Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa
File:                     80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa (raw, json)
Hash identifier:          k0bmwHcqa8BIVa74wnoAelrCerlEsvGmaETv7E0ghcM=
Subject key identifier:   2C:CA:92:BC:9F:73:0D:1C:3B:89:F6:50:B5:28:E3:6D:D0:2C:39:16
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6FB1BE6AED7F932EFAD77DC998E0CCDD027365AD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:c8c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b1:be:6a:ed:7f:93:2e:fa:d7:7d:c9:98:e0:cc:dd:02:73:65:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=72c5a8da1cdd66eb48847d8fa2410ba0294cd3b000f274cade13747e90296b9f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:c0:91:f5:d7:04:37:7d:aa:f6:ea:c0:f0:
                    85:3b:15:68:28:ce:e5:4d:60:f8:a7:db:c2:9f:6b:
                    a4:c5:62:c0:da:71:10:8e:0e:71:be:16:a3:80:f9:
                    79:8e:c7:33:d8:dd:ae:5e:2d:79:fb:91:2e:80:af:
                    92:1d:08:45:27:6c:e0:0a:95:e0:a9:8b:4d:74:ff:
                    5c:1e:f1:17:17:aa:6c:9b:2c:54:6b:db:29:93:fb:
                    01:1f:6d:6a:57:1b:0f:56:db:89:8f:73:13:1f:a4:
                    cf:c1:70:11:80:34:44:b6:3b:44:d9:fb:5a:17:87:
                    12:3e:be:1e:ff:7c:86:0b:30:77:51:a6:cf:ee:5a:
                    8d:cf:ef:eb:14:1e:58:b3:32:86:de:33:13:56:35:
                    df:08:96:e2:8b:c9:4d:52:56:bc:50:7e:08:80:5a:
                    88:44:42:94:e0:cb:09:c7:2a:72:3a:50:d1:6d:1f:
                    a3:2c:b8:7d:89:ef:72:0c:03:bf:df:a3:5d:c0:b3:
                    77:e1:1b:70:44:44:d7:2d:70:a4:6b:7c:2e:01:c6:
                    15:6d:81:42:14:83:85:d7:85:dc:26:54:17:7a:39:
                    4d:7e:a0:ad:4f:ae:e3:c4:e3:fe:73:e8:f7:3d:5f:
                    87:d8:1b:c5:43:25:f3:0c:e9:0a:1e:cb:65:2a:61:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:92:BC:9F:73:0D:1C:3B:89:F6:50:B5:28:E3:6D:D0:2C:39:16
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/80cc7c37-3012-4875-809a-e11a9f2ebbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:c8c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:fd:f8:8d:47:9e:7a:cb:e3:74:da:bc:5b:7c:e5:cf:55:
         76:f1:60:33:ea:4c:b5:66:11:06:71:44:4c:e1:bd:fb:0b:1b:
         d2:ce:ff:00:18:3f:01:4c:c0:d2:38:4f:9e:cd:ec:94:6b:ef:
         18:1f:9f:04:2c:ff:bb:2f:9c:45:70:1d:ca:7e:ff:75:13:fd:
         35:18:01:0e:9c:bd:be:88:d7:84:0a:0b:30:b6:cc:9d:93:5d:
         32:54:04:8d:92:60:63:cd:b8:d3:c9:7d:c3:38:47:08:d0:cd:
         62:29:48:e9:4f:75:b7:47:ef:ca:ea:f2:8e:3e:8c:bd:a9:ae:
         db:26:75:5e:f2:0e:5f:b4:c2:fa:62:18:37:17:63:f8:20:8f:
         a4:b1:01:84:8e:54:1b:9b:85:c4:9a:c8:09:79:3b:92:bc:43:
         76:99:5b:a0:3a:68:44:b5:07:70:cb:d6:06:11:d4:89:b8:d4:
         65:34:b8:44:94:f9:07:aa:a7:5e:54:61:06:17:93:aa:29:ce:
         07:a9:da:77:0b:26:df:d1:fd:6b:f4:1f:bd:e8:05:4d:49:9b:
         bd:ff:2b:02:4c:2b:28:33:a0:78:87:14:86:c3:19:ad:f6:b2:
         0c:44:b2:1d:89:4e:18:f9:b4:49:49:36:d7:4a:b7:94:d2:08:
         16:46:c2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----