Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa
File:                     96f64204-fd73-4c1d-b9a9-36fef424cb34.roa (raw, json)
Hash identifier:          SCi33+l5/7DnKhJDIAk6IuotWapTgZivksQB4kgWUpU=
Subject key identifier:   00:F6:C9:77:5E:E5:9B:13:1A:B8:2C:A7:5B:6C:E3:0D:44:6B:29:5E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7FA7B25DD4B590CA43B0166E18478B4A02FE05CC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:40c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a7:b2:5d:d4:b5:90:ca:43:b0:16:6e:18:47:8b:4a:02:fe:05:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e4c7a2a3f9c170c4caea886345dbc278d812e15eeb57458d3053f6159761d287, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:a8:47:4d:a8:cb:6f:fc:c3:08:fe:8d:81:
                    55:83:22:ad:36:ee:58:6a:23:96:39:65:44:3c:f8:
                    7d:8e:90:15:8a:91:fd:72:aa:fc:f7:9a:10:4e:60:
                    0d:82:77:f5:d9:b3:20:1f:01:64:9e:ec:72:6a:2e:
                    f1:e3:42:8a:fd:4e:79:13:5e:5a:49:b8:7e:d0:96:
                    4c:e2:03:6b:f1:c4:53:bc:48:4e:a7:ba:5c:08:4c:
                    3a:d8:99:53:6a:65:2d:84:e2:09:2f:02:7c:e8:1c:
                    5a:71:90:f8:67:ba:2f:bb:14:43:a2:a5:f2:79:9e:
                    bf:12:f4:fb:52:9c:09:8b:a8:65:7d:6e:68:4b:35:
                    ae:ea:54:9e:46:35:a1:60:bd:83:7f:85:f0:32:e2:
                    99:20:be:36:6b:fd:cc:71:09:78:eb:5d:43:4b:1c:
                    75:b9:81:7a:8c:f6:e7:66:e0:d0:e3:b6:63:a3:18:
                    db:c1:aa:8a:dd:6d:ed:3d:01:9f:b9:ad:af:c8:fb:
                    f8:12:6b:31:2b:1f:f4:2a:78:d5:50:88:c0:14:59:
                    fa:a3:00:d7:89:5e:74:16:5f:98:d9:43:fb:a2:df:
                    ab:90:9e:18:1e:d2:37:71:12:c3:67:b5:ff:b0:ca:
                    ad:83:2c:1f:65:ec:de:1e:04:7e:d5:32:0b:6f:9a:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:C9:77:5E:E5:9B:13:1A:B8:2C:A7:5B:6C:E3:0D:44:6B:29:5E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/96f64204-fd73-4c1d-b9a9-36fef424cb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:40c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:3e:f0:9e:ee:02:52:0e:1f:53:5c:6f:f4:33:10:2e:3f:
         09:20:05:94:5d:1f:8e:72:38:e3:31:ae:4d:94:0a:9f:d7:a6:
         35:82:2e:ab:0f:93:f5:bb:17:c7:04:c1:5f:8d:7e:cf:a2:94:
         69:c6:bf:2b:9e:19:89:93:bf:66:04:80:c3:93:bb:70:78:ff:
         cd:dd:45:37:93:42:37:ea:76:1d:86:ef:db:32:0f:5d:45:06:
         39:dc:c1:c0:84:ce:3d:31:01:00:a9:db:dd:ae:99:bc:88:b8:
         09:d9:8f:fb:9f:32:13:c6:57:60:15:9d:ff:4c:6b:7b:89:80:
         86:4b:64:27:93:b6:03:65:28:89:d8:bc:04:77:1a:b5:77:2e:
         b3:ee:02:55:53:ec:7b:d0:66:4d:33:9e:fb:fc:08:ac:d9:a2:
         e8:24:90:56:76:9e:bd:f0:04:a8:7c:65:b5:bf:13:9e:74:09:
         f0:50:69:50:0e:5d:07:f8:23:08:18:aa:b9:a2:68:89:c5:0e:
         67:63:3f:ff:f8:8f:ad:0b:fa:ee:6e:fa:39:4f:57:db:13:00:
         39:9e:8d:0a:77:da:19:73:16:f0:d9:64:1d:68:de:bb:77:8c:
         d8:f7:38:08:13:e5:44:e4:fa:c5:4e:f3:f9:a8:3a:fc:8d:c4:
         8c:48:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----