Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa
File:                     c1bb658d-621e-4348-96fa-5f81f0d9578b.roa (raw, json)
Hash identifier:          A+MPz0Icjyp7J6sRtNHy8znR2N2ZNKmO9XGWY8OkGkA=
Subject key identifier:   43:ED:3D:D5:EF:A7:94:FE:03:9E:F2:67:3E:A6:A8:F2:81:71:C8:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2F9B3F2D02E0C74B4C70D0CBFB8F6B2BEB8D7C4C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:48c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9b:3f:2d:02:e0:c7:4b:4c:70:d0:cb:fb:8f:6b:2b:eb:8d:7c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b8e83b71ff4f9dc65a3ee8eb38868041c12a7201409d7a37619b4d120647ccea, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:8c:a0:c3:4a:db:4d:ca:1d:9a:71:d8:87:
                    af:5c:1a:ff:93:40:42:3f:dd:fc:5f:0f:52:48:29:
                    2a:13:d4:a9:85:9f:48:28:26:9b:ff:ec:2d:57:49:
                    dd:26:c7:6f:d1:dc:54:bd:69:b7:37:6a:bd:e7:fd:
                    2b:b5:6e:a9:c9:31:73:0e:ca:ed:bd:5b:c2:ab:26:
                    85:9a:df:f4:13:4d:32:06:c5:45:68:ad:ea:b1:ba:
                    99:2f:e8:04:1f:ab:64:80:cb:25:dc:60:0b:70:95:
                    5b:60:91:72:db:bb:c6:83:00:f5:a6:0c:07:fd:6c:
                    d9:47:87:48:95:09:17:eb:0c:02:f5:8d:65:c4:d1:
                    68:86:57:ef:03:44:61:37:fa:5f:0c:9f:b9:82:1f:
                    cf:db:b6:a1:25:27:01:63:c1:65:ed:8d:8d:db:2d:
                    84:b3:04:2d:44:dc:cb:78:40:f2:98:6b:6b:71:50:
                    a1:e9:72:d0:40:60:f3:43:4c:68:ac:06:43:a4:63:
                    b9:f2:e5:a2:5c:20:bb:52:97:c7:f6:f5:6a:d7:a4:
                    98:4a:87:76:30:c6:03:58:d3:67:79:a0:98:fd:fa:
                    0f:da:45:68:91:5b:53:77:a1:cb:c3:f6:24:bc:93:
                    ae:78:c0:47:22:c9:6e:84:61:41:8f:f2:37:ea:91:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:ED:3D:D5:EF:A7:94:FE:03:9E:F2:67:3E:A6:A8:F2:81:71:C8:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c1bb658d-621e-4348-96fa-5f81f0d9578b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:48c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:d6:d7:17:54:17:14:a3:90:d5:55:e0:5c:4b:61:80:63:15:
         db:66:dd:9a:56:18:ab:d4:d7:ec:09:08:6e:cb:f4:22:99:36:
         a3:d7:09:c5:d1:a5:16:60:0d:6f:62:7a:56:f7:08:cc:e4:9d:
         a5:f7:c5:52:03:0f:a9:94:4c:85:6e:61:dd:64:5f:ac:e1:18:
         ff:16:20:3a:2f:1a:ca:59:f3:74:99:e0:9b:80:2d:02:a9:5b:
         2c:28:45:03:8c:42:c0:c5:38:e9:6e:0c:cc:4a:7a:ef:78:d2:
         14:de:9a:be:fb:39:62:b5:cd:6a:f0:76:2c:76:7a:4a:bd:9a:
         1a:45:fc:63:30:61:0f:71:b3:f7:a6:fe:0f:3e:f8:8e:ac:b9:
         8a:64:c9:75:21:67:8e:1c:da:46:1b:ab:23:75:d2:74:98:ed:
         d4:9d:a0:47:b9:e1:02:09:16:71:19:51:5e:5a:bd:8b:70:f9:
         22:5b:72:47:ba:e3:51:11:df:d8:0e:e2:8f:13:45:65:81:95:
         ec:fd:26:c8:8e:89:f5:44:96:19:7f:1b:fc:7b:70:a1:73:3d:
         9b:4f:f8:ad:5d:96:67:25:bf:35:9c:86:a5:59:1e:50:e6:d8:
         e3:d5:ab:86:b4:2d:a7:76:cf:11:d8:f0:02:6a:a9:0d:42:66:
         db:e9:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----