Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa
File:                     7df54ca1-fa6b-41e4-8480-61d86d49f455.roa (raw, json)
Hash identifier:          ZgCM3EoXSrAbpYdYbI6YARiA2go/KlUy0DwuhmfEWTE=
Subject key identifier:   A5:95:97:57:23:5E:14:7E:C0:B5:77:2D:F1:7D:86:62:2A:07:D5:12
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2CC624812741A662502CA61CA3F7FCA0F206B6AE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c6:24:81:27:41:a6:62:50:2c:a6:1c:a3:f7:fc:a0:f2:06:b6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ca7da7564b24c10bc45d6fa56eac6a607b2b5ce6a835697c0ba0fef43829eb65, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:55:0d:c6:db:32:5d:46:ef:27:40:7e:5d:
                    da:48:39:c6:97:3d:56:2b:5d:95:5b:7f:a2:47:84:
                    6c:77:5b:17:52:f6:1b:dd:d1:32:5a:86:df:fe:0b:
                    80:19:43:55:43:fc:53:5f:2d:01:3c:38:8f:40:08:
                    47:a3:94:59:48:18:28:a4:5d:44:cd:69:e9:ef:07:
                    94:1a:05:b6:d7:c7:bf:87:be:e4:6b:56:4c:3e:92:
                    c3:54:eb:4e:e9:54:08:1c:8c:2f:05:4a:23:30:bf:
                    d4:4d:6b:5f:4c:91:4d:ce:84:74:e2:55:6e:c7:7d:
                    07:de:8d:d3:37:65:20:f9:39:b4:95:ee:21:08:ea:
                    1c:56:b6:33:7b:55:c9:5a:9d:c1:d4:0e:1d:af:49:
                    a8:4c:81:42:72:4d:8d:27:a9:f6:86:01:91:c3:b7:
                    ca:c8:35:49:11:95:9f:e7:41:ce:68:02:9e:66:fa:
                    a1:aa:cd:d0:de:19:47:c5:c8:93:49:78:3a:2b:2e:
                    3c:35:2e:46:b0:6a:2e:3d:03:24:12:ec:95:f7:c0:
                    23:6e:d1:a9:30:7a:33:a1:62:ae:02:53:52:cb:f0:
                    6a:f0:18:05:a4:7b:c6:2c:bc:2f:4b:22:13:72:24:
                    67:78:40:27:68:c1:4f:8b:d6:e1:ec:9c:b7:2a:b6:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:95:97:57:23:5E:14:7E:C0:B5:77:2D:F1:7D:86:62:2A:07:D5:12
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7df54ca1-fa6b-41e4-8480-61d86d49f455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:73:d5:75:04:69:f3:5d:5e:50:7a:87:42:e7:b4:42:95:
         e2:c1:f6:f0:49:7c:b2:c7:ec:11:2c:4e:82:bc:48:6e:4c:c2:
         1d:e7:41:aa:ef:e0:08:9a:92:14:4b:43:06:13:fc:85:9e:61:
         8d:16:e1:ed:be:da:a4:0e:97:3b:35:28:d4:b7:30:cf:31:86:
         cf:83:4a:f3:5b:de:c1:7a:a1:9a:3c:66:13:cf:e7:b5:b9:db:
         04:68:4f:1a:6d:bc:73:32:8c:a2:35:0e:84:4e:93:65:1e:83:
         57:c4:89:29:98:f8:dc:6f:5b:9b:51:a0:87:bf:ba:37:41:0d:
         61:8d:58:a7:7a:27:86:db:c2:e0:fe:d1:00:4a:3b:95:6c:e1:
         b0:ff:66:0d:12:2b:e6:2a:bc:48:84:c9:04:30:a0:d0:f6:7b:
         b2:9e:3a:ee:fe:c1:cc:c0:62:9b:75:58:8e:6b:92:96:e5:e3:
         9c:32:78:6c:dd:3b:a4:09:76:b8:34:1f:e5:6e:47:89:6e:1d:
         9a:91:fb:21:c8:19:9e:7a:e1:a0:b2:c2:77:ee:cf:c4:c8:7c:
         cb:06:cd:38:65:3f:c0:3a:00:83:f2:22:81:a0:c5:32:1f:c7:
         f3:f2:38:d0:e8:cd:a5:b5:79:58:dd:46:0b:99:2c:5d:71:0c:
         c0:1f:4c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----