Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa
File:                     acb970c2-49a7-4496-80b2-ad372f8148f6.roa (raw, json)
Hash identifier:          gBWcHz58jSX1F60M2OnhYCJDWPNzHuU3O4Jz2IhA8hE=
Subject key identifier:   7A:E5:01:B5:97:9F:DD:C3:7D:0F:26:E3:43:A6:C9:A0:B9:15:78:B1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       62D0A8236A4D492BA2899242E45C94E9F8846EF4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:1040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d0:a8:23:6a:4d:49:2b:a2:89:92:42:e4:5c:94:e9:f8:84:6e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e4f950c20df440e39a36fffae9cb11293e8c845a89d09561c3ebeb7b05caf778, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:cd:c9:e0:95:b6:98:6e:5a:22:2d:a2:1b:
                    bb:59:05:30:ac:93:2f:2f:f1:9f:fd:43:fc:1c:2f:
                    9b:a5:01:0e:f1:9b:53:d3:7d:ea:6c:3b:ec:a7:e6:
                    4a:f8:c8:82:2d:33:b7:12:74:2b:5e:d3:a2:bd:a7:
                    49:52:2c:89:7f:d1:85:9d:2c:00:8e:4f:92:23:8d:
                    84:fe:66:28:43:00:d2:24:ed:47:d5:f6:ff:82:df:
                    8f:93:e0:e1:78:3c:b3:00:48:a0:c7:34:86:6f:25:
                    89:ad:cd:97:9e:f8:cf:5d:a6:de:97:8f:03:09:9e:
                    be:21:39:bc:56:4e:e6:ed:66:ec:93:58:e8:97:02:
                    fe:45:ec:89:58:02:90:13:d5:90:d9:f8:86:a3:30:
                    16:5c:ef:2a:cf:e2:53:17:6d:39:d2:b4:c8:33:da:
                    40:1b:67:e0:65:46:a3:ad:9e:85:c8:42:7b:31:78:
                    05:30:90:ba:ea:ed:6a:d4:af:81:ca:68:8c:ed:7c:
                    f0:0b:dc:c7:83:a5:87:47:a1:78:20:94:74:55:0d:
                    29:a4:16:90:44:e4:5e:54:8a:26:7e:57:54:c7:7a:
                    ee:42:b5:6e:9f:f2:16:25:74:1a:29:93:6c:7d:db:
                    c0:17:1f:4e:23:cc:ef:57:60:db:48:22:b7:93:87:
                    df:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E5:01:B5:97:9F:DD:C3:7D:0F:26:E3:43:A6:C9:A0:B9:15:78:B1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acb970c2-49a7-4496-80b2-ad372f8148f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:1040::/46

    Signature Algorithm: sha256WithRSAEncryption
         19:24:d3:32:35:ca:2c:ed:2e:7b:92:51:e4:86:0f:fe:42:4e:
         27:bf:94:75:e9:c4:ea:d2:e2:6c:1e:94:40:c1:bb:5d:1b:65:
         fc:c9:70:b7:f4:c9:9c:71:31:b3:af:00:e4:d3:e3:f0:f5:d9:
         c4:45:95:ef:f8:78:bc:9f:47:7d:38:2f:98:53:c9:54:91:6f:
         12:8b:c8:42:53:a5:10:3e:b0:f1:ee:d6:3d:12:02:44:fc:ab:
         35:d8:5b:c2:6d:a2:37:c8:ba:6a:f2:9e:cf:fa:f9:98:11:34:
         81:08:36:c3:23:20:ea:7f:de:09:90:c4:49:b1:c5:90:a7:5c:
         d1:64:c2:c7:8b:b6:b6:e5:4b:33:b7:bf:c4:9d:45:b3:0e:b0:
         45:f7:68:6e:3b:0e:2e:c3:ec:92:35:5b:d3:6f:81:84:84:5e:
         56:a4:8e:2f:fb:0c:02:8d:9b:16:d7:5f:93:32:03:87:3d:11:
         1f:94:92:aa:bd:f0:b7:69:f0:73:7f:12:0e:02:fa:e8:87:33:
         eb:9a:b8:84:3d:38:d1:a7:ec:33:e7:2d:ca:fa:10:a2:9f:e7:
         93:26:24:0e:ac:25:7a:71:0c:da:f8:88:2b:42:95:19:cb:fb:
         5d:b0:09:ec:d7:66:b5:24:80:a4:2d:8f:72:c3:b5:4d:c7:6c:
         53:37:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----