Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d2bce7b-37e2-4787-95fb-0e0d01dbc543.roa
File:                     7d2bce7b-37e2-4787-95fb-0e0d01dbc543.roa (raw, json)
Hash identifier:          v/GK+wJLjWVJhQOFWsAm1tcG86q7xE2GFp1eWjOKg8Q=
Subject key identifier:   BF:8D:1F:28:18:8D:E6:8B:28:67:FB:B2:8A:F7:FF:92:42:D1:4E:77
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3FD46CE4A293C43E832A79A970A6AC2EF71DC024
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d2bce7b-37e2-4787-95fb-0e0d01dbc543.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:80a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d4:6c:e4:a2:93:c4:3e:83:2a:79:a9:70:a6:ac:2e:f7:1d:c0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d6479089b359ef0105c96f73ff6821c9ae61be95401a49cc62c15cfa18a9c12f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:0d:12:cd:04:5e:63:9c:6e:d3:90:0f:e8:
                    93:08:30:b0:83:b5:66:83:a7:ff:bc:69:e3:f5:c8:
                    52:7a:b7:d3:83:16:4e:2d:b5:78:a6:25:cd:11:c9:
                    df:eb:69:d8:4c:55:67:4f:35:ff:fb:d1:52:77:a6:
                    99:21:98:50:4a:a8:b2:c9:bf:e4:20:f2:9a:37:a3:
                    cd:e8:fd:26:77:dd:46:e2:43:95:cb:17:d2:12:f7:
                    5b:d6:19:56:21:9e:d4:9c:bc:39:ee:05:96:bd:52:
                    0e:46:ad:33:64:58:e3:21:bf:6d:fe:24:85:74:b8:
                    96:f4:74:97:2d:75:d5:c4:85:3e:46:34:47:49:74:
                    86:93:48:20:ea:01:26:ef:aa:14:a3:b9:43:e4:bc:
                    34:dc:56:7f:85:3a:20:ff:11:bf:90:92:8c:de:64:
                    be:87:84:3d:7d:35:5d:b9:10:7b:bf:95:1c:e4:94:
                    cb:8d:62:d8:b9:fa:37:77:0c:aa:f9:c0:90:ab:8d:
                    8c:7a:f0:dd:89:39:37:ad:ed:78:88:fb:c1:4f:71:
                    59:8f:38:0e:f9:a9:c6:b8:a3:07:ce:48:2a:32:83:
                    23:b4:57:fa:e1:d7:c2:35:39:87:85:f2:fb:01:94:
                    5d:d7:58:da:7a:f3:56:26:dc:c7:cf:a9:c6:ed:73:
                    c9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:1F:28:18:8D:E6:8B:28:67:FB:B2:8A:F7:FF:92:42:D1:4E:77
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7d2bce7b-37e2-4787-95fb-0e0d01dbc543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ae:d7:fc:32:b7:9d:0f:8e:95:aa:31:97:cc:ef:60:29:71:
         e3:82:c1:5e:8b:aa:e0:5c:33:32:ba:86:5e:8f:f5:9a:9e:8d:
         93:dc:02:94:bf:83:ba:5f:47:4d:82:16:18:7b:d2:c1:b6:2f:
         4c:6d:7d:c5:a8:ce:99:38:f0:fb:d8:78:9d:9a:96:b5:4d:f6:
         71:72:ba:ab:bf:e1:be:ba:5f:03:57:41:53:54:43:c5:86:76:
         c5:49:1d:d2:77:51:6e:98:76:0b:15:8e:2c:a9:aa:48:63:39:
         c9:04:cd:f7:66:fa:d5:ee:60:4c:ab:21:a1:57:b7:b2:31:db:
         b2:20:0c:61:af:34:fc:f6:51:bc:29:cc:3b:08:6e:c4:d1:d3:
         58:08:a5:2f:c2:15:67:3e:68:2d:96:21:51:0b:39:17:cd:e6:
         1d:e9:c3:07:29:f2:80:a4:7a:7e:3e:64:ec:31:8a:09:a4:31:
         5d:b0:b4:11:88:02:d8:81:eb:0a:cd:af:4a:1f:2c:8c:24:13:
         bf:33:94:e8:87:97:65:c2:e5:c3:22:09:a2:a6:7b:ed:32:a4:
         70:b3:e1:3d:a6:99:e0:3f:c5:ae:48:cd:98:51:9f:95:e2:bd:
         fb:bb:23:a1:69:42:03:f7:41:fd:d9:09:75:04:dd:f9:a9:49:
         73:63:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----