Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa
File:                     7fbd42aa-d252-487d-808d-23e478a07d5e.roa (raw, json)
Hash identifier:          EDRlLvJgnuo9aQXXZSh2x75e0pPM55DAhaa0yakLQCI=
Subject key identifier:   0D:13:DE:DC:A4:86:30:8A:B4:1B:03:5F:11:23:1C:D3:90:C8:E7:29
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       349380303C35D6A424E429594822587AD2AF8D1F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:b080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:93:80:30:3c:35:d6:a4:24:e4:29:59:48:22:58:7a:d2:af:8d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=dbe3f7469d5643f8d37ae4696cabc303d5f09565b930b8c9f795f32ad05306fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:55:58:e6:ed:3e:1d:ef:b2:36:9c:1d:9b:
                    64:09:ce:d2:7d:a3:16:32:40:1f:f9:f0:f4:6e:cb:
                    dd:77:9d:6d:cd:1f:27:67:89:6c:53:b3:bd:55:56:
                    f0:ad:34:f8:7a:e2:8d:58:29:19:20:4f:18:90:72:
                    66:24:6a:e0:b4:dd:0a:3f:3a:38:49:9b:2b:1e:a4:
                    ff:c6:7b:d4:8d:86:d0:e2:cd:a6:c5:be:3a:cf:42:
                    c8:ea:6e:8e:3c:36:fe:31:56:12:db:be:5f:21:2b:
                    a1:29:a5:26:5b:03:4a:31:eb:4b:e5:09:0a:10:1d:
                    c9:a3:9d:48:58:f8:11:a7:20:d3:3c:ca:54:6e:bb:
                    5e:b1:f0:03:b3:4f:46:c4:e5:93:eb:80:10:e1:ef:
                    0c:be:5b:bc:34:bc:0a:49:6d:9f:8b:7c:2d:59:5f:
                    b6:93:5a:4e:c9:fe:c8:52:c9:2f:95:27:6f:62:a6:
                    23:eb:65:8b:48:a4:aa:9f:78:9a:10:b4:f3:b0:1e:
                    2d:78:d3:39:51:34:8c:66:ab:18:4d:79:9e:f1:71:
                    67:ae:74:39:1b:fb:39:a4:ee:4e:87:11:ef:a1:39:
                    e7:8e:5e:76:33:4c:a9:58:1a:d3:a8:b8:ec:66:a3:
                    ac:4b:27:30:72:6a:4c:8e:a9:f7:16:78:9f:b7:dc:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:DE:DC:A4:86:30:8A:B4:1B:03:5F:11:23:1C:D3:90:C8:E7:29
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7fbd42aa-d252-487d-808d-23e478a07d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:b080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:61:48:90:d6:04:7f:b1:bc:b6:db:8c:80:10:f5:7f:bc:c9:
         04:c4:5f:83:d2:41:04:ea:98:78:81:0f:5d:e0:30:1d:43:b9:
         df:ac:cb:4c:87:8f:0d:cf:20:e1:e0:4f:57:c8:49:cb:ea:cc:
         24:f8:53:a2:47:32:74:f8:3c:05:18:cc:1c:c2:11:c2:b3:b8:
         16:56:31:d7:70:38:30:01:d5:39:c2:66:16:e4:fd:81:97:e7:
         0a:09:f1:ed:12:b1:8f:5d:2c:21:68:57:be:e3:d4:00:34:41:
         7e:c1:30:64:9f:26:35:09:4f:8d:d5:6f:f8:72:7b:f4:82:41:
         11:36:b1:48:32:56:2e:66:43:cb:53:7a:ea:4a:56:77:2d:9c:
         69:96:39:31:64:92:c3:cc:0e:58:4b:65:11:30:4d:a7:9e:38:
         63:19:b9:9f:2a:7f:7e:02:9d:0f:7c:36:66:40:ef:6d:1e:af:
         86:de:d3:2a:0d:5e:cf:26:68:7d:b5:6f:88:94:d5:70:fb:dd:
         f3:77:be:c7:e5:16:f5:93:12:61:f4:b2:b4:8f:ac:15:75:d4:
         44:d1:fd:a0:99:c7:58:30:85:51:d9:55:c9:af:08:95:e6:80:
         0e:8c:d2:d2:16:5b:b2:af:89:f8:3d:5b:04:05:02:6e:29:14:
         dc:28:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----