Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa
File:                     b04b51f6-e100-4085-9603-95f68de5b1d2.roa (raw, json)
Hash identifier:          La+wr8C9HVIbIHtmj3KL9ZajK4q2HgPbfZLZU8xXuwY=
Subject key identifier:   1E:41:67:03:39:C5:69:31:0E:8A:79:08:DD:43:6B:47:E7:FE:B0:55
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7D2A75057601CE752E6FF1B08BD23A9E69F2E2DE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:b000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2a:75:05:76:01:ce:75:2e:6f:f1:b0:8b:d2:3a:9e:69:f2:e2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c1b7264021b8dfa3479d0e99d6eeaf66b1533e9c450a58d6a9b0e4c42e538e2c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:d6:33:54:e6:43:40:e4:e7:a7:b8:15:e2:
                    25:cb:dd:df:42:a4:f7:d9:d0:dd:9e:6c:14:39:f0:
                    98:0e:94:43:40:76:ad:d6:fc:56:49:46:6f:65:03:
                    b0:cb:5d:b9:6f:9e:f8:88:45:6b:48:77:3c:01:3b:
                    1c:2f:bc:50:93:dc:f5:31:e1:fe:95:6c:38:d3:2c:
                    85:97:76:51:7d:49:42:b6:95:54:0f:3b:ff:ad:fc:
                    ec:49:58:de:79:34:dc:d4:98:0f:22:10:dc:c2:a8:
                    b1:ca:a4:24:9e:ad:ac:e5:38:5c:0b:75:1a:37:5d:
                    d1:98:74:0e:2f:f7:9c:86:ab:09:9e:fd:f1:0f:59:
                    ee:d8:5d:af:a2:30:29:b9:bf:37:cd:a3:b4:16:61:
                    7d:8f:ea:d1:a5:db:f4:27:74:33:2e:3f:a1:ce:c6:
                    08:88:91:2a:30:e1:cd:2a:7d:8e:68:3e:c8:a7:66:
                    12:6d:b8:7b:9f:c1:23:0a:01:1c:23:9d:13:b0:8f:
                    37:14:2b:8b:5e:df:be:34:cf:7d:dc:3d:d2:32:3e:
                    b0:c8:df:2d:f1:ab:ee:fa:2f:9e:bd:c5:9a:bd:80:
                    3c:e6:c7:b1:b0:e0:76:86:9e:2d:80:63:de:20:28:
                    60:48:c5:b8:79:43:f0:43:56:6c:f5:a2:82:16:02:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:67:03:39:C5:69:31:0E:8A:79:08:DD:43:6B:47:E7:FE:B0:55
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b04b51f6-e100-4085-9603-95f68de5b1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c7:51:3f:a6:11:2f:6f:35:e8:06:18:02:e4:a3:04:a1:a6:2d:
         b2:1b:3d:ff:04:a3:09:b7:90:0f:80:2c:30:15:72:bb:20:52:
         5e:36:a3:a5:5a:7b:f8:1a:0d:6e:de:b3:85:f0:58:f5:66:0e:
         a7:4c:a6:70:70:c0:00:ab:68:54:b7:7f:89:2f:06:39:6f:ef:
         3d:bb:98:b6:d0:33:28:d1:ff:09:73:89:69:78:d0:6a:38:c6:
         27:8e:3b:d5:be:e9:af:e1:fb:1b:c1:78:83:54:82:3f:79:5e:
         c1:cc:63:ff:05:6f:79:a4:c9:e9:80:4a:71:01:99:df:c7:ff:
         40:b6:a9:eb:72:4d:67:65:d6:29:db:53:24:9d:29:4f:22:28:
         12:ec:38:a1:8a:60:42:f8:81:48:db:c9:34:a0:87:83:27:2b:
         85:c4:a4:72:96:ed:60:e9:c0:5b:b6:5a:74:52:b1:1c:23:23:
         60:70:08:cb:0a:d5:19:f1:2e:23:cf:b4:a8:da:39:f3:e3:f0:
         96:74:f9:67:9a:08:6c:43:35:21:a2:3f:ba:9c:4d:4e:42:39:
         81:29:4a:4d:e4:ba:09:a6:8c:e4:6d:21:77:b8:41:8d:ff:44:
         20:a7:59:a2:6b:9c:7c:27:e3:12:5e:d0:83:b5:ed:6c:27:2c:
         a1:20:1f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----