02:9c:3c:d4:a3:be:af:ef:
                    c6:cb:aa:ae:d3:80:d1:ad:09:72:ce:3d:2b:04:ad:
                    e3:24:c7:f7:39:be:ce:67:5a:c4:ac:90:55:12:e8:
                    e4:68:2c:11:d6:0b:c1:d9:76:bf:ce:f4:2a:20:21:
                    dd:59:2f:12:ca:80:cc:c8:13:14:39:23:f5:dd:6b:
                    f9:0e:d4:33:bb:e4:81:ff:39:35:9d:1b:8c:be:04:
                    5b:a9:8a:5c:f4:0a:ad:fb:2d:63:f4:e9:53:ec:eb:
                    b2:7e:ea:14:5d:90:74:73:51:ad:69:bb:a3:9f:c7:
                    81:8d:dc:03:2b:e3:ad:fd:32:52:14:42:ab:f5:93:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:16:65:44:B0:D3:C2:0E:CC:15:6E:6F:77:47:B7:83:20:44:A1:06
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/62703a29-bc16-4b4a-a5f6-a9a08ddb283d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:2020::/46

    Signature Algorithm: sha256WithRSAEncryption
         c2:56:cd:97:99:16:ec:bc:be:66:7c:fe:d3:49:01:e9:42:14:
         f1:b5:e4:ca:0d:6c:d1:12:44:42:d5:f1:4e:6f:3d:d1:05:d6:
         b8:62:6f:1c:a1:f6:0f:f3:61:c7:55:ff:11:c1:94:5e:7e:95:
         e2:45:34:8e:41:0a:eb:c3:74:69:86:91:26:fb:28:b0:19:62:
         d0:65:30:06:47:8b:6a:cb:60:a8:31:fc:82:d8:42:3d:88:a1:
         53:11:5c:04:21:27:45:fe:62:b5:03:5d:9f:b5:3b:d9:51:41:
         c0:09:15:fa:da:96:5f:6c:85:fb:e4:47:96:1f:47:8c:6c:1d:
         75:f4:88:0a:85:13:38:1c:2b:24:22:6a:42:99:4b:49:2e:9f:
         88:e9:24:18:5d:0d:d2:4e:e5:e5:50:8d:9b:e6:36:d5:5f:1b:
         37:88:b5:3a:c3:29:53:e4:b8:2d:95:0c:ab:b9:35:15:ae:6e:
         cd:ea:3e:66:9e:ca:40:a2:6a:46:21:a6:97:3d:e9:bc:5b:97:
         86:ee:44:c2:a2:64:0d:be:0f:d8:89:68:d8:d9:cd:48:5d:88:
         00:8c:99:dd:aa:12:8f:b5:25:4d:ab:3a:93:97:fb:0c:a5:65:
         7d:e2:b9:af:5c:f0:13:11:4c:86:ec:4e:54:f4:f4:aa:04:91:
         78:0d:66:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----