Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc5134c0-92f7-4dd8-8dbd-29f5d56d97d3.roa
File:                     cc5134c0-92f7-4dd8-8dbd-29f5d56d97d3.roa (raw, json)
Hash identifier:          IU6s9FzR5D+0MOc9KpJtqcVXuTtHSK2yuvV1tR/sG0E=
Subject key identifier:   F3:57:84:0F:80:9B:CB:32:64:57:60:97:44:17:A9:4F:B2:34:2C:FC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6F91B297F273ED846C8A05029C4E5C2D19823706
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc5134c0-92f7-4dd8-8dbd-29f5d56d97d3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:e080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:b2:97:f2:73:ed:84:6c:8a:05:02:9c:4e:5c:2d:19:82:37:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=46d811fbe4eab484a86ae2300ae619c0888018c630ae2fb0fc3cc344af2d40f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:08:82:4b:be:ea:ff:76:dc:f1:d4:74:c0:
                    c4:ba:4b:9d:c8:84:d0:34:ee:dd:02:35:17:c8:5e:
                    65:0a:92:77:bf:cd:71:46:11:44:c9:25:90:9a:40:
                    d9:f3:1b:a4:a9:70:82:7e:a8:76:e7:38:5c:dc:3a:
                    18:8e:28:19:a9:08:d6:fc:e5:6a:4c:71:24:26:6e:
                    74:26:ee:81:86:6b:f7:4c:fc:da:a5:e1:38:28:39:
                    7c:ca:dc:2d:fa:d5:25:b5:3d:c2:27:00:50:99:3d:
                    69:61:16:46:fc:f0:69:ec:e7:7a:a2:eb:ad:f0:82:
                    6c:13:cb:32:2e:86:69:05:67:01:a4:e3:63:1c:b0:
                    dd:0d:b4:5d:28:08:18:81:1b:ab:32:2a:9c:94:7a:
                    4a:f5:fd:ca:1a:1a:e9:97:1a:af:3b:f8:8f:b8:82:
                    a3:23:ff:78:c8:9f:71:42:f4:81:f6:46:3a:b7:5f:
                    dd:9e:f8:90:3f:da:3e:73:3d:9d:5a:62:00:86:0d:
                    2c:40:a3:b8:91:10:0b:49:66:f4:35:49:2e:28:3b:
                    f4:50:81:3b:8e:e4:14:c1:5b:e3:e5:3f:09:ed:90:
                    9f:3b:4d:b2:90:5f:c4:03:82:ad:c0:da:7c:39:47:
                    b9:e3:ad:e6:a2:b3:97:b4:b6:3c:57:a8:1b:c8:df:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:57:84:0F:80:9B:CB:32:64:57:60:97:44:17:A9:4F:B2:34:2C:FC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cc5134c0-92f7-4dd8-8dbd-29f5d56d97d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:09:61:f0:a2:ca:12:2b:20:ad:76:ff:34:d4:39:88:99:86:
         44:fc:fd:da:04:c8:b0:7a:e5:bb:fc:d2:bd:aa:34:8e:87:fe:
         cc:06:11:31:0a:a3:44:88:03:a7:14:78:05:9c:15:97:4e:4a:
         78:6a:01:ec:da:82:42:b8:57:c3:9c:48:68:5c:97:1c:94:7e:
         33:df:fb:4d:01:11:74:92:e0:31:74:42:de:af:f7:c3:66:c7:
         a8:7e:55:a8:ba:b7:24:0a:d8:7b:ad:fd:c7:62:73:e5:fd:63:
         38:32:2b:8d:d0:c3:2c:8f:8c:d1:df:d4:1a:16:7c:66:53:55:
         87:90:99:ba:1b:72:08:f8:30:73:ae:1b:bf:c3:d0:a7:c6:c5:
         10:f5:dd:1f:9e:09:fd:96:c1:20:60:db:bf:f0:ba:b5:08:c8:
         39:e4:0b:3a:0a:e6:25:3e:fb:b9:0a:d3:08:03:f0:38:0e:52:
         68:d4:51:21:f1:ad:b1:04:a1:04:96:4f:34:9e:02:47:19:97:
         df:ec:5e:df:15:91:0f:a1:fc:a3:ea:47:ac:0c:9e:ff:da:a9:
         fb:34:87:97:fe:a6:29:8d:2a:70:72:73:d7:29:00:78:6c:41:
         0f:43:44:16:19:59:cc:92:b0:a3:c8:30:8e:87:86:89:df:0c:
         1f:7a:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----