Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f6f25d8-bda7-4c31-a0ed-ee24700adf3a.roa
File:                     8f6f25d8-bda7-4c31-a0ed-ee24700adf3a.roa (raw, json)
Hash identifier:          86zdiEyagb2MrgOn2KE67HYDtphLmDZyeinMxGazv8w=
Subject key identifier:   0A:1A:93:8C:8A:BC:50:16:80:49:E3:91:AD:12:51:4F:CF:77:23:8A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       787FD5E98EFC24685B8EADA8692FFF6D58F394FF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f6f25d8-bda7-4c31-a0ed-ee24700adf3a.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:2880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7f:d5:e9:8e:fc:24:68:5b:8e:ad:a8:69:2f:ff:6d:58:f3:94:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f8947a4dda0b29a940653152ef6e336949360872a9915cf0d5838bce860b25e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:be:83:7c:5e:88:15:c5:bf:2e:79:3e:06:ca:
                    40:18:2b:a6:29:f9:22:da:1a:ca:dd:16:cb:f2:97:
                    f3:bb:6d:8a:69:c1:50:ad:8c:76:ca:d5:1a:e5:db:
                    45:87:b9:97:1d:c1:41:e1:b2:a4:2c:10:b6:a1:0d:
                    14:11:8d:d9:df:3f:6e:9f:b8:ea:64:29:b4:fb:60:
                    73:6c:fb:ff:97:69:c9:0c:fd:68:32:ce:16:0e:60:
                    b0:b4:f0:20:53:3d:26:44:ff:20:ec:86:7b:f2:d1:
                    4d:07:d8:b9:92:73:06:77:ff:6e:fa:dd:9e:79:e0:
                    bf:7c:0f:ab:4b:78:80:8c:2d:35:e8:fc:e9:c7:a6:
                    e3:46:3e:64:2b:ed:f8:02:7d:5a:17:09:7d:78:be:
                    66:a8:f5:dd:50:ea:78:7a:ac:78:d8:85:c3:45:c3:
                    a6:e0:2b:6c:41:15:87:d5:99:ac:8a:8a:57:67:8b:
                    30:b5:80:59:2e:6a:b1:06:dc:5c:e5:b7:74:4c:16:
                    29:ad:8b:e8:33:0a:b3:73:b2:7f:b8:4c:d7:c6:63:
                    b9:97:46:00:91:7c:60:b2:4c:ad:ce:40:f7:83:18:
                    c2:89:69:b2:19:b3:28:25:58:19:74:34:e9:ee:c9:
                    80:09:61:30:df:cb:5f:92:3b:37:f8:36:e2:b4:b9:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:93:8C:8A:BC:50:16:80:49:E3:91:AD:12:51:4F:CF:77:23:8A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8f6f25d8-bda7-4c31-a0ed-ee24700adf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:2880::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:15:19:17:f7:a9:20:39:27:61:4a:c8:27:7c:e5:13:13:
         c4:e2:2e:bb:48:b1:0e:ad:21:54:33:2a:a8:5a:72:df:e0:e0:
         7c:d2:00:1a:33:16:4c:9f:d6:40:28:cf:9e:0c:93:63:34:3d:
         ce:ae:1a:d4:23:3b:97:3c:2e:a7:f4:51:41:1c:5c:7b:1f:19:
         cd:a4:55:34:73:76:b0:85:7d:b2:d3:ab:42:45:f2:85:31:d2:
         0d:f7:1a:1e:57:89:91:0a:ee:f5:45:bd:5b:5e:ae:ee:7c:6f:
         ec:31:b5:a9:1f:a7:2e:ca:e6:d6:7c:08:32:23:05:9e:14:61:
         ef:08:c7:e4:fe:5a:99:82:d1:d4:c1:3b:59:8a:a1:3c:4a:8a:
         c4:bf:04:4b:31:b3:d2:d2:49:0b:b1:6b:f7:ad:31:a5:cc:f6:
         7f:bc:f2:b1:95:29:f9:fc:08:a1:c1:c6:aa:c7:fe:b8:ce:3d:
         ea:fa:4a:17:3a:04:92:97:68:ea:46:40:9e:7a:c1:ba:14:fa:
         97:46:0f:f5:13:51:de:5a:6c:e8:d1:fe:11:c2:dc:32:74:74:
         b4:59:24:51:45:c1:9a:69:1f:77:2a:21:f9:f7:0d:24:6b:3a:
         a7:25:b9:aa:bc:c1:2b:6c:0f:10:d2:75:7e:f0:b8:d7:90:8a:
         be:a2:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----