Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa
File:                     9f808762-dd71-4f33-bfa8-cb4244801d34.roa (raw, json)
Hash identifier:          TzuM8Hz2BIJDeySP6Wlul8+rXU+zNAvi4Ee4sKd3IPA=
Subject key identifier:   2A:93:70:42:9E:82:D5:43:D3:03:A2:B2:3E:C6:F9:16:D3:10:36:FF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       47A3CBCC64368CA02E37488F7F7514E1F57CE65E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:7040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a3:cb:cc:64:36:8c:a0:2e:37:48:8f:7f:75:14:e1:f5:7c:e6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=48fd4384c20df0a17309ff8a03548ca630c4a47fbd5341e958027677e30d8c48, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:e2:3e:0a:8e:91:a3:e5:f9:13:d2:7c:82:
                    00:96:47:e5:45:9c:d7:fb:8c:01:a4:97:e9:ee:ed:
                    1a:c4:38:5e:63:2f:6d:f2:dc:d2:90:7b:51:21:4f:
                    75:53:2d:17:73:37:3c:1d:f7:53:98:e1:48:74:a5:
                    1e:13:e0:c8:dc:71:cf:98:46:28:94:46:29:be:b3:
                    de:11:42:44:e4:70:a0:14:d4:29:3d:c6:3a:82:c8:
                    21:44:0c:11:de:6d:64:7b:a5:72:ac:1e:2c:42:c8:
                    1e:b4:46:19:2b:70:5c:82:cc:bf:ac:c9:cb:24:33:
                    e3:22:17:fd:83:76:4f:f5:58:2c:78:0c:5e:46:82:
                    02:c8:fa:c1:87:43:95:f5:a2:d9:83:8a:5a:7d:f9:
                    42:e9:61:56:19:96:ae:71:2c:3a:db:ac:b2:b2:08:
                    ac:21:3c:a2:fb:d7:ce:ea:94:85:e1:2c:81:0f:94:
                    64:91:99:7d:d8:be:db:11:4d:25:8f:5e:19:ef:6c:
                    84:3b:0e:54:a7:96:97:c0:68:65:8e:15:d1:0a:70:
                    25:66:c1:aa:4e:a7:14:c5:b1:73:2f:b9:99:6a:7b:
                    66:d2:02:ba:8d:b1:67:a7:18:ad:36:71:06:e7:fa:
                    2a:0b:b2:64:7d:4d:c0:b4:4e:ca:7c:15:36:a0:e5:
                    ac:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:93:70:42:9E:82:D5:43:D3:03:A2:B2:3E:C6:F9:16:D3:10:36:FF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9f808762-dd71-4f33-bfa8-cb4244801d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:7040::/46

    Signature Algorithm: sha256WithRSAEncryption
         71:09:f3:e1:f8:aa:a2:3a:56:7a:4d:bf:5c:6d:ce:e6:2e:54:
         dd:b8:c5:d2:0a:83:e2:a2:d5:10:9e:78:f1:37:ed:50:29:88:
         04:e6:2c:8d:0c:1a:74:07:58:d3:0f:d7:49:96:01:87:8e:13:
         06:59:26:f4:db:57:4b:8c:ed:d7:d4:f3:31:c5:84:37:d7:e2:
         6a:6b:08:aa:b7:07:da:f2:6e:df:fa:a9:d8:aa:00:0d:83:1a:
         82:aa:c4:4f:86:9a:92:d4:21:11:6c:d8:35:af:80:3b:08:ce:
         99:13:1a:54:d2:de:2c:93:f0:a0:a6:9a:75:94:f8:f8:83:b6:
         b5:61:e1:0e:59:68:92:ef:f2:3d:e7:14:0e:29:90:03:60:cb:
         d3:2c:a7:61:64:c1:0f:2d:d4:ec:e9:a1:21:e4:c1:ff:51:88:
         9b:3f:9e:9b:26:f5:2f:ab:89:5b:a4:88:e6:86:14:31:26:d1:
         04:d1:74:45:d4:f4:01:ca:d4:cb:91:1a:c0:88:22:30:8d:b3:
         1e:e9:40:46:a5:ae:e0:06:67:49:28:c4:af:0f:87:47:6c:3e:
         04:3e:f3:74:9c:3a:02:b6:10:fd:cb:fd:f5:e8:a5:34:34:8c:
         4f:63:eb:00:33:17:a3:38:30:b2:14:02:0a:fb:fd:96:17:ce:
         f8:5a:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----