Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dc2b12a-dab5-4513-a1bb-13799882ce38.roa
File:                     8dc2b12a-dab5-4513-a1bb-13799882ce38.roa (raw, json)
Hash identifier:          ZQIxesEjo+4PY0WMXzerF9/BoZUe/VeEsY5xqWa/2L8=
Subject key identifier:   57:AA:0C:13:0B:5F:B9:60:F8:8B:71:63:D0:EA:E9:4F:40:C0:54:3B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       478F1DC252A3E7B4F891DC611460C5BABE10B81C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dc2b12a-dab5-4513-a1bb-13799882ce38.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:8040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8f:1d:c2:52:a3:e7:b4:f8:91:dc:61:14:60:c5:ba:be:10:b8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9449916aba9b4b2d14ed1b4628161b52cdaa243f81f6437d12c65dcd527f2875, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:82:02:6f:6e:84:63:90:98:35:d9:e9:77:b0:
                    55:77:f6:f6:0b:1f:b1:7b:e9:0e:31:70:f9:1f:7b:
                    44:3d:52:a8:a4:a6:33:a0:c8:34:6d:1b:6b:05:c9:
                    f6:e8:2f:d6:35:e1:ac:78:5b:b2:c1:65:24:24:f8:
                    44:b6:d5:1a:c4:c9:73:f2:f7:07:eb:35:ad:45:c7:
                    6d:d7:e4:a4:ed:1e:25:df:da:75:5f:11:ba:83:fe:
                    a5:86:2e:c2:87:fe:58:39:76:ad:2c:6a:cc:52:ca:
                    73:96:1c:51:93:29:17:57:75:65:0f:93:bf:7e:51:
                    fb:03:6e:bd:3c:0e:85:1e:66:c3:9d:57:e8:26:24:
                    e9:32:4d:1d:65:29:e5:e6:40:22:b1:9b:c9:88:7c:
                    7e:ed:d4:ac:31:3a:ce:f6:d0:cd:be:ad:73:26:00:
                    ae:49:5e:64:a9:45:5f:2c:ef:90:4d:ff:e8:07:f0:
                    ae:1d:d7:3d:7b:4c:3c:b2:37:72:8e:a5:0c:03:3c:
                    5d:1d:fe:de:46:5e:28:20:f9:b5:4d:3c:b5:9b:c6:
                    6c:b4:c6:75:79:11:fc:19:c5:dc:b8:b6:22:2e:4f:
                    4f:c0:b1:54:26:dc:7f:58:a6:40:67:bc:aa:20:de:
                    8d:22:70:df:8b:6c:78:d6:99:8e:0e:35:a7:ce:4d:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AA:0C:13:0B:5F:B9:60:F8:8B:71:63:D0:EA:E9:4F:40:C0:54:3B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8dc2b12a-dab5-4513-a1bb-13799882ce38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:8040::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:45:89:cc:76:cd:ce:8f:22:2c:8e:8d:06:25:90:f6:e5:27:
         38:fb:02:57:7b:62:46:de:83:1e:1b:04:f0:41:aa:44:6c:e8:
         2d:25:1d:24:c6:ca:29:1b:7b:c3:b8:a1:f8:52:6c:50:d3:82:
         74:08:6d:dc:87:86:b0:f9:52:04:1b:a4:b5:c5:dd:42:5c:45:
         67:1d:a2:8c:2b:43:22:c4:eb:3b:26:45:3a:7d:f6:2b:64:1f:
         86:1c:b5:9e:cf:4a:8a:02:52:ab:4e:61:08:fe:50:df:ef:92:
         62:60:2f:d5:59:26:69:fa:53:28:ed:87:60:d9:97:31:ba:b1:
         d6:46:95:8d:8a:3e:20:f2:05:49:70:c5:88:65:8e:2d:51:0b:
         66:85:78:03:d7:ff:31:42:56:04:0e:d6:28:0f:5e:54:7f:3d:
         ce:d9:21:e1:36:83:2d:37:84:ba:48:85:74:ed:5d:ba:ba:9b:
         92:ac:77:20:1b:2d:ce:1d:37:ee:e5:ca:0c:ba:9c:98:20:ba:
         77:b1:2e:35:ec:c6:63:86:f5:de:5d:33:f3:53:6a:14:3f:d7:
         10:a8:00:56:65:2f:ad:d0:1e:8f:78:08:5b:a1:d2:91:36:69:
         5b:c3:1b:a2:10:5d:ff:46:4e:90:97:c7:c8:a8:60:dc:e6:24:
         76:47:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----