Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa
File:                     9890d9ef-a083-463c-9928-98be77ac9ced.roa (raw, json)
Hash identifier:          krTkL+SbGfidVvuUp5oEfPuSA/F4/6R+IvwcJf9vARg=
Subject key identifier:   A2:28:AD:CC:32:E4:C7:35:5D:9E:26:6A:8C:66:20:6A:46:6B:AB:EA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2F884ECFD926A68630DD2948168B87726FD53D69
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:4090::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:4e:cf:d9:26:a6:86:30:dd:29:48:16:8b:87:72:6f:d5:3d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=0d9b0ea0450f97b2b67edcf1328b07644e5024a947ca09d88b08992b0029b497, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:bc:ec:39:73:c6:2a:a4:72:c1:ed:9c:a1:
                    6b:06:52:23:45:7d:c7:d0:d7:6f:d9:2e:c6:df:39:
                    e7:a3:c3:4c:8f:80:d7:79:eb:74:c7:1d:40:50:39:
                    66:c6:2a:31:a2:9d:60:dd:b6:ac:a8:8c:e6:72:73:
                    0d:a7:d5:69:c4:c0:fe:60:95:61:3f:bb:04:b2:fe:
                    76:36:16:a1:5a:e6:76:1a:1c:d6:66:1a:4a:42:f7:
                    b3:63:75:0f:04:69:a2:e9:aa:8a:0a:cb:99:92:84:
                    05:40:ba:25:57:6e:09:91:b6:0f:bb:96:e4:ef:8b:
                    4c:1d:1e:2d:65:6d:ea:fc:54:63:3b:8c:7b:ea:eb:
                    c8:22:87:e9:3e:29:a6:72:1f:a5:10:c8:f1:19:6b:
                    2f:b9:1a:59:a1:f9:7f:d1:cf:82:92:7a:db:c8:ee:
                    6b:37:54:f1:bf:d6:12:77:a3:95:b1:45:f7:89:a7:
                    3d:8e:a9:bb:32:9c:9a:84:64:43:f4:8f:d5:1d:e2:
                    3f:12:d0:a5:d9:44:0f:49:6d:f5:16:02:d7:6a:c2:
                    bf:8e:28:41:bd:43:a3:9c:b6:29:7d:bd:44:c4:15:
                    76:40:94:ce:e7:06:33:0c:1f:90:77:11:3a:8e:a7:
                    01:59:ac:5d:81:48:96:92:ca:61:37:9c:9f:6a:75:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:28:AD:CC:32:E4:C7:35:5D:9E:26:6A:8C:66:20:6A:46:6B:AB:EA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9890d9ef-a083-463c-9928-98be77ac9ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:4090::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:8d:24:29:10:a4:e7:6b:36:59:5b:63:7c:fa:04:9f:61:c7:
         14:bd:2b:41:3f:d5:63:09:01:e0:99:ea:83:c5:52:88:c1:bf:
         1f:9f:05:ab:58:eb:6b:0a:35:ca:61:19:f2:31:45:65:ae:88:
         bb:0b:bc:5a:6f:d3:4e:1a:4d:a4:dd:90:75:24:b6:6b:e8:8a:
         57:5f:85:0e:07:75:9f:1d:5d:01:13:3b:32:b0:9e:c6:fc:bc:
         2c:47:04:55:e8:17:2b:38:e7:e8:14:1b:6d:1c:af:f7:4d:5e:
         bd:07:f9:37:c9:39:c0:23:78:72:0f:8a:25:41:8a:3f:6a:2f:
         15:f0:de:3f:92:7a:9f:42:de:63:10:8e:3a:d4:c0:4a:49:e5:
         1f:f7:19:12:dd:89:42:53:cd:e5:26:6e:2a:28:ad:13:d2:ba:
         48:73:cd:64:cb:28:c5:7d:48:b4:20:6e:76:52:33:df:ca:e8:
         e5:55:4c:8d:be:8d:0f:28:74:b9:9e:4e:2e:43:92:87:16:be:
         64:e7:3b:a0:1f:09:2f:b4:b0:b6:79:da:83:5f:0f:49:34:4f:
         e7:e5:a9:94:93:bd:87:93:ca:dc:a2:74:21:7c:1c:c8:93:93:
         dd:dc:7a:cb:e4:7a:eb:ec:6d:c6:38:fb:ac:0c:71:31:9a:73:
         e1:b3:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----