Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/900849b2-e985-4a94-a1d4-e0d84fd27309.roa
File:                     900849b2-e985-4a94-a1d4-e0d84fd27309.roa (raw, json)
Hash identifier:          xrkzB8TeEK+LWuU2aH+UHYPw3srkxYnKbmT1/CBc8Dw=
Subject key identifier:   8B:1A:27:60:C6:03:B6:F1:21:34:2C:5E:90:A2:7D:9E:71:A6:39:0A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       40464842E5DFB734FFAD2F30E1977CD31F224E8D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/900849b2-e985-4a94-a1d4-e0d84fd27309.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:f0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:48:42:e5:df:b7:34:ff:ad:2f:30:e1:97:7c:d3:1f:22:4e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=60023ddefa0c4f86b1dab04f735ab03c9b34dd62d57d17c76a1b4a8cc7d2aaa4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:a3:71:c4:10:b7:47:e5:c3:45:e8:51:6a:
                    32:86:91:aa:e5:a2:93:41:c6:2d:7d:e6:fe:30:a1:
                    81:dc:7a:7b:aa:de:2e:2d:16:c3:e6:f4:f2:9a:23:
                    cc:09:03:1c:89:78:8e:9b:fd:d6:9d:10:3d:46:a4:
                    44:a7:42:fb:f4:bd:2a:f6:ef:ad:a1:94:39:2e:0b:
                    69:02:2c:44:8c:15:56:ad:40:2a:14:25:d2:0a:8c:
                    52:db:9a:9b:12:72:d4:0e:0d:97:60:e1:0e:19:e3:
                    cb:77:ef:81:00:29:b6:5d:11:dd:1e:8e:9d:6a:e3:
                    00:41:e7:93:09:bb:73:28:4f:2d:a3:81:7d:d8:02:
                    59:65:8f:e4:04:cb:58:0f:d1:dc:63:27:84:9d:9f:
                    86:3c:bf:15:0e:54:ee:43:47:f0:4f:04:24:aa:5c:
                    e6:a4:6d:5d:c8:1a:dd:c0:ff:5a:ee:05:28:b5:33:
                    05:5b:b5:a4:e5:22:4e:2e:29:e2:05:cc:f2:b3:ee:
                    75:0b:c1:08:53:d9:57:af:d7:25:b7:01:4e:f0:69:
                    ff:4f:57:93:29:61:8b:fa:f9:ce:84:07:5f:f0:e7:
                    87:f3:bf:d4:35:02:fa:6b:13:12:5b:38:39:33:77:
                    69:03:62:d8:a6:ca:97:7b:22:60:1a:56:35:27:ef:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1A:27:60:C6:03:B6:F1:21:34:2C:5E:90:A2:7D:9E:71:A6:39:0A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/900849b2-e985-4a94-a1d4-e0d84fd27309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:9b:eb:d6:0b:f0:cb:e6:98:30:bd:5b:0f:21:88:03:33:bc:
         eb:52:aa:05:a3:8e:ff:d0:bc:63:94:97:df:fd:39:9a:5c:fe:
         c8:fe:8b:50:a7:f3:ee:05:91:cf:14:d3:22:90:d4:63:d3:c2:
         75:6e:41:4c:98:e3:10:57:42:fd:e7:4f:75:ed:ad:4d:ef:ca:
         52:58:9e:92:8c:86:ff:4d:fe:39:00:48:43:97:70:8b:cd:b0:
         48:af:1a:6f:7c:85:f4:39:be:99:99:6b:8f:f5:1a:a2:cb:03:
         85:67:93:eb:f9:17:9e:65:14:fc:b7:63:0d:ab:c9:8d:76:2d:
         0e:4d:fc:f6:e4:ae:c1:78:26:97:32:a5:fe:33:ee:33:79:0d:
         81:09:97:5a:94:0b:97:b5:2d:30:41:ec:01:9f:47:86:d9:6a:
         bd:47:8b:90:9e:63:64:b4:50:05:51:c3:75:ec:28:ac:48:7d:
         ae:8f:6c:42:73:06:87:d0:5a:4e:60:74:39:0f:a2:6d:b1:4b:
         91:2d:44:8f:a9:db:3f:dd:a0:34:b1:b6:07:34:78:0a:ca:b4:
         56:14:d1:ff:09:4c:dd:1d:09:c9:e1:e5:43:dc:62:6b:73:7e:
         6b:71:e0:e5:7c:3b:bf:52:97:1b:ce:e1:64:32:ce:e3:48:dd:
         a4:6a:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----