Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa
File:                     b722e8e8-9dc4-4578-b939-252603f62da2.roa (raw, json)
Hash identifier:          VsBtwQQ+9d5ouYi6wSqQKAd/nqij5SJEd89wfnNVKWs=
Subject key identifier:   D5:60:6E:68:5B:DA:42:D3:51:75:FC:B0:15:A0:8B:8C:C6:22:75:2B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       223969ECF9C1E7AF96A86264AF4BFFF37574DA20
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:9080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:39:69:ec:f9:c1:e7:af:96:a8:62:64:af:4b:ff:f3:75:74:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=daa622c9395fb8a8eb8924da20cb97905c9825e530dfcd93d39b6e7cd19c1dd6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:5e:bb:e5:ec:bf:35:66:ba:4d:e4:77:b9:
                    5f:db:3d:80:99:3d:6c:df:d9:75:f1:55:af:5c:09:
                    f0:cc:04:30:d3:f4:8e:3c:aa:bf:c8:ea:c5:cd:a0:
                    50:ba:fd:55:3f:84:85:4e:35:18:24:11:70:89:c3:
                    ef:a0:47:b3:a5:7c:d2:e7:5d:d6:41:b3:f2:61:9b:
                    a2:a0:7f:94:ae:e9:ed:36:f6:90:89:d4:bb:59:1c:
                    45:bc:78:8f:21:02:fa:95:73:16:59:1c:08:fd:51:
                    b3:eb:c2:6f:f5:35:9a:7e:20:9a:6a:76:c6:e4:c5:
                    f1:30:e8:a5:3f:6d:3e:c0:d6:69:39:1e:85:77:9c:
                    53:dc:9f:f4:3a:e9:3a:7a:32:57:7f:a6:e4:f7:7d:
                    a5:7a:02:0a:ae:c0:26:63:0c:44:72:56:c5:59:9c:
                    33:b1:79:c2:5c:c3:45:66:bd:ee:1a:34:54:38:a7:
                    bd:7e:47:0c:26:5f:58:54:c5:c3:1d:b9:6a:75:7d:
                    99:30:df:6a:72:67:1c:d0:48:d9:df:c7:e4:0a:b1:
                    8d:de:a3:03:bb:3b:d1:7d:72:ea:14:a7:ed:81:a2:
                    48:76:78:d6:cb:85:c4:61:a4:47:ab:d7:c5:61:4a:
                    1b:78:6c:40:ba:9a:e5:e0:15:52:ce:f4:2e:44:2b:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:6E:68:5B:DA:42:D3:51:75:FC:B0:15:A0:8B:8C:C6:22:75:2B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b722e8e8-9dc4-4578-b939-252603f62da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:9080::/46

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:e3:d4:b0:48:f1:ff:44:f5:0d:fa:21:b2:75:b8:4d:b0:
         66:25:fd:17:63:b5:aa:cb:7c:19:bb:6e:4b:69:73:eb:93:35:
         ce:9e:c6:bf:02:50:27:64:75:9b:b2:aa:30:ac:9a:14:8f:11:
         f6:ff:01:c7:c9:dc:49:77:04:bf:e4:61:5a:a0:ca:de:b5:e4:
         2c:bc:48:67:17:12:0c:f2:00:5e:91:a3:ba:9c:2f:b5:7b:8d:
         a0:47:5f:97:b3:c0:5b:6b:bc:3f:70:bc:83:50:47:33:db:01:
         af:be:bf:fe:b7:d2:41:58:84:b4:53:55:cd:0b:bb:fb:a8:67:
         73:7e:07:2f:70:1b:ce:00:ef:25:d1:0d:f5:2f:3d:3a:a0:6b:
         91:2b:0c:7b:2b:cb:27:68:64:5c:e9:5e:41:88:98:67:ca:92:
         0f:7f:b6:d2:ab:03:23:25:69:70:de:07:2c:ed:5a:8e:a6:b2:
         a3:ad:fe:98:42:c6:2b:4c:52:d0:0b:97:83:aa:d6:b9:e3:ec:
         f3:e3:ef:65:a1:73:51:8b:16:a8:0f:cc:6f:03:2a:4f:c7:81:
         cd:69:1c:4c:04:f3:d7:67:f0:2f:9d:0a:3a:58:39:d9:2c:7d:
         c6:b0:27:5a:0f:82:8c:cc:09:fa:3a:42:9b:9e:25:00:63:5d:
         c2:ea:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----