Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa
File:                     e762903c-ed87-4cd6-af8f-90ac5c482df2.roa (raw, json)
Hash identifier:          yWK70kekPm1Jl/Yg/mYUiEzAu9ttCRBmKXv77y7D7t0=
Subject key identifier:   27:E7:2E:06:97:CD:94:40:30:27:6B:B3:80:95:F4:1A:BD:CC:42:71
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       631C70E8B7EEAC138B8E05DC02D7CE6FBB873B2C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:8c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1c:70:e8:b7:ee:ac:13:8b:8e:05:dc:02:d7:ce:6f:bb:87:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=846a484d4fa53fb0ebf16d0a7071adc73ecef43e5bbf4941e265a7bf9c57786d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:30:cb:80:0f:9f:83:48:b5:eb:1c:35:39:06:
                    a5:86:0c:2b:39:46:88:c1:a4:18:16:db:35:cb:47:
                    a3:33:d9:de:ee:0a:6c:85:49:9e:42:bf:db:2b:8e:
                    bd:82:d6:04:fb:74:22:aa:27:cf:4a:ea:d8:ab:61:
                    f6:44:9e:7a:1f:4c:a9:4e:68:d7:2e:f9:7d:9f:1e:
                    c5:57:41:80:2e:0f:4e:2a:97:87:10:cf:e3:fd:93:
                    88:cf:f9:78:7c:b6:e2:ca:34:f8:55:5e:f1:25:78:
                    78:36:41:5b:b8:3b:30:6f:b6:e3:44:80:af:a4:7b:
                    81:ff:e9:4d:c5:a5:95:56:60:13:d2:a2:34:de:eb:
                    0d:07:1c:63:7c:b2:fb:f3:9d:d3:95:f8:88:b9:2f:
                    2e:22:f1:13:7a:49:35:0f:3d:a9:00:e7:85:b6:94:
                    01:09:3f:ec:18:72:90:e1:02:f5:6b:6f:a9:7e:9c:
                    b7:2e:93:4f:6c:a4:5b:b8:cc:0a:a9:ff:54:4f:fa:
                    41:df:95:fd:de:be:37:99:f7:9c:61:fa:9e:c5:c2:
                    b2:7d:91:be:69:57:e0:cb:a1:91:51:d1:f0:97:8d:
                    6a:e2:3f:af:b0:08:85:b0:83:4d:0d:65:a9:f9:90:
                    7a:34:9c:60:44:20:26:14:c7:00:b7:fb:79:da:49:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:2E:06:97:CD:94:40:30:27:6B:B3:80:95:F4:1A:BD:CC:42:71
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e762903c-ed87-4cd6-af8f-90ac5c482df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:2d:a7:0d:05:09:c1:1f:64:69:f5:f8:68:35:05:4d:73:d6:
         50:ba:8f:20:b2:d3:c2:bd:9c:a8:49:90:43:f0:25:79:0c:40:
         37:f5:b8:6a:71:c0:ef:60:61:56:a6:73:88:a8:9f:cd:90:74:
         4c:a8:2f:e2:c3:5c:04:ae:fb:81:d1:bf:46:97:0c:7d:47:4b:
         e2:0c:cd:20:1c:8b:12:7b:28:bd:aa:d3:1c:68:8a:e1:8b:ce:
         9e:2e:aa:f6:9d:d6:94:70:21:35:2d:a6:6f:f2:07:dc:5f:75:
         12:42:79:62:fe:41:7b:0d:20:90:16:93:52:a8:b0:f6:ea:bb:
         f9:c8:15:a8:9d:e1:2c:f1:fd:3c:18:0f:f2:64:8f:f7:3a:6c:
         c5:96:2c:e5:bc:86:f0:31:a8:52:4b:fa:48:4c:47:70:b6:bd:
         a5:77:c2:f5:92:48:dd:e5:3b:29:9c:01:c5:89:0b:46:7c:c5:
         0f:c8:83:79:45:2a:17:80:00:e4:be:b0:99:ae:f6:60:f7:7d:
         4c:49:47:b2:1c:60:06:a9:74:51:16:bb:7c:6b:75:a5:36:13:
         fe:d8:10:b4:a8:ff:a0:97:43:d0:d8:cd:6d:09:49:1f:fb:0f:
         e3:40:8b:70:96:1a:bb:68:40:65:31:04:73:ef:af:d6:34:7e:
         80:ee:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----