Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa
File:                     de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa (raw, json)
Hash identifier:          bZChvbjGcaWibirjcHdGNs+UBoMCwjYWxpz2zZ+WLFE=
Subject key identifier:   12:33:3B:28:18:0B:DC:69:34:B4:E5:F6:95:74:B8:00:8D:0D:1A:A8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7075DB8D104AB642735954ECB6ADA8AC7D6FE9BA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:4880::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:75:db:8d:10:4a:b6:42:73:59:54:ec:b6:ad:a8:ac:7d:6f:e9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=91d8c0800400ea85b0a57849ab028ad0c6bb50381e5b197f41bc4f6f9bd26c4d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:80:68:ed:5b:fd:a5:db:3f:6e:7a:62:10:
                    cc:b8:2e:42:75:85:50:b1:5c:55:d3:3c:fb:0d:6e:
                    96:ef:a9:1d:27:d7:8a:7f:23:bc:a4:81:41:f9:5d:
                    4d:22:47:a3:a4:42:80:a8:aa:8a:dc:d8:1a:01:3e:
                    b7:db:ce:55:80:ec:f0:79:18:5b:3b:15:19:c3:ef:
                    7a:4a:80:cd:a7:c1:22:6c:c1:36:13:ae:36:cd:45:
                    39:e9:13:22:dd:e6:87:59:a3:a0:20:47:82:a4:4f:
                    f5:96:48:f0:54:7b:bd:0a:12:80:df:61:4b:7b:c9:
                    e1:3d:cb:96:6b:e0:0d:e6:e3:d8:d7:a3:58:4d:b6:
                    04:bd:73:0f:65:11:32:27:5b:77:3f:1d:3e:1b:0f:
                    bf:98:8a:0d:71:09:37:32:6f:f7:ab:5c:f7:16:5d:
                    3f:83:d0:3b:85:c3:ab:27:00:09:4d:f7:f0:05:00:
                    0e:17:92:a3:b8:0b:45:63:db:c2:8b:22:40:33:a9:
                    79:dd:10:dd:27:d5:27:c7:35:43:d5:e8:36:e1:98:
                    9c:40:c6:48:8a:29:7e:0c:fc:4d:0b:d2:ca:51:af:
                    46:9b:4f:b7:dc:ff:a2:bc:c2:ad:2a:04:24:26:94:
                    ad:28:6d:e8:a3:63:b2:de:71:9d:42:59:e9:d8:3b:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:33:3B:28:18:0B:DC:69:34:B4:E5:F6:95:74:B8:00:8D:0D:1A:A8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/de0c31a3-1155-4ffe-8487-c0a0eb6237d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:4880::/46

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:de:cf:81:04:30:f4:5d:d3:6d:03:5c:83:88:f9:0f:a5:
         78:a2:01:f2:19:6e:8c:85:c9:33:55:69:40:c0:1c:bc:3a:f0:
         ed:20:91:f5:c5:13:2c:1b:32:c9:6e:8e:9d:d9:23:31:d2:f8:
         de:d2:57:95:69:c0:7d:7c:60:8d:92:9c:55:2f:1e:95:3b:2c:
         b5:9c:40:0e:9e:e0:24:ec:23:c1:11:09:bf:ec:63:18:19:33:
         44:0b:1f:08:f5:40:55:67:a4:36:6e:08:38:a2:d8:7f:03:02:
         77:78:96:04:0a:af:17:b1:ed:e5:20:85:6b:64:0b:37:8c:25:
         40:5d:06:aa:ad:29:a1:ac:2d:4a:c8:e9:5d:6e:a0:ed:ec:5f:
         31:c9:7c:38:2e:8d:4f:eb:58:b7:56:9a:8b:7c:ca:3d:38:1e:
         7a:6a:47:07:aa:8f:a5:0f:6b:ac:42:d5:f5:60:73:2d:d3:5c:
         19:8c:3f:1a:04:80:19:a6:9d:24:10:1d:dd:30:37:11:04:77:
         b7:ed:ef:92:45:b4:9b:37:20:91:de:a1:ab:41:46:ca:a8:a6:
         f6:29:f3:f2:cc:37:8b:7c:84:c2:f1:1f:95:70:6a:53:8e:08:
         ef:4c:97:94:6e:ab:bf:8e:f6:db:94:7f:9e:fd:b9:17:86:1d:
         d7:87:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----