Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa
File:                     deebf2b8-e915-45af-9266-cecda7c6e2e4.roa (raw, json)
Hash identifier:          DzXQPt4fMBrH5jpiqidgp8fgJq4886dRRE+TkASUcCI=
Subject key identifier:   32:BF:8A:2A:87:22:D3:9C:D5:C5:BC:95:B7:E9:69:86:54:31:A4:DF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2904B2AAFC20EE2FEB4BC6012000E6E8A1374B86
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:04:b2:aa:fc:20:ee:2f:eb:4b:c6:01:20:00:e6:e8:a1:37:4b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=dcb711cca4b81c873343c263f0f0ed3631d97fdcc2988f377c414276a91c1419, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:61:91:3b:0b:a9:fa:2a:28:2e:c0:86:ec:
                    9a:64:ad:68:16:0c:f3:d9:c2:34:32:ff:53:9a:c2:
                    6e:94:a4:6c:0d:85:93:a7:11:d7:39:53:39:d9:9d:
                    66:4a:20:db:c8:eb:6c:a1:1e:49:ad:5b:5e:cc:fa:
                    c3:d7:f6:5c:dc:fd:da:76:6b:17:64:01:fa:69:96:
                    fa:25:ca:28:5a:87:da:8f:0b:ed:73:98:2d:ff:59:
                    24:ac:6e:b2:e9:c7:ef:2c:c3:31:c8:c7:11:19:7b:
                    3b:4d:44:65:be:bb:d9:a7:de:e8:e3:a3:e4:6c:55:
                    5e:66:fb:c1:b3:3e:7f:08:1c:70:29:7a:3a:9a:5a:
                    63:3a:79:5c:74:cb:9d:e1:dc:9f:b1:4d:20:c2:56:
                    9a:30:2b:5b:b1:cd:44:f3:76:75:a8:d3:8f:bd:46:
                    18:af:ad:a8:17:29:5c:46:83:e5:51:f0:05:2a:63:
                    5e:4a:a3:11:05:85:95:9a:32:30:9a:ae:33:3e:5d:
                    e8:22:c7:f3:b5:f0:de:22:7f:4a:dc:08:13:25:cf:
                    1e:8e:a1:f4:e2:42:cb:ee:e3:a9:b6:e6:f5:72:e7:
                    0b:48:10:69:30:c1:2f:4a:3e:f3:3a:35:0f:81:51:
                    c6:60:38:48:53:bb:1e:29:a3:66:57:1c:34:04:ea:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:8A:2A:87:22:D3:9C:D5:C5:BC:95:B7:E9:69:86:54:31:A4:DF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/deebf2b8-e915-45af-9266-cecda7c6e2e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:52:7b:c3:64:09:2a:10:85:2b:5d:3b:69:f8:dc:52:98:79:
         66:70:cd:7f:58:db:5e:49:01:98:73:5c:ac:95:f6:47:d3:b9:
         0e:4c:de:1b:ac:65:35:14:9d:fd:48:2f:31:99:66:74:db:94:
         17:25:20:f1:b1:09:3e:c3:89:ce:43:56:2e:12:ad:e2:a4:81:
         de:c5:6e:31:00:c5:96:23:5d:1f:a3:8d:b8:fc:a9:96:97:01:
         7e:6d:24:07:82:d4:df:c2:fe:d6:e5:92:12:63:74:69:66:2c:
         2f:4f:59:cd:21:77:44:9b:57:fa:4a:3e:a8:4d:72:e3:ce:19:
         aa:fb:27:92:e9:a9:0b:e2:89:a1:e8:a7:f7:15:a7:ad:6f:58:
         7e:ef:be:2c:66:45:ca:2a:7c:ae:41:da:47:cf:ac:48:40:06:
         bf:f4:fa:46:60:ac:d8:26:8c:fb:42:ca:fa:d9:5c:e4:57:2f:
         70:a5:08:90:a6:64:00:62:27:9c:2e:5d:d5:72:1b:0c:35:22:
         46:9b:98:68:7d:09:cb:b4:a8:3c:d7:1f:ed:83:58:f2:8c:95:
         41:fa:ea:e9:12:a5:e2:ce:17:59:e1:78:f4:98:f7:f7:f7:34:
         f2:3c:09:04:47:a4:d3:24:c4:b4:1c:f8:6f:df:99:92:73:48:
         cf:4d:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----