Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa
File:                     e07de3d6-bd1c-45fc-a092-f2635716b267.roa (raw, json)
Hash identifier:          3RhkBmnRlCnZrQRH4wz80zC3lzMSpSEioRuA/8oi9DY=
Subject key identifier:   20:EB:37:A6:A2:C0:EB:49:5D:9F:26:D5:00:49:CF:BF:B3:19:4D:3A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       714019396970A7BB56141336E37A64965D8B55F8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:c080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:40:19:39:69:70:a7:bb:56:14:13:36:e3:7a:64:96:5d:8b:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=dd39e2649c9d9218d2e55dffdc644b82ef555d628e4e94a14dd14a807d69722a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:a9:cd:15:c2:c4:1e:ce:52:7e:87:86:1d:
                    99:42:3d:61:d1:f2:25:e7:68:a1:e4:eb:93:98:c5:
                    dd:a1:fa:c6:cc:c3:f1:07:df:98:24:2c:91:63:b9:
                    f4:a3:cb:31:45:c3:e6:50:0e:79:ed:46:58:b2:24:
                    f6:2e:d3:93:67:5c:b5:82:88:03:43:64:70:c9:98:
                    60:d6:b5:fc:4b:bb:61:11:a1:4d:e1:cb:fb:a0:90:
                    b6:69:62:3a:96:b1:ca:17:4c:f3:c4:fa:45:37:45:
                    9e:a5:b5:af:f9:ad:c2:ab:db:df:ab:d5:9a:cf:42:
                    05:71:92:18:02:70:a7:e1:9b:d4:d2:6a:d7:0d:61:
                    24:2b:3f:83:61:fd:61:fe:99:83:d8:d7:1d:57:55:
                    8e:73:0d:55:57:56:25:a4:a5:ab:cc:ed:98:16:bf:
                    72:f9:51:c1:b8:63:83:ca:e0:19:06:5b:98:47:71:
                    40:73:11:b1:94:e6:00:0c:ad:fc:76:8f:bb:92:ee:
                    45:6b:0f:22:8b:f6:d6:df:14:73:d8:de:7d:35:63:
                    a8:da:e4:2f:e8:9e:75:b2:39:3f:18:09:2d:30:13:
                    9d:46:12:1b:55:31:a5:98:96:ab:9a:cc:26:46:67:
                    32:bf:67:44:5c:fd:d7:e3:68:5a:af:24:74:bd:53:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EB:37:A6:A2:C0:EB:49:5D:9F:26:D5:00:49:CF:BF:B3:19:4D:3A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07de3d6-bd1c-45fc-a092-f2635716b267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:c080::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:b5:00:54:ee:17:ed:31:2c:03:84:71:e3:c9:63:83:78:22:
         41:3f:2f:e2:09:6f:3a:60:4d:82:6a:49:ee:28:20:94:a9:c7:
         73:f6:61:fa:db:42:70:79:29:54:a6:65:e0:8f:44:52:c3:93:
         f1:b2:83:41:1f:f8:c3:e6:7b:22:cd:ee:4a:d3:0a:a0:3a:23:
         06:02:85:bc:f9:c9:a7:4e:3b:12:c9:cd:68:37:50:d2:1d:17:
         ab:ef:50:54:d2:d2:10:11:dc:4d:a2:69:a7:4c:0c:73:07:79:
         ea:d5:76:eb:0d:64:70:98:d0:f1:48:25:93:ae:8e:ea:64:49:
         57:cf:b6:2d:6b:ad:ac:fe:df:d9:cd:9b:c4:6f:6e:64:ff:01:
         2d:93:33:f7:9a:7f:3f:63:39:be:9a:93:7b:75:3e:4f:33:f2:
         58:4f:1f:1f:08:fb:34:71:15:d6:35:bd:c8:52:7b:b2:39:5c:
         a5:4b:f8:ef:73:52:10:b8:aa:06:f6:23:86:96:44:71:5e:f3:
         1c:60:a9:44:e8:81:e1:76:b6:14:a4:c1:4e:bc:ec:c7:db:ac:
         96:4d:6a:5d:2f:4d:03:f6:3d:79:a9:6f:10:b1:43:59:0c:77:
         95:bd:33:b6:54:34:88:2d:4e:11:7e:a5:8c:b7:df:5b:26:ca:
         e9:65:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----