Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa
File:                     e5b22d77-3182-4224-8e47-32ca7c3d3373.roa (raw, json)
Hash identifier:          8UmOU2S4ATebU3gicPJMK7rlFYDdjh87L7vxQqbgS1g=
Subject key identifier:   D8:A0:3E:0C:85:31:A2:44:89:8E:F8:39:A6:23:2B:21:DF:93:EA:28
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       486FEFA90E6C3356EA1F5E7BA22DF2B61E647460
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:f0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6f:ef:a9:0e:6c:33:56:ea:1f:5e:7b:a2:2d:f2:b6:1e:64:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=7b2f0c173a8ee43bfee631767718d4e33fd41229b570e5c75e8a11e993ece58e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:fa:a8:5c:11:d7:ef:23:20:f1:40:1d:1f:
                    f7:be:db:5b:54:df:b1:7c:cd:3f:62:05:e8:51:2e:
                    2d:6c:fd:90:cf:5d:90:5c:9b:ce:e4:c8:87:e6:b1:
                    1c:86:49:81:89:79:96:1f:89:3c:e4:72:60:ba:ce:
                    16:65:23:18:74:4b:1e:d2:46:04:cb:69:60:c5:b4:
                    7e:ec:7d:e8:e7:29:3e:3c:a8:97:66:c7:42:cc:9d:
                    18:26:a2:9f:ff:cd:88:55:c4:d1:08:54:92:fe:fd:
                    ae:d1:23:dd:f6:7d:e5:4e:6b:1c:d7:e9:b7:e1:24:
                    07:58:1c:5e:a4:93:ff:be:8e:d8:46:9e:4a:74:e4:
                    1d:cd:09:51:8f:a4:b3:54:d7:a9:69:74:bf:8c:15:
                    60:4f:d7:23:ba:c3:4b:1f:2d:de:e1:81:a0:00:5e:
                    f2:94:1a:da:f5:66:17:28:26:cb:eb:74:e8:21:74:
                    40:1f:6a:43:1e:f9:27:ae:b4:05:72:08:e2:eb:dc:
                    b0:80:08:0a:5d:74:38:8b:b3:89:8e:ab:40:e0:e5:
                    34:f9:5f:b0:3d:62:b4:d4:b8:f6:b6:72:fc:30:dc:
                    b9:5d:ca:ca:b2:6b:d6:d7:53:ec:21:ce:7c:11:f2:
                    49:04:03:db:c7:be:16:7c:04:57:e8:21:80:de:7a:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A0:3E:0C:85:31:A2:44:89:8E:F8:39:A6:23:2B:21:DF:93:EA:28
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5b22d77-3182-4224-8e47-32ca7c3d3373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:9c:25:fe:5c:49:9a:2f:e5:29:21:27:89:4d:3a:35:22:
         6b:e7:59:99:45:42:e2:8f:bf:e6:e6:f9:29:e9:a0:6a:76:d0:
         cd:2e:63:59:66:0f:41:dc:72:52:c6:40:12:78:cf:79:c4:b9:
         e2:3d:42:15:35:c4:ad:72:00:81:35:44:97:8d:f6:a4:f9:17:
         8f:35:06:9c:c4:47:b4:c0:d8:39:b3:28:00:4c:51:07:89:c5:
         31:c9:ac:ce:00:ee:11:0a:05:b5:1a:61:bb:0e:5d:a7:fd:91:
         bd:c3:00:f2:74:bc:86:bc:09:d8:e5:d0:c5:1d:67:47:fc:74:
         e8:13:09:c2:b7:08:33:aa:f2:87:97:33:cb:95:11:14:51:39:
         c1:0a:38:da:87:ff:18:42:d8:72:69:88:fd:1b:5f:6a:1b:1b:
         69:45:39:22:e9:e2:fb:03:b6:37:95:88:18:23:65:5a:e5:5e:
         3e:90:2a:65:5d:a6:ec:82:cd:b8:16:48:5d:f9:e9:d3:95:89:
         28:9f:45:e9:ad:3c:57:ef:c6:42:77:97:b6:80:35:d1:1c:1a:
         51:ad:ae:74:82:0e:aa:3d:d6:1a:14:fa:b8:3c:7a:33:af:ae:
         3e:3a:00:1d:9f:b6:84:79:3f:89:35:98:66:54:ec:c7:15:28:
         88:64:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----