Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa
File:                     f4478d0a-ce62-4685-9038-43fd6cd444d2.roa (raw, json)
Hash identifier:          u9U2W+eWBp0snJNJb4IVEMnGeIu0497RN52MRRy5e9Q=
Subject key identifier:   1B:F8:47:01:E2:EC:BB:47:2A:01:C7:36:61:F8:96:9E:E7:30:43:5B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EB1BD6BD53F255860159E3566595D39D4AB0456
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:6080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b1:bd:6b:d5:3f:25:58:60:15:9e:35:66:59:5d:39:d4:ab:04:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1e456ab838f601e516646ac1acb02c896816121ad0cdb15e4821be51f7ff54d6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:c3:32:38:20:ef:43:8a:ea:dd:ce:f2:04:
                    1d:ec:be:e6:2f:51:6e:7d:1a:fc:d1:4d:b9:00:26:
                    60:11:7e:ed:57:d6:41:7f:55:84:f1:d9:84:c9:4e:
                    fa:16:f7:5b:73:cb:c5:d6:e6:13:9d:ff:08:e9:ee:
                    58:8b:c8:72:b1:d6:7c:2f:99:09:bd:75:d9:c0:5c:
                    f2:27:2f:08:4a:66:e7:82:36:31:24:2b:6a:79:de:
                    5b:f6:d6:91:4d:5c:80:6e:6e:01:b3:63:f0:b5:19:
                    f7:8c:87:fb:7c:2c:3e:e2:98:7f:9e:07:a0:f5:98:
                    95:bf:8f:c4:b0:00:ac:9b:96:fb:05:69:f6:84:8f:
                    81:1d:ab:9e:6e:3f:ec:59:4f:c6:92:09:65:3a:08:
                    c4:35:34:80:59:f1:4f:66:87:8e:e1:1d:44:59:25:
                    cb:76:13:83:aa:a6:34:80:85:68:21:dd:31:b2:f1:
                    52:1d:ba:80:5d:d5:7b:5b:c4:c9:b5:c5:b5:0f:cb:
                    75:11:2c:fd:30:5c:48:d9:66:7f:78:82:05:9e:fb:
                    d7:89:cf:cc:fa:0d:6e:0a:d3:86:3d:9d:1c:88:0c:
                    ae:07:fa:f9:a1:ed:55:7d:73:c5:70:57:97:ca:2e:
                    f4:18:40:da:29:5d:23:50:7f:ba:09:bb:c2:65:2f:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F8:47:01:E2:EC:BB:47:2A:01:C7:36:61:F8:96:9E:E7:30:43:5B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4478d0a-ce62-4685-9038-43fd6cd444d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:6080::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:6a:44:06:fc:55:86:2e:13:b3:34:b7:6c:62:27:81:a7:51:
         66:77:f6:85:8c:6a:d7:f4:89:fb:08:5c:1b:b1:c8:00:95:c8:
         f2:6a:4a:c1:6b:0e:14:d9:46:b3:79:f0:cf:82:90:63:62:dc:
         1d:24:c0:1f:3b:77:c2:d4:0b:bb:79:8e:34:b2:fa:a5:b7:31:
         c4:15:a6:ea:32:7e:33:e3:6f:de:ca:3c:e8:d1:e3:11:38:79:
         e6:44:74:f7:08:bb:c6:67:51:78:1d:f0:53:6a:e7:8c:3e:a1:
         e9:ba:57:bd:51:6b:4f:a7:0b:79:19:98:27:89:c5:17:5b:a5:
         06:09:7b:5e:3c:72:7c:33:ea:1e:b4:7d:bc:30:1b:38:2b:43:
         39:90:b2:68:b9:6b:e3:b0:e5:f1:e3:c4:32:df:31:44:c4:c6:
         fe:8c:c7:26:96:a0:1f:a6:54:6e:6e:90:f4:ea:24:c4:4a:cc:
         ad:4b:ad:bd:e7:ef:ab:3e:34:4d:00:34:4b:35:1b:db:75:3f:
         d9:f3:ed:d9:04:7c:d2:fa:99:45:ff:2e:18:da:d8:5e:20:ec:
         e3:8f:87:ff:71:f2:74:78:7b:3f:39:24:c2:71:ee:ad:9e:c3:
         be:d3:6d:63:5e:56:d8:a0:eb:7e:97:ad:3b:60:f0:58:78:62:
         a9:54:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----