Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/769ca12a-c706-40a0-8a33-6dfb3b4ede54.roa
File:                     769ca12a-c706-40a0-8a33-6dfb3b4ede54.roa (raw, json)
Hash identifier:          oog7jZCkked96Sgl0WRrdRxLXRWS4lxc09LTtfdDafY=
Subject key identifier:   2D:17:E8:7C:75:10:32:BE:D8:E0:02:12:B4:F1:3C:ED:5F:1B:AB:91
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6048A357E19A20ACD4DA1C136311FE2C36450817
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/769ca12a-c706-40a0-8a33-6dfb3b4ede54.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:8880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:48:a3:57:e1:9a:20:ac:d4:da:1c:13:63:11:fe:2c:36:45:08:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=3f19b8034050d1df26b058100f4c2b3a63ca0b3a28e255862279f7e78772773d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:18:06:71:fb:9c:a7:15:b6:fd:71:9d:d3:
                    ab:5f:5c:71:78:98:ee:c1:8c:a4:90:25:2e:23:10:
                    9b:d3:e3:75:cf:95:80:8b:fe:02:1e:2d:96:74:3e:
                    04:d8:f8:1b:76:a4:a7:6f:7f:0b:66:29:5c:50:57:
                    f3:ac:dd:b1:f3:d6:37:fd:64:95:02:c6:27:3c:f0:
                    8f:78:7b:67:95:c9:4c:bb:46:85:0b:ec:47:5b:74:
                    7b:ef:bd:14:69:58:c8:38:c5:cc:87:d6:24:25:20:
                    d8:cd:13:9b:32:7b:2b:9c:2c:f8:6d:04:07:26:19:
                    3c:6c:40:e5:3a:1e:83:2e:70:85:d7:8c:d8:99:6f:
                    d5:da:df:1b:37:30:2e:ae:18:a1:82:80:fa:0f:73:
                    00:bb:e2:2e:91:7b:09:05:6c:dd:e0:9f:94:90:a5:
                    ad:88:fa:c2:d5:90:c7:f8:63:d7:69:29:1c:89:c8:
                    68:e2:f2:0b:d5:3a:d5:f3:91:66:35:a3:f1:26:65:
                    6a:91:81:1d:8a:16:0b:d8:f9:fb:ad:d2:ee:33:cd:
                    28:e7:13:c7:fb:c8:20:f8:61:c4:53:4f:4c:2a:84:
                    5f:e7:e2:28:65:87:4a:ea:14:37:93:71:3b:27:da:
                    52:25:0e:9a:8a:2e:09:7c:03:ab:3f:aa:2e:b3:12:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:17:E8:7C:75:10:32:BE:D8:E0:02:12:B4:F1:3C:ED:5F:1B:AB:91
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/769ca12a-c706-40a0-8a33-6dfb3b4ede54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:8880::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:0c:e7:10:e3:bb:ba:4a:b1:26:dc:6d:45:99:90:79:c8:c6:
         92:e8:bf:64:46:eb:64:d2:4d:4e:27:69:08:41:12:16:6b:0f:
         97:db:76:1a:0f:ac:26:2e:dc:c7:de:e9:06:cc:4e:0f:b2:f9:
         93:c0:b1:1d:a9:3a:6d:ea:45:ed:5a:01:b9:22:f9:23:01:8a:
         7e:92:1d:69:e8:fe:b6:81:cd:a4:34:61:87:55:c5:3e:15:7f:
         61:fb:6f:c1:82:53:ef:ce:25:5d:39:58:b6:15:e3:a5:6f:5f:
         02:1b:11:5b:d8:8e:5e:0c:7a:77:66:ce:df:b4:6c:e4:06:9e:
         77:b0:85:12:77:b9:7d:46:df:77:97:86:01:56:c8:81:ae:bf:
         d8:c3:af:ec:9f:ac:00:29:66:3f:f0:b3:6c:c0:79:08:c2:71:
         d1:ac:66:f4:4b:1c:00:d6:c3:55:0a:d1:68:6b:e3:90:04:41:
         97:3a:97:0d:19:19:77:90:d6:de:20:3b:5d:2d:ef:52:7b:97:
         00:fc:31:fb:f1:45:8e:a6:46:b2:44:56:3e:46:b8:cb:be:cd:
         e2:6e:12:9c:c2:04:98:ff:32:7a:c4:77:5d:f0:c7:3d:ee:29:
         72:f7:9d:3c:65:d8:e4:bf:ca:0d:23:8b:3f:fd:b5:98:83:ff:
         2a:3a:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----