Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa
File:                     8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa (raw, json)
Hash identifier:          1Vpa63WD09usA44PNeH3k7u4kS0p4qBkWthBLJsk33E=
Subject key identifier:   B8:64:83:89:34:A8:EA:2F:2D:09:24:20:8E:5D:BD:B0:01:D1:89:54
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       27F629E212EDC690705F4C0E6C21C0AAA2FB9D70
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:b0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f6:29:e2:12:ed:c6:90:70:5f:4c:0e:6c:21:c0:aa:a2:fb:9d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b1059facc226c1ed51e4427f59107c0921caf9e5738d160a5ec4ed1fd7f57838, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:fc:af:4d:5d:4f:dc:ce:f4:07:da:3a:9c:
                    aa:f7:1e:37:e6:a5:4e:4e:53:35:c0:e5:1e:1b:93:
                    c3:e6:93:5f:70:ad:47:74:af:84:76:39:b4:f5:0c:
                    33:e0:73:a3:64:b9:5e:24:ed:de:fd:1a:5b:0f:ed:
                    94:3a:70:67:ae:ee:e8:bc:19:09:de:d1:56:aa:69:
                    fe:df:8a:fa:37:20:9a:f4:d1:f5:67:fc:93:ed:78:
                    f4:0e:a4:cc:74:e9:ff:4b:f9:42:90:60:82:dd:c4:
                    a2:89:30:24:1e:c5:e5:f7:fc:4d:8e:f2:98:6a:7e:
                    3a:17:9d:49:70:8a:60:42:eb:75:d6:cb:7c:80:64:
                    27:e7:41:a7:48:f8:a0:de:ff:7d:39:8c:e8:c5:9e:
                    9e:5b:77:a3:8f:64:12:31:35:51:df:89:25:9a:62:
                    79:c0:fd:50:00:7d:a6:d7:a4:ae:c0:50:c4:b6:10:
                    0c:b3:9b:dd:5a:ad:68:ec:6f:18:23:02:85:12:44:
                    cd:c3:9d:05:f3:f4:09:73:84:80:13:a9:a1:84:65:
                    23:b2:64:12:b9:bb:6c:d1:d3:61:cc:68:18:8f:5f:
                    f6:a0:66:d8:e5:d2:56:01:b2:5c:c6:58:59:15:06:
                    58:8a:49:5e:35:f0:0f:44:d4:d9:c7:d3:dd:4f:7c:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:64:83:89:34:A8:EA:2F:2D:09:24:20:8E:5D:BD:B0:01:D1:89:54
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8bcecca4-2643-4406-bbf4-e5e9f63786ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:b0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:27:40:90:17:e3:e8:9b:c7:0f:50:85:e4:3b:1b:17:23:
         f6:6c:99:05:94:18:b7:20:2a:55:59:bc:0b:ec:89:29:b9:65:
         17:cd:93:b7:06:46:ee:40:8a:52:44:5a:c9:70:f1:1d:b8:6c:
         2a:ce:ad:61:6a:d5:77:cc:9f:db:5c:68:21:ff:86:57:cc:96:
         b1:93:1e:5d:81:14:82:96:ed:f5:41:78:94:8f:7a:78:ac:5e:
         a7:00:06:b0:f7:55:03:5b:1b:13:bd:05:08:eb:b4:bd:4a:51:
         e3:ca:d4:ad:b5:03:75:89:86:e8:e6:61:ce:5d:91:72:12:6d:
         62:b9:22:38:4e:f9:c2:b7:d5:d0:84:7c:9a:7b:29:4c:e3:dc:
         60:7b:9f:4e:44:7e:63:97:b6:3c:38:18:1a:2b:60:72:a5:22:
         c3:d7:ff:31:1e:38:f9:6d:66:26:8e:22:f1:bf:23:27:14:6b:
         2a:81:65:8d:aa:de:31:6e:69:af:bd:bf:98:d1:2a:f8:62:3f:
         47:7f:94:02:19:a5:fb:42:46:b6:9f:26:64:b7:cb:94:99:4c:
         53:6f:c8:52:3a:f7:59:d6:2c:ab:f9:31:b3:40:5d:be:15:04:
         cf:bd:35:c4:3e:b4:61:47:e3:42:a6:8c:63:b4:d5:19:f1:70:
         b4:5b:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----