Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c128a18-fe39-4c85-9076-3ff17462d555.roa
File:                     7c128a18-fe39-4c85-9076-3ff17462d555.roa (raw, json)
Hash identifier:          IhUB1Pfx/+nwizWPgIEpI8b45ojKq2zks2V2k6vWobI=
Subject key identifier:   72:79:74:59:9A:BD:FE:5B:4C:DA:C7:FC:5F:00:D2:56:8D:BB:A6:D8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1484E15B3C317BF66F0CF2039985DBF4C438893D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c128a18-fe39-4c85-9076-3ff17462d555.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:b000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:84:e1:5b:3c:31:7b:f6:6f:0c:f2:03:99:85:db:f4:c4:38:89:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9a0ccbd2cc6cd3f3c5096bd4c40ddd0e6d6b1fb8b39814fbaea5073324449396, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:99:06:1c:f7:98:23:92:f2:08:31:37:b1:
                    59:54:0c:f9:9a:d1:9b:c9:4c:64:9c:b7:8a:16:e8:
                    39:72:53:5f:90:9a:e9:68:0e:63:c0:47:f2:eb:84:
                    5f:9e:ec:11:8b:fb:83:df:7f:d8:57:ee:3c:76:3c:
                    f1:80:95:06:69:b7:7e:eb:bd:0f:d9:b7:6c:1d:55:
                    b6:c9:3f:d7:39:8d:87:15:af:2c:96:20:4f:0a:fc:
                    70:fb:4f:68:9c:44:2e:a5:34:4a:a1:7f:6a:69:64:
                    b2:53:b8:a8:3b:bf:e0:fe:f6:14:dd:ba:da:5a:b8:
                    78:7a:c5:6f:99:56:f1:3d:f8:18:f6:a7:04:54:43:
                    91:8f:13:54:d1:b4:52:20:63:8c:e8:f7:10:75:17:
                    66:9f:fd:ab:b4:1c:26:3d:fe:b2:24:65:f8:c6:d5:
                    73:2d:e3:f1:9e:f5:fe:24:35:ce:03:85:6a:06:6b:
                    02:d1:3b:c4:12:ce:35:d9:80:e6:fb:e1:e8:1b:05:
                    d3:28:9d:79:ec:91:54:bf:4b:7d:3f:14:06:c2:5c:
                    7a:01:2b:5e:4c:05:06:aa:4f:9a:d3:7d:71:e1:3f:
                    9a:c5:16:34:f9:fc:aa:22:76:e8:a0:aa:e4:c0:90:
                    9d:8e:28:31:7d:21:79:15:b2:17:a4:b3:a8:f6:c2:
                    aa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:79:74:59:9A:BD:FE:5B:4C:DA:C7:FC:5F:00:D2:56:8D:BB:A6:D8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7c128a18-fe39-4c85-9076-3ff17462d555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:44:d1:34:77:4c:4d:d1:64:02:c9:71:b3:03:33:87:01:c0:
         41:8e:a5:f3:b5:84:01:a8:a2:cf:fa:27:d7:9d:10:66:78:2d:
         ac:e1:0e:29:a8:3e:b1:f8:a5:fc:6d:17:79:84:62:20:a4:aa:
         c5:16:1a:39:33:04:9c:b0:0d:3b:9e:19:3a:59:18:08:9f:4f:
         c3:4a:24:53:db:79:95:0a:9d:6b:d1:89:57:4c:17:f2:02:c2:
         97:d5:3c:e0:3a:6a:98:fb:1a:c2:fe:26:d4:24:18:2b:35:0a:
         26:fb:22:19:d6:c5:02:46:66:7a:2f:8d:92:7d:ff:45:f2:bd:
         bb:5e:11:3f:d5:cb:d2:eb:46:55:f7:3e:82:1f:84:b0:d7:51:
         e2:6d:c6:66:e4:f9:5e:24:86:6b:20:f9:c0:6e:c4:11:82:24:
         ab:93:c1:78:43:e3:c9:2e:42:19:88:d1:c9:27:3e:35:d4:65:
         7e:01:7b:25:fb:59:f9:18:36:e7:44:81:ed:6f:a8:27:b7:a0:
         fe:3f:fd:83:7e:0f:a7:20:d2:2d:a6:46:d5:dd:ff:e8:9e:1e:
         9c:4e:85:fa:2a:84:a7:b2:33:de:0e:f7:6a:f8:e1:6b:df:2e:
         91:90:b4:eb:3d:b8:ef:61:d2:1e:44:ea:61:bf:82:08:9e:4f:
         cb:e4:d5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----