Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa
File:                     ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa (raw, json)
Hash identifier:          7YuFRKTUv6n0WQuwiJc94ZnbfEoGhAnFEZCTPrJg0Eg=
Subject key identifier:   DF:AA:01:DA:0F:CF:F9:E2:9D:73:BD:7E:4D:17:14:4F:03:20:23:3E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7446F1D4F6E45A2B0B084D9FE09F9D924B272532
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:2020::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:f1:d4:f6:e4:5a:2b:0b:08:4d:9f:e0:9f:9d:92:4b:27:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c9833fbd5fe90944fb3dfe1872b101642ff91bafc6dbe1fc46889c4c3885c1e7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:8e:ab:45:fd:f9:a1:d1:05:8d:9f:20:7e:
                    eb:47:81:91:ba:7a:77:1d:36:7c:3b:da:bb:c4:1e:
                    7d:68:d6:49:06:d4:15:66:86:a2:69:c9:4d:06:ed:
                    d6:0c:92:8a:39:d8:b3:c7:fe:38:63:0e:75:2d:49:
                    40:b4:0d:1b:63:9c:5a:ca:ab:91:ba:0d:f9:66:64:
                    07:bb:80:23:d2:c9:df:21:e1:c4:80:3d:b6:59:07:
                    85:94:ab:da:23:65:26:a9:d9:f7:98:19:bb:19:6d:
                    2b:6f:54:bd:ed:aa:c4:04:e5:3d:80:19:64:25:78:
                    66:d2:d9:ce:77:40:84:82:77:de:47:9f:fc:14:c0:
                    77:66:c6:cc:68:96:82:4e:41:a0:d8:91:db:27:61:
                    fc:d2:d5:2c:38:79:71:b0:8d:b2:f0:a8:a4:b0:67:
                    aa:1d:cf:6e:2a:b0:85:3e:f2:05:16:a6:72:ef:d1:
                    f3:48:71:6b:92:1a:76:ac:0b:38:81:37:d2:f0:e1:
                    22:8b:1b:b7:f7:84:91:f9:60:d9:c1:de:1b:ad:13:
                    97:a4:82:6d:2c:08:95:a0:bb:b7:16:c8:0b:ae:b7:
                    02:8a:ed:61:d0:36:59:d3:45:86:16:27:ab:60:59:
                    8e:a4:8a:ca:ec:78:e7:66:0b:9a:1a:5e:18:64:09:
                    ab:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AA:01:DA:0F:CF:F9:E2:9D:73:BD:7E:4D:17:14:4F:03:20:23:3E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec50bc85-6528-4684-9e3c-8ba5cfa3f830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:2020::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:fc:b1:48:9c:fb:8a:15:56:8e:de:60:30:15:ad:f8:47:
         a9:57:64:c5:a8:87:1f:a4:d3:1a:e0:52:c7:fa:65:0a:1e:95:
         1d:88:ee:66:55:d1:26:28:a1:a8:2e:75:ae:87:50:a0:2b:5b:
         b5:f0:6e:5b:9b:a1:bf:f1:88:a7:8e:7e:91:83:f3:c8:b3:39:
         23:32:3d:67:53:ce:5f:ff:2f:0b:d4:a5:1a:2e:4b:81:bd:34:
         d2:ae:81:39:6f:69:a6:b0:c2:51:ac:f8:4b:da:67:af:bf:fd:
         c5:4e:c6:8b:d8:2d:0b:d7:1f:14:0e:43:61:b3:09:4d:85:2e:
         e8:b0:6a:1c:dc:e3:e7:5a:03:67:ab:68:51:06:1e:d6:07:bc:
         fd:9b:13:6e:fc:0d:ec:fe:93:18:eb:12:e7:d1:f5:c8:3d:5f:
         83:83:13:b0:98:04:a3:32:9b:c5:55:2d:e6:a1:48:69:94:a2:
         de:28:24:6e:ab:24:bd:54:22:c6:1c:bc:d3:6e:08:20:66:e4:
         3b:92:0e:93:78:f2:8d:bd:f4:6b:4a:4a:0d:d0:49:79:1c:95:
         ec:ba:fe:1f:d1:5e:a7:e8:15:bd:44:0a:27:2f:fa:4c:01:74:
         09:32:b4:0d:55:27:89:12:41:ca:2f:4a:6b:5d:5e:38:63:b1:
         ce:2f:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----