Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa
File:                     f9d49fe9-a284-47e5-8002-41310ce8752e.roa (raw, json)
Hash identifier:          TZK++hQC30mZRvg+uXAmqlnlQ9RUlFZuQBbnYdlQuoY=
Subject key identifier:   D1:8E:D6:9C:E8:2E:A8:F7:A4:C3:62:C7:11:43:17:68:DF:77:B6:B5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5A08AD9320DC59BFD1B326B12E810D719CA958E3
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:1040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:08:ad:93:20:dc:59:bf:d1:b3:26:b1:2e:81:0d:71:9c:a9:58:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=31d1d7729b0574c90255416fb20f0ea0a1abbb08ab22731bebadad89eb55d052, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:b0:85:8b:0f:26:a0:9e:21:b9:be:5b:a6:
                    89:a6:cd:d0:59:3f:c7:94:df:fa:69:54:35:bd:fc:
                    00:70:94:d6:c5:89:5b:ce:1f:fc:84:b8:f3:d0:10:
                    8c:29:33:92:59:fb:c2:14:67:ce:f5:13:f6:c1:4e:
                    6f:38:61:7e:7e:13:1a:26:14:e6:46:fd:12:ac:a3:
                    1d:32:7a:8d:08:da:9c:fb:00:27:65:16:38:8f:e5:
                    41:5f:3c:94:e1:e9:7e:fd:81:67:51:be:bc:84:34:
                    5e:e7:60:8c:8b:b1:a1:ef:2d:44:46:57:9b:28:39:
                    ed:88:2e:40:4a:8c:47:e5:34:34:4f:ff:05:c8:12:
                    7f:5e:21:bb:1e:db:60:79:fe:23:f8:38:64:76:eb:
                    f8:4b:c4:ba:b3:0c:02:8e:d7:52:59:a1:e1:7c:aa:
                    45:2e:7e:39:9c:99:ea:81:50:59:70:85:86:1d:c3:
                    f3:06:0b:33:37:57:b5:12:a6:f1:31:6d:8c:d9:8b:
                    fb:c6:4f:64:70:67:12:38:d2:7a:4f:48:96:2b:b1:
                    ff:45:30:29:5c:ef:d5:3e:7e:9e:65:76:af:34:62:
                    6a:97:29:98:62:bf:10:b1:02:cc:0f:c1:9c:d6:44:
                    71:9c:84:f7:56:4d:35:33:5c:c9:30:35:13:5b:46:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8E:D6:9C:E8:2E:A8:F7:A4:C3:62:C7:11:43:17:68:DF:77:B6:B5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f9d49fe9-a284-47e5-8002-41310ce8752e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:e7:1b:f6:df:67:f4:c4:a7:a4:39:4d:2b:66:03:c2:d5:6d:
         0b:af:2c:0f:61:05:72:10:7d:23:0e:00:05:b6:9a:99:d1:3f:
         3c:0f:20:91:e6:b8:21:c9:f0:7c:42:e9:3c:19:8d:3d:22:a0:
         dd:32:ae:b9:af:01:d7:54:30:0b:11:a1:d3:ef:89:c8:ae:fb:
         77:0e:d9:b9:07:30:9e:10:c6:a6:a7:17:ab:d6:89:a7:cd:d8:
         f8:0b:cd:af:11:f2:b4:1e:6e:a0:eb:12:ff:93:14:42:b8:31:
         cf:48:38:86:7f:ce:e4:75:00:d7:82:26:8c:7b:bc:85:38:fa:
         35:04:cc:0d:cf:7a:e2:db:f3:5f:62:ad:14:ad:27:d0:78:fd:
         55:65:ec:94:4d:ce:27:6a:12:89:98:76:12:60:ad:b6:f7:eb:
         a8:b6:ad:cf:59:25:70:4a:40:e9:2a:05:98:8f:f8:d3:da:d5:
         d6:93:8b:13:90:16:ba:34:a1:f3:41:56:19:7e:12:8b:60:31:
         f8:f5:99:21:d5:65:40:b8:5b:0f:bf:41:f4:f5:a7:6f:5a:ea:
         2b:4d:87:ac:c7:47:7b:c3:82:9c:01:c5:fd:92:63:d3:18:e7:
         24:6c:c2:53:bc:a9:9b:28:11:5e:56:ef:de:ed:08:a7:d8:fd:
         70:4a:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----