Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa
File:                     dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa (raw, json)
Hash identifier:          Hn00G5Su5jH9TDIYNSyDP2CB12/PriIYzjjE2+432lI=
Subject key identifier:   D3:2B:7F:66:D3:FF:3E:BA:18:A9:06:75:75:70:78:91:CF:FF:23:CE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       465599977FE06E05E404A46AF070D898CFE3B237
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:2080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:99:97:7f:e0:6e:05:e4:04:a4:6a:f0:70:d8:98:cf:e3:b2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=97b1449c32c74082c0b38d84a184e78482b9c6fb1a4f01e7e0923cc60cc7921d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:97:1e:84:ea:33:60:63:de:4c:55:9c:81:6c:
                    34:64:cd:69:5f:7c:5e:77:16:7c:b7:fc:13:3f:46:
                    1c:bf:22:e8:89:29:f7:24:64:eb:8e:f9:d8:9b:9c:
                    f8:8f:2a:a7:01:10:cf:40:ab:7e:de:42:57:30:5b:
                    14:59:68:53:ce:b3:55:40:02:53:96:5a:c3:3a:f0:
                    b9:5f:6f:10:0b:66:83:5b:8e:a3:9a:7c:f7:dc:55:
                    72:8e:51:75:55:a0:6a:1f:d5:89:c6:74:7c:a9:8f:
                    c0:f1:1f:fd:18:22:fa:e8:a9:85:e6:75:f2:20:8a:
                    15:a0:85:e9:74:3d:d0:8d:0f:46:c8:98:87:79:97:
                    d2:c8:91:26:c2:30:c7:85:31:37:db:e6:81:83:1a:
                    02:dd:ae:e8:1d:c3:d0:1b:e2:04:e0:77:6c:ad:45:
                    38:53:bb:a4:46:b5:4d:8e:99:d5:1e:39:ca:49:4f:
                    05:5e:8d:1f:b8:18:5c:02:1e:8d:0c:6d:4c:5a:70:
                    08:3d:18:d1:b9:a9:a3:df:42:7e:25:93:8d:6e:c7:
                    e2:7d:59:82:e4:f1:ff:bf:8f:61:ea:df:20:a9:78:
                    21:d8:ec:88:12:77:bd:53:46:a3:4a:7a:41:e0:c6:
                    28:d1:18:f0:4a:06:81:9e:e4:1f:7b:bc:dd:0d:d3:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2B:7F:66:D3:FF:3E:BA:18:A9:06:75:75:70:78:91:CF:FF:23:CE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:2080::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:a3:ea:bc:bd:78:04:7e:1b:44:1c:b6:7f:fe:27:80:7e:aa:
         94:df:27:0b:da:40:ea:52:1a:f4:1d:4b:0f:77:01:0d:2e:f0:
         63:77:6d:81:4b:86:6a:44:43:3a:7f:ca:24:6f:b3:a1:9e:6b:
         98:cd:88:e9:8d:73:f1:54:27:32:6c:96:28:b6:4b:f7:6d:41:
         24:50:83:9e:43:b9:f6:30:62:0f:9f:0b:c7:01:00:1e:84:bf:
         4f:93:cd:35:a6:58:25:d0:6e:d3:0b:12:61:cc:4f:ad:ba:0e:
         7d:40:1a:ad:6f:f4:ac:a5:93:cc:4d:ff:e5:cf:ae:f3:9c:9a:
         7c:80:14:87:c0:ba:9d:da:e0:b3:64:c1:9b:19:ca:e3:fd:33:
         6c:31:1c:d2:11:58:c9:65:5c:da:54:7b:c2:db:a1:41:99:6b:
         f4:8e:70:dd:e3:30:0d:a4:2c:8d:ea:cb:b1:01:71:81:02:6c:
         30:9e:cc:07:d5:3b:12:33:55:4e:db:5b:4c:f2:1d:f7:42:cf:
         8d:d5:cf:73:a5:ea:06:2d:91:ee:05:1a:32:c7:b7:3e:68:2d:
         5f:34:65:22:32:91:d5:13:68:cf:9c:8d:77:5b:a9:90:76:94:
         db:4f:de:8d:3e:65:1a:eb:8b:2d:e4:84:7e:c8:95:8a:e8:fe:
         ab:a3:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----