Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa
File:                     996cc3b8-0df0-4f17-97f0-d59aa845427c.roa (raw, json)
Hash identifier:          OWCLjcyC6uUWPn/nbMcwaF9eupriEZXrir/SUW98f6g=
Subject key identifier:   BE:26:9D:E4:17:74:77:B6:2D:9C:B0:FC:FB:44:EC:FE:DA:A1:92:71
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       55877FBA461F041EBDDB0B424928562A26C986EB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa
Signing time:             Mon 20 Jan 2025 00:00:00 +0000
ROA not before:           Mon 20 Jan 2025 00:00:00 +0000
ROA not after:            Mon 24 Feb 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2406:da00:ff00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:87:7f:ba:46:1f:04:1e:bd:db:0b:42:49:28:56:2a:26:c9:86:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 20 00:00:00 2025 GMT
            Not After : Feb 24 23:59:59 2025 GMT
        Subject: serialNumber=ec4239bdd5a9a76ec5827be03a41614e6fe17aaa5a21964baaba4d1cddbc6252, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:b7:01:3d:cc:11:61:b7:07:7f:3d:9e:85:
                    5b:be:b4:17:a2:58:22:0a:74:64:70:1e:35:5b:05:
                    4b:f9:bc:5d:9f:08:77:1e:c7:f7:d1:e4:5c:32:3d:
                    16:ea:44:26:1a:e2:ae:5b:9b:a4:11:ec:69:b1:e9:
                    a7:f6:b3:97:01:47:c4:67:3e:fd:78:ae:5c:78:eb:
                    05:c6:cd:8a:46:5c:7f:cb:ba:92:37:a4:e6:be:3a:
                    15:d2:41:95:61:97:48:59:27:89:3e:f5:8d:0e:78:
                    df:40:be:2a:21:ad:0e:f5:bd:87:25:1b:18:1a:14:
                    c6:5a:fe:d5:e8:47:0a:eb:15:bb:bf:d2:54:d7:fc:
                    0b:2f:bb:dd:43:d8:2a:05:7d:fd:3c:0a:67:b3:38:
                    da:55:5e:4d:5c:c6:57:34:11:43:a0:30:ee:f7:ee:
                    97:2d:d7:2d:25:54:7f:83:6d:76:33:9e:07:ec:72:
                    85:7d:7b:66:03:9d:95:f3:3e:62:89:06:17:d0:d9:
                    c4:bb:fc:21:52:84:e2:84:85:9e:4f:0c:ca:a1:8d:
                    8a:77:37:69:52:4b:04:35:66:9d:8a:78:40:96:e1:
                    08:b2:70:27:fc:c2:2b:6b:6e:34:be:6a:dd:2a:03:
                    62:28:17:ed:88:ca:0e:5b:c3:b9:3c:88:7e:42:37:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:26:9D:E4:17:74:77:B6:2D:9C:B0:FC:FB:44:EC:FE:DA:A1:92:71
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/996cc3b8-0df0-4f17-97f0-d59aa845427c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:76:93:19:a9:35:e1:ff:ce:83:2d:14:cc:73:0f:2f:59:
         8a:5a:44:0f:ec:2b:59:16:7c:90:73:c6:f2:de:38:65:da:bb:
         32:ce:70:da:bb:c3:e6:79:72:62:c3:b2:e7:2f:1b:76:9a:e8:
         e6:de:bc:9e:1c:1d:2a:28:a4:d1:df:6e:02:c4:c7:69:57:a1:
         7c:03:e1:63:de:e8:84:64:79:6c:a8:c1:84:1f:19:d5:19:95:
         35:1b:12:be:69:21:a4:09:90:9f:bc:b0:a8:01:88:e0:9b:ef:
         9b:b0:a0:38:6c:a4:d1:f0:ce:91:ef:b3:e1:87:5c:5b:10:77:
         45:9b:9d:26:e0:1c:a9:de:fc:23:e6:f3:46:e3:84:36:23:cc:
         fd:7e:39:f4:5b:16:56:c2:e2:9b:4b:d1:e6:13:92:35:5f:5e:
         f2:2c:d1:1a:ca:af:53:2e:e9:7c:1f:83:88:f5:b4:54:2e:1e:
         a0:8b:99:c1:b5:d0:70:6f:81:27:6d:57:01:aa:b9:34:67:c1:
         43:87:c2:9c:48:24:67:34:1c:9f:5e:3a:2b:ed:a1:b5:01:c1:
         ab:a4:ed:89:6a:5d:dc:3b:8d:90:47:35:03:9f:50:db:81:73:
         6b:c5:ae:70:20:63:7c:ec:51:6d:e7:8c:de:38:65:12:8e:bf:
         c0:d6:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----