Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63206b2b-d620-415f-9dee-e3c63ab27be0.roa
File:                     63206b2b-d620-415f-9dee-e3c63ab27be0.roa (raw, json)
Hash identifier:          YHmsBJYG1j9VKB/0qzRKgq3xR1w8tkiQ+7wsC+jXVlo=
Subject key identifier:   09:CF:A8:B2:A4:8F:66:31:16:B4:04:C6:83:7C:CE:BE:2B:E0:56:E5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       22078BF06E2F569B5573BE80760B9027BC157406
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63206b2b-d620-415f-9dee-e3c63ab27be0.roa
Signing time:             Fri 31 Jan 2025 00:00:00 +0000
ROA not before:           Fri 31 Jan 2025 00:00:00 +0000
ROA not after:            Fri 07 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:07:8b:f0:6e:2f:56:9b:55:73:be:80:76:0b:90:27:bc:15:74:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 31 00:00:00 2025 GMT
            Not After : Mar  7 23:59:59 2025 GMT
        Subject: serialNumber=9b9356155eaba286c5cf31f77932d664f79582990f7dd63a4241d08d0047d0e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:bf:69:2a:a0:d9:bf:68:f2:08:42:e8:ca:
                    93:fa:a9:d7:50:9e:3d:06:5b:6c:e6:62:b7:20:e8:
                    17:c1:99:8b:8d:95:3b:7b:a7:2e:83:28:62:67:23:
                    cb:f3:13:c5:f9:b5:13:93:18:ef:81:e3:4b:76:43:
                    8a:e3:62:45:5f:5e:46:59:6d:cc:bd:a9:78:46:70:
                    98:c6:65:be:4c:2a:46:1f:dd:e7:ad:4e:03:92:05:
                    93:cf:a1:55:76:44:60:93:f8:20:b3:30:d3:b8:6f:
                    65:2f:73:39:3a:b5:60:97:b1:a2:b3:ac:92:da:b9:
                    13:9a:7d:a8:38:9c:e3:26:0f:bd:3b:be:39:83:37:
                    8a:0c:f1:c0:07:ad:bd:b9:f6:99:11:79:f7:0f:1b:
                    bb:9b:24:17:92:9d:9e:ef:61:7c:3f:2f:a3:4d:38:
                    35:59:d8:40:21:f9:43:58:fd:15:f9:b6:a0:12:b6:
                    f4:ba:36:ff:95:77:bc:65:5d:5d:ec:f3:da:2a:f8:
                    39:41:4f:7d:27:2a:ae:cc:e3:dc:27:26:66:f6:40:
                    6b:5d:36:f7:7b:f1:8e:a2:c4:ea:95:e0:19:f4:85:
                    53:33:6f:98:cd:a1:c3:54:24:a5:8a:08:4a:92:ea:
                    a0:5d:67:e8:16:9f:bc:26:4d:ce:49:a8:4e:0d:7e:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:A8:B2:A4:8F:66:31:16:B4:04:C6:83:7C:CE:BE:2B:E0:56:E5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63206b2b-d620-415f-9dee-e3c63ab27be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:70:c2:49:20:e8:0f:68:f7:bd:59:45:fc:c7:95:6b:1c:5b:
         16:c8:27:1a:16:55:ae:10:0f:00:24:94:f2:98:e5:5f:58:51:
         34:41:31:ce:c4:bc:82:f9:71:18:68:28:d2:a5:3d:77:53:a0:
         69:bb:0a:39:75:c6:03:64:38:ec:40:a0:f4:5f:e4:2c:7c:f8:
         74:a0:af:d4:66:16:aa:2c:e6:d9:c8:a7:92:f1:83:3f:78:88:
         26:6e:f0:d8:1a:a5:be:14:3a:75:ba:0e:85:eb:bf:58:8f:9b:
         0c:52:d1:1d:94:99:ad:04:9c:1e:c3:78:54:5c:8b:f3:59:ee:
         32:4a:7a:77:2e:2e:c2:34:bf:00:b3:67:8f:f1:6a:ff:44:4c:
         15:37:c8:a2:44:2b:ae:54:66:fc:61:f3:24:ea:ee:41:f3:ac:
         51:47:e7:95:ee:3a:7e:b2:12:e8:9b:ee:3d:98:c1:f9:06:7d:
         67:6c:4a:94:d1:b7:c9:77:7c:19:31:89:b5:75:ad:8d:78:5d:
         7d:eb:ff:8c:35:31:a0:9e:71:4a:40:b7:1b:57:69:e7:41:77:
         01:5f:4a:6e:a7:78:d6:73:8b:02:82:5d:3b:21:64:b6:6f:d3:
         54:a5:a0:8c:3e:cb:4b:eb:b7:a2:35:44:87:51:fe:98:23:d1:
         e0:5e:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----