Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794feada-3f8b-4a7b-8954-992fddba3191.roa
File:                     794feada-3f8b-4a7b-8954-992fddba3191.roa (raw, json)
Hash identifier:          YY/IDtaCXe9eFiTwj7lRwMjt+Spi2MEEcLfb8RQmvY0=
Subject key identifier:   47:27:C7:52:69:5A:C7:B0:95:D8:01:39:03:67:A4:E3:CD:AD:F5:87
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       409F9F1920B9CE7C617B5F11E5BA415045FBB895
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794feada-3f8b-4a7b-8954-992fddba3191.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:a000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9f:9f:19:20:b9:ce:7c:61:7b:5f:11:e5:ba:41:50:45:fb:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=e82a1933f83a5bece4aef6bbe56aa4af1ff1e641bdfaab41612baafe3f972a83, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:46:3a:0b:a0:d2:b5:f8:e2:87:71:c0:78:1e:
                    74:70:ac:f5:a7:59:98:71:82:29:ac:58:92:06:8d:
                    d9:72:04:b3:49:a8:77:b3:c9:8e:f6:c2:45:ba:5d:
                    8f:1d:2d:7d:c3:35:2d:c7:0b:98:d4:1b:4c:9d:4c:
                    43:4f:c0:b5:3d:f6:d5:ed:67:4c:85:e8:69:3b:2c:
                    67:8f:ba:64:4b:9c:bc:95:a7:aa:2b:d4:2c:15:4d:
                    59:6d:7e:fc:c1:c7:d6:08:9b:b7:68:b3:d1:d3:14:
                    ac:4b:96:df:57:b7:c7:f1:23:b8:32:d0:4e:48:50:
                    06:f6:7e:26:c7:00:46:93:1e:47:de:91:96:47:5b:
                    84:09:8e:e9:ec:39:d0:13:63:82:9d:75:cc:ba:55:
                    80:36:e8:63:93:46:d5:fa:56:59:a1:7b:fa:c6:d1:
                    d0:3f:41:d1:bd:7d:48:c5:f8:85:87:90:27:76:9e:
                    3e:92:a1:10:77:fc:52:c2:7e:e6:a6:81:2b:bb:85:
                    5f:2e:a6:e7:75:93:2a:af:3c:be:bd:7c:9c:cb:c5:
                    56:4c:53:79:a2:aa:28:53:18:97:ff:55:bc:d6:ef:
                    83:c1:30:2f:ac:f1:0d:89:dc:a9:a5:87:85:39:8e:
                    16:04:32:2a:52:cd:56:bf:e3:95:77:5c:24:e3:f8:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:27:C7:52:69:5A:C7:B0:95:D8:01:39:03:67:A4:E3:CD:AD:F5:87
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/794feada-3f8b-4a7b-8954-992fddba3191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:25:ea:1a:d6:1d:9d:fb:04:16:d1:ab:1f:75:98:fc:01:61:
         37:11:e8:89:91:db:59:81:5f:3d:f0:59:bd:fb:b0:a3:d4:c9:
         51:26:b2:59:cb:7d:90:7e:44:8e:29:55:cb:6a:01:ed:fb:a8:
         96:23:a0:25:4b:9f:97:d2:66:ca:d0:10:6b:fc:df:54:33:29:
         58:9c:0a:c8:ef:03:2f:24:64:b3:0b:99:b0:6d:98:4c:79:28:
         b7:8b:da:a5:ed:ae:bb:e8:18:b9:e2:f1:56:87:9a:f3:95:5d:
         18:f2:0f:87:ef:b2:75:b3:c3:c9:5a:85:ea:a0:13:f5:fe:99:
         ed:1e:ee:64:23:bc:0a:e0:53:56:35:bb:c0:9f:0f:87:b6:1e:
         3f:e4:44:2b:84:66:a3:ca:66:02:33:1a:f0:6f:dd:eb:2a:2b:
         3f:0c:3c:e2:ac:c2:53:43:9e:6f:5c:a5:49:04:e8:26:a1:6a:
         5b:c8:e6:73:17:43:36:51:ea:cc:d1:b4:02:c3:40:9d:ae:0c:
         e9:c2:da:55:8f:82:b9:3d:b2:7f:8b:69:45:10:ca:50:34:5d:
         32:86:3c:1f:6f:e2:e7:02:7b:ab:ac:7d:3c:76:3c:7c:e0:93:
         f7:d4:67:53:9e:01:84:a3:17:d7:56:21:a0:4b:d5:bc:08:5e:
         78:f9:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----