Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa
File:                     9db113c6-a130-49bc-9492-bbe8536f2e52.roa (raw, json)
Hash identifier:          u0IROvwtERFfXkPWks5riMjOY5W1B3I2LPDQGSbiruk=
Subject key identifier:   09:14:A7:63:7B:14:79:D3:51:D9:FB:E1:2B:0B:B2:E1:09:DD:0E:67
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       49B87F2F9E639D65E5EA7459A0B0BF6E860EE334
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafe:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b8:7f:2f:9e:63:9d:65:e5:ea:74:59:a0:b0:bf:6e:86:0e:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=509a90ebf4ccdd52b4f0bbe92aff8ebc91636b50907c14138abd47480296c863, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:29:73:bb:cb:6a:94:b0:77:72:ee:e9:3f:
                    6d:68:1c:3a:09:a7:0d:55:1c:05:77:e8:6c:b2:fe:
                    76:78:4e:34:a3:72:b5:fa:f3:0a:d7:c6:21:4e:9d:
                    5d:23:3f:c3:79:31:43:07:7c:43:04:0b:91:4c:0d:
                    a6:1e:c0:47:0b:17:c9:55:96:8d:1e:c8:b1:42:2b:
                    ec:5a:4f:df:d5:03:f5:72:04:a3:2e:a7:01:52:9e:
                    99:3b:34:96:aa:f1:22:4b:4c:e9:9e:ae:78:05:f8:
                    58:f5:1d:b5:3e:b1:40:7c:72:79:49:51:73:dc:ee:
                    e4:96:b1:8f:e0:0a:47:f6:11:66:fd:b6:30:49:54:
                    42:8c:2d:f4:d4:df:19:f8:e4:30:10:fa:7c:34:8f:
                    1e:6c:c8:59:5e:b1:47:f0:c6:8c:2a:97:30:cd:6c:
                    9e:bc:23:06:ed:68:6e:71:2f:60:21:75:52:01:c7:
                    22:fd:37:89:65:28:65:b9:9c:a4:a8:8a:40:bf:cc:
                    b3:fc:bb:2c:88:a2:51:d2:44:8f:26:29:2a:4b:e7:
                    f2:a4:7f:57:ab:ce:e4:cf:13:8e:54:85:b6:ac:9b:
                    79:cb:67:73:f5:1e:a2:22:c8:a9:ca:bb:5d:93:23:
                    aa:4b:ed:c0:58:15:29:b1:89:6d:95:2a:47:4a:42:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:14:A7:63:7B:14:79:D3:51:D9:FB:E1:2B:0B:B2:E1:09:DD:0E:67
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9db113c6-a130-49bc-9492-bbe8536f2e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafe:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:ec:e2:de:a0:18:4d:0d:55:6e:19:8d:8e:73:73:a6:57:
         ed:23:d1:4d:f1:14:0f:31:b2:6e:a7:93:a8:f4:f1:a5:7e:df:
         b3:d8:2a:7d:81:cc:be:20:a2:ba:42:ed:65:14:e4:18:ec:14:
         76:67:e0:13:1e:b5:45:9b:9b:89:1b:48:cd:4d:99:3e:c4:38:
         5d:0d:5a:61:67:f6:59:40:f9:93:35:28:67:2c:79:82:5e:3a:
         4b:d0:31:ee:7b:98:68:b5:9b:00:95:33:59:9f:6d:80:4a:c4:
         4b:77:81:96:64:fd:0e:c4:c5:6d:40:80:6d:c9:d5:9a:c6:9a:
         44:ef:5e:9a:18:0a:ff:a9:73:d4:04:3c:78:eb:7b:c4:5f:32:
         7e:d4:3b:2e:19:71:70:e4:31:14:2e:4a:b8:27:58:2f:bb:5a:
         72:86:fe:c2:20:0c:c6:42:f0:49:4e:d7:51:ed:84:9c:98:b1:
         69:8c:7b:09:b3:c6:24:c9:27:e0:b3:00:e5:7f:76:86:75:8a:
         e5:55:c3:e7:d6:9f:a8:3a:1f:1b:29:14:f8:91:ca:a3:9e:45:
         b3:49:9d:7a:05:29:71:21:84:fc:0d:a1:ba:56:3b:4e:15:a6:
         c2:5e:e4:e6:69:b8:bd:ec:f9:1e:ed:70:8c:24:b8:55:3d:e9:
         5c:7a:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----