Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa
File:                     d27f281e-d864-4e2b-a72c-0bb082ea8455.roa (raw, json)
Hash identifier:          aL3pJ/nnM9EeRSN8FnWzRc8UvmyUWlfCEdGyBPwAmJY=
Subject key identifier:   0F:AD:83:43:1A:11:39:12:10:EA:02:2E:9D:72:72:8A:E3:C2:9F:94
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6B28FFC3F9AA41B2BA4A5B9B3FA1A81B6656F2EF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:c060::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:28:ff:c3:f9:aa:41:b2:ba:4a:5b:9b:3f:a1:a8:1b:66:56:f2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=7808f2499ed9ffc0ddcfbdbfe5df085bd7373107e096ce5475c2a68fc2b36174, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:49:0b:48:fd:02:25:6d:f5:18:32:c2:85:
                    dc:44:ee:89:f9:e5:42:e4:6f:e2:f4:fa:14:53:f3:
                    11:18:91:76:af:af:a3:69:21:80:fe:57:14:58:86:
                    dc:71:91:1d:61:5d:58:9c:96:48:74:43:c3:e1:b3:
                    ea:57:ba:9b:c0:26:b4:e1:d7:a3:79:8c:3c:66:72:
                    5b:09:d7:af:d7:aa:54:d4:13:07:9f:18:ad:91:9e:
                    88:51:e3:75:16:13:bc:59:06:70:15:7d:d2:71:ec:
                    86:f5:a4:11:87:41:a3:4f:c5:1e:27:4b:bc:50:28:
                    9b:bf:cc:ed:55:ba:8f:4f:b1:ab:1b:d9:4f:66:08:
                    66:2b:8f:58:2d:1b:59:59:2f:3b:1b:df:ba:25:02:
                    32:3c:ba:9e:dc:40:3e:08:cd:ab:c2:f6:72:a4:15:
                    86:b7:c4:60:3f:43:77:d0:0c:0b:77:d4:62:33:e5:
                    9e:df:3b:7d:89:61:fa:e2:a9:89:11:ae:ff:81:5a:
                    01:4c:0d:b1:15:f6:ad:8b:5e:52:c9:8e:95:79:1f:
                    03:a4:93:2c:5b:ee:44:ba:97:17:0c:2f:a8:90:32:
                    29:61:af:9e:7a:e5:15:a2:b1:1d:c2:1d:c4:e0:ee:
                    6a:3f:2b:17:1e:76:e5:53:4b:3c:79:1b:87:19:23:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AD:83:43:1A:11:39:12:10:EA:02:2E:9D:72:72:8A:E3:C2:9F:94
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d27f281e-d864-4e2b-a72c-0bb082ea8455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:c060::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:98:4d:de:75:9d:4e:00:8f:4d:9b:eb:cb:99:54:bb:86:
         ad:80:c7:95:db:0f:13:d1:85:64:46:c2:60:5c:b0:0f:e7:cd:
         2c:b3:3e:07:01:7a:f4:85:77:99:f4:1b:da:6d:ab:ee:9b:6b:
         13:29:fb:20:ed:a2:da:8b:0e:45:cb:d5:1c:62:78:ae:58:4c:
         2b:0f:91:95:35:25:21:8f:20:c6:d9:13:64:0f:8e:2a:71:f5:
         95:ea:cb:28:f3:d8:f1:0d:25:65:8a:13:46:27:9a:c6:f5:33:
         08:0a:33:f6:3a:04:af:b5:19:d6:c2:49:11:26:6a:f0:d0:b8:
         02:75:c3:89:b4:70:81:03:1a:ec:ce:5e:1a:3a:55:7d:4c:43:
         45:14:8d:ed:d9:5b:62:48:6b:e1:89:85:d8:4d:5d:07:cf:74:
         76:48:cd:20:7a:38:d5:93:2a:44:5c:5f:27:08:1c:49:b6:c3:
         ab:b7:0c:55:77:e8:60:90:10:61:5a:25:8d:47:9d:fa:e6:0f:
         cd:58:fc:05:76:d3:14:15:87:bf:81:54:0a:dd:e1:b9:0f:0f:
         ae:83:86:06:21:d8:90:5c:45:31:9c:0d:38:41:31:3b:19:a8:
         0f:c1:fb:7f:e1:27:00:c6:b0:e6:de:1d:65:c5:2d:a6:15:c8:
         8a:00:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----