Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa
File:                     6e02e531-f45f-49be-9529-f33d23fae32e.roa (raw, json)
Hash identifier:          qIeBFkA695iYF8fKLpsNuGdOadxK33/G3zpiEnNaDRA=
Subject key identifier:   68:95:BD:A9:F4:30:08:C7:6E:59:BC:9F:12:55:B1:CF:46:C5:2E:76
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       33E218A91A3C574A1C5046EA45C38EC6EF3EE621
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:80c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e2:18:a9:1a:3c:57:4a:1c:50:46:ea:45:c3:8e:c6:ef:3e:e6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4e921bd0f1624440dbd044627163fc86fff065feec8c39db6dc4a1d482f123ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:64:87:3c:2a:3e:8d:5c:21:5a:1e:5f:2c:
                    30:6b:4a:c0:1a:e6:1d:d3:aa:c6:85:00:52:40:f3:
                    85:e4:f1:f1:3a:c3:aa:f0:13:1d:9f:84:3f:82:7e:
                    f8:a5:e4:d7:4c:77:a9:04:b2:07:9b:bd:d0:3c:9a:
                    a5:ab:84:f7:64:a6:44:bf:70:0a:be:4b:20:b9:4b:
                    cd:ed:5e:05:f3:7b:03:4c:0c:9e:ba:60:23:e2:62:
                    60:09:59:06:3f:15:ec:ad:ee:75:6b:87:a7:78:c4:
                    5f:98:a5:aa:86:85:86:88:51:2d:89:ae:ef:95:a8:
                    00:2b:18:b6:0e:2f:ad:83:45:03:cb:f1:63:09:1b:
                    66:1b:ec:8e:3b:0f:5d:95:2b:bd:f2:41:c9:20:1f:
                    e4:f2:c1:a3:16:f9:74:e1:1b:ac:ea:e3:90:a1:e3:
                    03:4d:1b:bd:1c:c8:cf:9c:b1:ca:31:78:49:36:9b:
                    8d:2c:1e:5f:56:24:33:1c:64:70:4b:e3:31:81:98:
                    4b:74:04:fe:55:94:a3:55:fc:40:d1:24:88:42:2b:
                    e2:b7:3d:9c:b2:32:7e:97:82:3d:37:7c:b9:ef:2d:
                    84:5e:30:bb:fc:50:69:c5:c4:25:f1:6f:61:dd:ec:
                    0c:84:e3:b3:be:37:c5:23:35:af:78:27:9b:11:40:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:95:BD:A9:F4:30:08:C7:6E:59:BC:9F:12:55:B1:CF:46:C5:2E:76
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6e02e531-f45f-49be-9529-f33d23fae32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:80c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:94:a4:9f:2a:c5:8a:23:f9:e9:77:50:c1:72:e3:24:9e:
         20:e0:77:a8:86:7b:45:cf:31:b1:e6:ef:d4:c4:66:11:d1:5b:
         8d:df:e1:8d:78:a2:02:4f:31:20:95:1c:d1:7d:b5:58:b8:d5:
         a6:cf:c9:c8:22:70:56:e9:0e:64:68:05:27:43:51:ca:c9:04:
         16:44:4b:d8:bb:87:84:41:09:1d:d1:48:06:95:3e:ee:4d:78:
         d1:b5:07:93:79:4b:c2:63:92:75:61:fa:b6:f7:7d:fd:f6:e1:
         e0:a5:ae:89:fc:b7:0e:a2:10:3d:a9:cd:86:10:3c:45:40:56:
         a6:d4:dd:75:3d:87:c3:1d:e0:93:52:2f:2b:2f:62:6e:52:ac:
         0f:c6:bb:56:36:6d:77:24:f3:49:8b:4e:a2:5e:62:be:cd:86:
         d4:56:f0:88:a1:bc:e0:58:15:06:5c:ed:d1:51:b7:2a:09:11:
         5a:a5:52:ee:13:92:f3:08:64:68:60:2b:bc:9f:35:66:c3:50:
         9d:df:9d:fd:00:d1:7e:15:e9:06:5f:52:1f:15:7f:fc:d0:c0:
         2f:35:5d:00:64:85:53:79:3d:98:12:ff:47:f7:4b:52:20:7e:
         e8:5b:38:ff:ad:eb:f2:ac:6c:74:e0:24:83:2c:43:8c:71:1c:
         54:59:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----