Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa
File:                     71525ec8-f99c-4180-8e1b-a59672d69567.roa (raw, json)
Hash identifier:          hvib4Qy4FM7zMjORKoB/EtjtvYUw+g2pxQs7mRzqjZ8=
Subject key identifier:   B7:7C:D3:01:F2:E3:AA:12:C1:FB:0F:40:3F:FC:C1:12:04:32:5E:B3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5190656954A652F642028F6192B6EBCD797AA5C1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:c040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:90:65:69:54:a6:52:f6:42:02:8f:61:92:b6:eb:cd:79:7a:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2fa199c8e4a038bfe9190bdaf559cf41632df10eb863caa53584cd657110be1a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:1f:e4:d2:b0:36:b7:9a:2d:b3:a2:90:72:
                    58:3b:44:61:f7:96:a2:aa:0e:b7:33:08:04:77:a6:
                    f6:e8:f6:09:64:23:dc:ae:34:1f:74:9e:3e:29:02:
                    1c:06:1e:0a:93:85:d3:f9:86:0c:5a:7c:be:9d:c4:
                    a8:86:13:b5:7c:a6:9c:d6:6a:9b:94:b6:68:1b:23:
                    ef:67:05:99:23:b0:d1:fa:62:e7:3b:aa:c1:01:a9:
                    03:0d:0c:94:ac:b0:71:0a:9e:4d:f8:0d:12:8a:e5:
                    a0:8c:d9:29:9f:27:42:35:2c:cc:c1:10:29:70:e7:
                    ab:c7:4e:44:d9:a8:52:71:de:fb:7f:f9:3b:54:60:
                    e6:fb:76:f3:99:39:31:7f:f6:4b:d5:de:79:d2:06:
                    70:1a:a3:c1:f4:47:2c:79:83:1c:4f:05:75:df:da:
                    b5:74:f1:42:c1:71:8f:39:3f:5e:eb:a8:17:df:46:
                    57:f5:bb:33:52:dc:bb:b3:b9:af:9d:7d:82:bf:3d:
                    3c:a0:3d:04:ea:e4:e1:f3:cb:01:aa:ae:2c:63:dd:
                    6d:95:12:f6:61:5a:bb:2b:48:1e:f5:14:8b:1d:5c:
                    b8:5c:d1:0a:5f:79:bc:13:bd:78:32:ea:46:c8:d2:
                    75:25:66:b5:8b:93:36:eb:6d:89:91:f3:f2:98:76:
                    50:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7C:D3:01:F2:E3:AA:12:C1:FB:0F:40:3F:FC:C1:12:04:32:5E:B3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/71525ec8-f99c-4180-8e1b-a59672d69567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:47:bc:dc:97:48:d5:e2:52:78:54:62:db:78:e6:5a:3d:
         02:fd:4c:9f:65:ed:18:de:18:f6:09:e5:38:57:78:03:f6:6e:
         9f:fd:00:a0:b4:46:e4:db:76:88:4a:48:a3:68:a4:51:79:e0:
         5e:69:d8:9b:ee:d5:6b:06:d8:ee:1f:46:0f:25:e3:45:31:af:
         f9:55:d2:ab:d5:ac:34:9b:4e:cc:17:02:f6:1b:53:04:dc:53:
         0e:ad:32:31:cf:38:09:bf:ae:37:44:e7:47:c7:7f:48:d9:d8:
         48:11:dd:eb:9a:fe:87:16:26:c2:a2:4a:12:3a:90:63:36:16:
         68:3e:22:67:9e:34:74:23:07:a9:bd:81:85:1b:39:ca:ab:48:
         30:7e:a1:3c:a5:9b:7c:1b:ae:3c:91:e4:46:45:21:de:8a:1d:
         c7:f3:8b:0e:6e:3c:a5:4b:d9:e3:f7:9d:b2:e6:94:c9:45:6c:
         e8:69:53:65:97:d3:4b:86:6f:73:d2:f1:3a:0a:e7:3b:93:f1:
         0b:e2:1e:f9:48:3c:62:ba:55:b5:6f:ab:e1:ee:3c:43:a8:0b:
         84:f7:42:45:79:f0:77:45:59:da:36:08:d9:d5:eb:1e:9f:c0:
         54:34:80:76:b8:bb:6c:19:58:a1:53:89:90:ee:70:98:27:89:
         0d:60:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----