Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa
File:                     9a9d41bd-0bed-4bc0-8365-34453f074020.roa (raw, json)
Hash identifier:          A2jJw5y1Q6Y7m/Su3dQp2Vb2T7fqlIueZjwU8rHDdw4=
Subject key identifier:   1F:C7:DD:BE:AD:7F:28:06:38:7F:29:3F:F9:26:9A:C9:FD:28:5A:85
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       47C2F0C794AE799104CB781471E1B7FBE7F279BE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafe:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c2:f0:c7:94:ae:79:91:04:cb:78:14:71:e1:b7:fb:e7:f2:79:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=4cb347484863fea6c1d228ad9121b384f1d81cb632d041c22b7884c1126b853c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:c8:ec:2a:97:e7:b7:99:19:85:27:a1:69:
                    30:64:ae:66:b8:6e:59:76:f5:92:cf:7a:39:51:25:
                    fc:1d:3a:3b:f9:f5:f4:42:20:8d:71:26:50:1f:89:
                    85:01:d8:48:db:7a:bb:37:44:92:c0:ac:22:3f:9f:
                    0d:9b:59:d3:f0:75:bc:dd:28:f6:02:f9:83:60:8f:
                    4d:d7:fa:3a:b2:c0:09:bc:34:a6:fd:05:33:da:d6:
                    27:64:2c:9e:94:9b:d0:79:ac:56:3e:dc:de:47:c3:
                    d7:a5:c2:51:7d:19:fa:8e:0c:32:74:f2:86:36:a9:
                    d2:49:ba:0c:fa:bf:42:d2:e5:3f:bb:97:43:d3:54:
                    ae:2c:9f:72:6d:ba:c1:9d:ff:08:7f:36:10:48:e4:
                    f9:ee:5e:dd:b8:13:92:d1:c1:cc:9b:5b:98:d2:8e:
                    1a:6e:d3:44:2e:cf:b5:6f:6d:16:45:0b:dc:f2:64:
                    36:8c:ef:04:2d:46:31:25:0b:33:76:c7:17:84:5c:
                    c0:c1:5a:78:89:c9:92:fb:8e:89:31:75:33:ee:35:
                    90:08:a3:df:3a:81:79:7a:81:91:31:8a:a6:70:41:
                    71:d4:56:37:2e:fb:55:e4:8c:ae:27:e3:d2:f2:d9:
                    71:de:22:6a:90:fd:09:59:e1:63:49:9b:86:69:a0:
                    a0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C7:DD:BE:AD:7F:28:06:38:7F:29:3F:F9:26:9A:C9:FD:28:5A:85
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9a9d41bd-0bed-4bc0-8365-34453f074020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafe:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:57:10:3f:3f:80:48:01:30:74:d7:b6:07:98:27:10:90:
         07:72:1e:32:56:6f:4a:12:49:cc:c1:5b:c1:98:45:93:0b:cf:
         d1:29:1f:3a:38:7c:3b:86:dc:7c:65:d3:0c:20:7c:71:27:de:
         79:5a:8b:02:74:88:ba:72:2e:26:fa:18:1b:76:11:69:6b:e3:
         69:d6:8a:9e:74:05:0c:da:c3:08:42:71:b1:31:07:36:df:80:
         0e:41:e2:ea:49:a0:a8:d6:db:b6:2a:6a:88:e9:74:51:4b:ef:
         8c:ba:d5:e9:27:de:d4:16:85:d8:9d:db:a5:11:35:e6:42:2e:
         1a:40:c0:ad:5e:22:b4:c6:1a:dd:9c:f9:71:e7:ed:18:25:8a:
         4c:0c:8c:dd:67:03:25:f3:15:83:75:c5:24:a8:e4:65:fd:37:
         af:5d:b7:d5:a4:bd:23:4d:f4:4e:b4:df:d0:6e:13:ec:09:5d:
         e2:f6:2e:62:1a:30:dc:4d:bb:ea:24:d1:87:0d:e4:4a:d3:16:
         bf:bb:49:b1:04:bc:6c:10:65:e0:6c:d7:4d:ad:1d:a8:cc:ec:
         a5:fa:28:ed:d5:dd:b2:0e:a6:1b:c5:59:e3:09:c7:55:bc:aa:
         1e:c4:08:1e:91:22:5b:04:24:77:6e:bd:69:19:b7:c0:56:33:
         df:1a:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----