Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa
File:                     869e5c68-564f-4aa0-a84a-56dac3c414a5.roa (raw, json)
Hash identifier:          WesVB6FR7IKwEghrp2+JGDEIaPPS6vMQ38cOKmOouHo=
Subject key identifier:   94:7B:08:EC:86:E2:0E:5E:AF:71:EE:F7:DC:3D:14:07:7E:E1:65:16
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3067D5257E3F6275628206ABD577FC2F05551F4F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:90c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:67:d5:25:7e:3f:62:75:62:82:06:ab:d5:77:fc:2f:05:55:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f20866ee0b4c1c53588bd325c1bb6352afcbc7c4dcd40ecedf893163891367ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:69:d2:34:12:a0:56:da:59:87:5e:1d:1b:
                    2f:a4:b0:3d:f9:ee:0e:8b:b5:7d:5a:e5:3c:2d:4f:
                    ba:ff:d8:14:04:b9:4e:7f:34:f7:d9:0b:38:e4:3d:
                    ae:c7:3a:f0:6b:64:74:a9:1b:f6:e0:8e:69:ad:50:
                    c6:3c:08:ec:04:f7:ae:bc:d4:57:72:f7:9a:db:0d:
                    8d:a7:f2:aa:1a:38:d2:b4:89:f7:bb:e8:3f:f5:95:
                    94:eb:65:f9:7d:e1:7b:ea:a9:41:67:55:4a:cf:4d:
                    d5:e3:6a:ec:92:05:94:45:ca:16:10:da:3a:36:45:
                    b0:8e:9c:23:f7:10:14:d1:8b:48:8d:c0:5d:ec:df:
                    38:df:b9:ea:5c:c6:43:94:e8:fd:d2:e2:45:ba:a6:
                    13:6a:fd:dc:9b:54:6e:15:1e:2a:26:a7:08:b3:a4:
                    da:fc:76:31:2c:85:01:39:0d:fb:13:bc:a5:e5:49:
                    1f:06:fe:67:7a:93:87:9a:4f:6c:3b:b0:e8:64:8a:
                    02:9d:92:68:61:c2:e5:ad:b8:dc:69:ea:23:ad:91:
                    06:e3:62:b6:7c:ff:cf:ac:a9:ee:a1:13:86:62:23:
                    f5:9f:eb:87:a3:a8:d2:6f:26:5f:75:60:f5:d4:a0:
                    bf:dc:ed:29:99:f5:7a:c9:9d:c2:32:40:7e:58:12:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7B:08:EC:86:E2:0E:5E:AF:71:EE:F7:DC:3D:14:07:7E:E1:65:16
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/869e5c68-564f-4aa0-a84a-56dac3c414a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:90c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:87:03:75:e2:23:19:0d:d2:0f:44:ab:18:d8:52:49:f3:65:
         02:9b:ef:68:e0:23:99:57:20:ba:ec:b9:bb:04:ad:6c:30:44:
         17:fb:92:de:5d:92:a6:62:13:02:a2:d0:f4:44:2a:8b:28:3b:
         04:42:55:b3:e2:0b:e2:ce:2c:1b:82:33:70:03:bf:5b:6b:f4:
         c1:6f:97:11:cf:ec:32:81:03:12:7e:3d:dd:c1:88:16:89:ef:
         fa:15:ab:6c:4e:38:6a:f2:11:63:27:bb:6c:3a:a3:fb:bd:74:
         84:d4:8a:80:c9:a4:80:ab:3c:b8:97:bc:10:a1:e0:58:11:66:
         4f:15:45:43:07:4a:e3:22:97:c2:d6:7e:69:d3:d0:a3:68:87:
         f8:ec:07:0b:8b:8e:f4:d9:cc:61:5e:13:ae:2c:84:4e:88:05:
         7a:1b:7e:62:0f:51:2a:d7:44:c0:67:9d:db:bd:63:9c:98:66:
         05:d3:b1:f5:e5:dd:b7:a4:0b:64:31:c1:61:8b:17:94:20:df:
         7b:b8:38:33:8d:a9:d9:59:6b:e1:1a:60:27:54:9a:85:ac:90:
         0c:a1:5f:e6:eb:73:4a:cd:37:ea:5d:a5:02:9f:36:30:f3:20:
         b4:3e:75:0f:e2:c5:95:74:48:64:fe:49:74:66:d9:67:42:7b:
         26:c2:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----