Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa
File:                     a22c3d64-afd9-44fd-96c2-3def5d30f274.roa (raw, json)
Hash identifier:          mGtbcSfyNdP3i+XXVxhsohkjBAEkGElvGIybhd7G8k8=
Subject key identifier:   99:CA:EA:89:8F:D5:AD:60:69:A8:B1:45:F3:9D:09:C9:89:2A:CB:FA
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       25E51C2B23B781F8B44FA43BADC163030E62068E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:8c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:1c:2b:23:b7:81:f8:b4:4f:a4:3b:ad:c1:63:03:0e:62:06:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6f16f73f06c7d72a73a4364e3ba3e2e501b3f8f2dea075d2838ece3fa298fa2c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:4f:5c:b0:97:8f:96:d3:80:ad:26:2c:6f:e6:
                    a8:ce:b9:fd:c5:bb:ca:59:04:cd:83:35:58:52:38:
                    93:70:bc:4d:6e:c5:3c:f2:1c:9b:0a:89:45:ab:55:
                    ab:41:58:63:56:77:e8:ac:69:5c:ab:f7:09:0d:0c:
                    56:e5:7a:5e:93:b3:df:fa:cc:c3:f4:29:5e:cd:5e:
                    c5:37:dd:38:0d:05:6a:1d:44:f9:54:b3:73:98:77:
                    4d:ed:80:27:af:2d:05:10:b1:de:7c:94:bd:06:9d:
                    ea:42:28:e9:aa:f4:7a:01:ce:02:d3:46:fa:ab:ed:
                    04:8e:16:aa:14:3a:37:b2:78:6d:10:a5:7e:74:75:
                    48:79:ca:91:72:dc:b8:79:99:cb:a9:b9:8e:f4:b4:
                    be:2a:fe:f5:e2:49:4d:03:a1:5d:60:40:8f:2b:8d:
                    3f:ad:18:35:21:e5:41:7b:55:87:82:38:fb:e3:c5:
                    60:e0:e0:b9:4d:64:17:2d:60:e4:5a:4e:4e:09:47:
                    cb:a0:50:c8:d8:ff:92:ab:f0:1c:b5:7d:29:6c:ad:
                    f8:a8:c3:7d:c5:a1:9d:59:03:65:b5:66:ec:c2:bc:
                    f4:4e:57:1e:7a:55:fd:75:af:a6:2f:3e:22:58:ce:
                    5b:41:8a:ef:ab:55:c8:cc:45:83:ff:04:23:b5:7b:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CA:EA:89:8F:D5:AD:60:69:A8:B1:45:F3:9D:09:C9:89:2A:CB:FA
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a22c3d64-afd9-44fd-96c2-3def5d30f274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:5f:a6:2c:2a:88:24:61:1d:b3:59:d6:54:ec:6c:6a:72:
         7f:41:0a:15:9f:a3:0b:70:68:4f:96:95:a5:83:af:25:95:4c:
         40:c4:51:e5:f0:94:b8:a8:a0:f9:a1:21:dc:c7:e5:df:cf:07:
         68:de:f1:e1:f2:d8:42:00:35:45:ad:b3:21:25:b9:b3:bf:44:
         f3:2c:83:1d:22:8f:9d:54:dc:8f:41:c6:7a:49:f9:de:eb:49:
         83:45:2d:db:31:54:54:1e:cd:5d:ab:4f:0a:5b:34:ad:48:90:
         f9:2c:d0:74:04:29:61:fa:bb:d1:e4:5d:96:6e:16:e4:ff:f3:
         6a:6e:23:ea:be:5e:23:b0:19:e2:e5:8f:f2:a7:c9:c8:47:0c:
         c2:ad:a4:a1:00:e3:4f:8c:41:38:c0:ea:85:71:65:b9:0b:f6:
         73:f2:ca:56:49:a0:03:eb:e0:41:9b:b6:8a:5b:ac:dc:a3:8f:
         97:6f:1d:65:2e:8e:11:58:86:b0:92:b4:9f:94:e9:c0:50:5d:
         24:6f:00:96:f7:2f:6c:79:44:d3:4d:8e:34:5e:e8:c8:64:d2:
         e1:43:23:40:a0:10:60:1b:fe:6c:56:0e:6b:32:59:22:de:4c:
         5e:47:e2:11:6d:07:2b:8b:fb:79:6b:47:5b:ef:b8:18:79:e1:
         6a:b3:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----