Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87bdbd43-8748-4d90-9b3d-91c88f2d844d.roa
File:                     87bdbd43-8748-4d90-9b3d-91c88f2d844d.roa (raw, json)
Hash identifier:          c0b0/RpORhiw6J3IDzXFdhXkBhgYORGouDPAvxkd3QQ=
Subject key identifier:   5C:12:4E:17:73:6D:87:BC:6E:C1:B4:D5:AC:A9:49:09:C6:A0:35:CF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       48EF268846109371B8603BEBE6629B5210CDFD30
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87bdbd43-8748-4d90-9b3d-91c88f2d844d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:20c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ef:26:88:46:10:93:71:b8:60:3b:eb:e6:62:9b:52:10:cd:fd:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a3e4327310b3b604cb43dba925814ba53096347cafe3c6486b1c9dc9f44ebc81, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:83:ad:d8:0d:e2:26:bd:50:7f:93:2a:e3:
                    84:ec:a0:08:9a:2c:aa:54:e4:ca:bd:7f:dd:31:ef:
                    92:7e:17:8e:33:a8:12:3d:97:69:42:bb:9b:eb:f8:
                    74:33:30:80:0b:27:c2:fc:e2:17:cb:5a:a0:cf:a1:
                    72:2c:db:23:e1:8a:31:33:32:4c:c6:e2:0b:04:27:
                    2d:5b:93:19:ee:95:26:b0:d4:2b:c4:21:9f:b0:74:
                    06:71:26:68:f5:19:0a:36:00:5e:db:ec:10:6e:46:
                    9c:e0:92:74:4d:18:50:9b:ea:ed:05:fa:cc:5b:17:
                    97:66:56:07:fb:35:59:20:1c:87:56:8f:68:d6:64:
                    7e:de:11:a5:e1:cb:ed:8f:f5:98:85:05:28:ce:64:
                    51:e1:34:4b:91:ac:92:30:96:71:84:ba:09:74:a4:
                    c5:8a:7e:60:db:a3:65:53:6d:a4:02:c6:2e:65:fe:
                    aa:21:40:fe:44:81:da:81:f4:cb:a2:d0:23:43:c1:
                    7a:df:c7:ac:dc:65:b8:64:e1:2e:45:25:1b:7b:ce:
                    c9:29:0d:df:43:34:89:7c:60:37:7f:e5:ab:e8:76:
                    a8:f7:31:35:ac:b0:1d:8c:52:64:ae:e1:83:c7:6f:
                    e1:be:ac:8a:f0:39:09:05:f9:bd:1a:f8:df:ae:30:
                    ab:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:12:4E:17:73:6D:87:BC:6E:C1:B4:D5:AC:A9:49:09:C6:A0:35:CF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87bdbd43-8748-4d90-9b3d-91c88f2d844d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:eb:10:35:c4:42:43:ad:d0:90:88:89:2f:d7:b8:a9:3c:
         75:6b:06:08:36:7e:82:cf:39:9f:72:94:84:64:41:04:0a:3c:
         2c:12:97:23:d4:c7:73:98:13:a5:12:46:a4:2e:ab:2b:a7:e0:
         9b:38:2f:0d:c9:b1:bb:96:8e:34:f8:0b:15:44:a3:9a:a0:c3:
         a1:fb:24:3d:a3:75:48:53:15:a1:d8:a6:b1:dd:cb:aa:68:93:
         4e:e8:e8:66:dc:31:3f:4c:d5:49:7c:d1:f9:53:f1:53:e0:4b:
         33:bd:d7:cc:57:6a:29:f5:d7:31:07:e7:10:6d:f4:48:93:1a:
         d3:28:41:9f:d6:68:2b:c3:ef:59:b1:21:f4:f6:2e:d9:d5:4a:
         c0:af:89:fa:97:69:ef:7a:cd:73:47:08:b0:0e:ca:bf:da:2d:
         c9:96:8a:93:60:27:6e:18:49:9a:6e:51:47:a4:52:4b:a2:09:
         14:16:6e:aa:fb:58:bc:12:07:ea:aa:f4:19:3c:8e:81:f0:05:
         36:44:53:7c:f8:30:1c:8e:99:d2:2d:b8:d4:bc:0a:6a:b3:17:
         56:23:c1:99:1c:5f:ad:32:e6:d6:c3:3f:64:52:b3:58:83:2b:
         1b:bd:6e:d9:8c:5c:6d:a8:a2:11:85:a8:58:cf:6a:d5:5c:87:
         18:ca:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----