Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa
File:                     89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa (raw, json)
Hash identifier:          t14cdwtWHb2n15ZU2exzJDyPbQxs8QEo0+RVa0wF1TI=
Subject key identifier:   11:C4:71:A4:D0:D5:F4:3D:8A:33:A9:FE:A0:4D:51:C9:42:57:BF:9B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       732838B4BB9F915DE8F82B68EE2E98F766D3D800
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:2020::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:28:38:b4:bb:9f:91:5d:e8:f8:2b:68:ee:2e:98:f7:66:d3:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=32af0adbae6a82c0157bc05deaf3e02b8bf57f356c90d5e403fbf84246aa4d89, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:8e:de:e7:58:e0:f5:33:7d:74:a0:d5:24:
                    ea:97:96:cb:e9:a5:26:24:8c:38:ce:dd:1b:4a:99:
                    6b:b0:8d:1e:d4:c2:b1:78:78:30:89:63:ed:10:c4:
                    18:6e:d8:b3:db:67:8f:ab:c6:62:3d:fb:8f:66:51:
                    0f:be:0e:28:97:a3:96:ed:58:22:d7:3a:6d:57:7b:
                    69:e3:6f:fd:56:3f:e0:a2:b5:cf:2a:c7:a5:a3:af:
                    a1:d1:b5:54:3c:bb:eb:94:6c:7e:f9:bb:7c:79:41:
                    30:84:e4:61:c3:21:11:9f:5b:44:63:86:f8:1e:44:
                    b7:9c:9e:21:f0:a8:07:d1:e8:4c:9e:d4:2c:a5:12:
                    2f:11:16:cc:7c:5a:f4:57:13:e2:ec:33:94:fc:c2:
                    94:a2:58:50:c9:da:8b:59:61:81:0f:ed:cc:9b:94:
                    ad:cc:26:b0:43:25:78:6e:17:ce:40:88:fa:39:59:
                    a1:44:36:6e:2c:03:0e:e5:b3:1a:0f:ac:18:ef:8e:
                    1e:24:a6:8a:ab:0d:42:a6:a7:67:00:ab:13:fe:0e:
                    e5:63:ab:54:dc:12:7e:38:e2:1f:58:14:3b:78:28:
                    a3:75:ee:5d:e9:b0:cd:3e:53:38:2d:77:93:98:76:
                    8d:4c:c2:97:58:a6:ba:88:0e:55:93:59:57:21:46:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:71:A4:D0:D5:F4:3D:8A:33:A9:FE:A0:4D:51:C9:42:57:BF:9B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fbb5c5-0ff9-4548-bb50-6e421ec6e274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:2020::/46

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:84:0f:81:89:9e:e3:26:f5:e4:b9:8c:aa:b4:bd:da:63:
         6b:6b:1b:de:86:9f:09:9e:e6:81:97:f5:57:af:1c:48:c7:a8:
         93:58:37:cd:e6:a9:26:8f:31:fc:2d:3c:74:86:aa:d4:4c:72:
         e4:29:dd:cf:98:57:7a:ae:4a:d0:18:e2:d9:39:38:51:c0:30:
         e0:fb:95:da:21:c4:81:44:6c:68:d9:e0:41:f4:08:08:0b:62:
         da:f3:d0:53:c9:52:1e:14:92:53:d2:13:7e:36:a6:cc:55:fc:
         2b:44:f8:c0:89:9d:3e:07:f6:52:04:85:72:a1:11:18:7e:de:
         46:ce:c3:40:5d:cb:f6:fa:ce:3a:cd:23:58:6a:ca:59:6a:ca:
         c9:bc:d4:8d:a1:44:1d:00:f7:fe:a6:6e:1d:b1:ad:b5:d5:6e:
         8d:61:d1:0f:a0:9f:66:8b:a1:1c:43:c0:63:8b:3e:30:67:45:
         cf:6f:f7:46:49:35:6d:84:7b:15:eb:6c:1f:51:54:b0:26:f1:
         1a:4b:ae:16:84:90:17:f6:a9:b5:de:a5:35:af:5f:a6:68:e8:
         6e:1e:5f:b2:00:cb:fd:31:ed:9e:ed:76:7c:48:51:d2:a3:57:
         5d:47:66:b2:9f:4e:ff:1b:ae:95:06:4a:03:fd:bd:e0:42:c1:
         3e:d8:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----