Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa
File:                     6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa (raw, json)
Hash identifier:          OOW2Dbs3cLn6OcdARhZ7PbOBOWciJzXZHrNktyEjKac=
Subject key identifier:   84:3C:4B:7B:6F:35:91:39:DD:57:89:AC:B2:63:BB:9E:07:CF:99:1B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       34B42576A09D36B5C6128CA9D0E7FFEB16636AB2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:c880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b4:25:76:a0:9d:36:b5:c6:12:8c:a9:d0:e7:ff:eb:16:63:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=0bef7076bfffe404939d4459fa1e2f6cf3c6f19a7eb385d988c7465364ee8d3c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:de:63:76:3d:eb:2a:1e:6d:f8:9c:35:10:
                    34:d3:22:f5:e9:7a:6e:12:3d:5d:89:66:59:c3:ad:
                    15:6d:73:d0:4c:95:8f:c4:86:f7:cb:38:30:d0:86:
                    5c:26:ec:9f:22:6e:af:1e:91:73:8d:41:38:e7:af:
                    cc:fb:0d:7c:60:b8:d5:69:61:f2:ad:1f:d5:58:eb:
                    91:6f:07:65:66:cd:86:ff:85:40:d8:39:fe:3e:59:
                    93:17:ea:03:e0:8b:d4:38:10:88:8e:27:87:83:04:
                    c7:3b:94:27:44:05:0a:69:63:2b:53:3e:b5:b6:75:
                    15:f8:64:62:e4:75:dd:df:91:a4:c6:5e:38:b3:04:
                    aa:87:27:13:83:d4:2b:6e:ea:c3:c2:05:0e:d4:e1:
                    0f:4d:05:60:82:0d:f6:80:ce:9b:94:27:41:3b:77:
                    bf:e9:76:c8:72:4e:d2:95:8b:e3:b4:52:5e:6b:35:
                    eb:4b:0d:5a:a2:c7:98:c2:c4:6c:80:04:e0:e0:37:
                    c4:a0:a6:79:4e:d5:81:71:91:ba:58:80:e6:03:32:
                    3f:20:1b:c9:09:e4:dd:e4:0a:10:d1:fe:fc:ab:39:
                    87:9c:9f:61:9e:d3:3a:68:1b:ce:4f:5e:96:ff:39:
                    b5:a9:df:44:4c:46:69:4a:fe:85:f9:26:bb:44:05:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3C:4B:7B:6F:35:91:39:DD:57:89:AC:B2:63:BB:9E:07:CF:99:1B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6f6b5a3c-b3f5-4577-a228-2ce1b7327c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:c880::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:2a:aa:84:dd:34:2c:d3:d1:b2:b5:4f:21:66:e8:1c:1a:
         32:2b:84:9e:2b:c0:39:58:43:5a:a4:60:c2:ba:5f:51:30:b5:
         0c:ed:7c:36:ab:6a:1b:dd:91:9f:27:67:a8:2a:ed:75:15:01:
         08:74:80:bb:3c:9e:d8:a5:b8:f7:d8:81:16:5e:f3:78:9a:70:
         b0:17:2c:1a:12:b1:d9:83:f6:0d:c2:5c:92:66:74:af:6e:5d:
         cb:3d:30:ad:9e:ad:71:dd:65:9a:f1:39:78:43:35:01:39:42:
         69:ad:11:e8:82:9b:0f:05:57:e8:74:9f:c5:f8:b7:a1:1a:17:
         22:a9:a1:6d:69:33:9c:f9:c6:77:80:96:35:c1:4d:30:d5:d0:
         77:b5:90:c3:13:3b:a1:82:c8:6a:21:e1:b1:30:31:06:b0:3b:
         68:76:f7:d3:ef:e4:2d:a1:42:19:8b:2d:72:16:1f:99:f7:81:
         56:0e:19:6a:21:4e:77:59:17:83:9f:7f:d3:cc:94:55:8d:19:
         02:32:8a:ba:4e:d1:4f:b6:84:a6:34:92:08:97:91:2d:ce:50:
         97:65:86:1a:1f:60:d0:10:04:b3:de:8a:f9:0e:ea:d7:da:25:
         26:25:41:87:30:72:0b:90:7e:44:29:78:b4:2e:a2:eb:e3:7d:
         ef:f6:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----