Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa
File:                     02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa (raw, json)
Hash identifier:          TWIzS6t7qGTYRmvCp61OsZe4S/2wUHBkd4qH2ZoRFz8=
Subject key identifier:   95:34:EB:C8:7B:A3:F5:FC:48:45:43:4C:01:FA:0B:6C:4C:F4:7E:A8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       56D396DD3CEC68747267F361603C02B648B83DF0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d3:96:dd:3c:ec:68:74:72:67:f3:61:60:3c:02:b6:48:b8:3d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=e6666c1e606bb66d57fdc6d99bca7b2703db8e1b75a1d2ee5c671c1898b0091c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:ff:bc:3a:cd:f5:d9:e9:c7:d0:c9:ff:7c:
                    b4:63:3a:6c:06:83:eb:12:5d:b4:2b:29:1d:78:e1:
                    9e:11:bd:23:df:e0:3c:2e:94:72:9b:4b:23:a9:5b:
                    0b:60:af:9e:03:53:f6:b1:29:49:fc:0e:6a:d9:78:
                    b8:f9:9c:fc:4a:25:e1:b5:67:f9:d8:ca:7c:68:0f:
                    42:fc:fa:ed:70:03:74:ad:24:66:55:6a:a7:c9:63:
                    4c:c3:07:78:1b:e0:16:be:54:14:4b:8d:07:25:68:
                    66:55:1e:6a:7b:ad:52:06:a1:95:81:9e:0b:f0:24:
                    cc:e6:2a:c4:d6:23:b7:7a:d5:16:ad:10:de:23:42:
                    5a:bd:c1:19:42:6a:95:02:81:fe:41:01:43:03:65:
                    13:47:12:b9:66:7e:96:df:43:49:20:ed:46:65:1b:
                    84:20:29:9a:76:2c:4d:fa:05:12:92:9f:6c:e2:a6:
                    c4:c6:dd:b3:bd:28:63:d8:54:8f:9c:11:6b:34:ed:
                    14:ca:cb:08:eb:ca:80:fb:5b:48:5f:2f:72:02:31:
                    12:71:eb:36:fc:ec:c1:a2:39:f8:7c:e6:d7:46:84:
                    32:c6:c1:5f:45:55:1e:73:26:ba:a8:cb:56:28:44:
                    68:b4:d8:d3:ec:4d:eb:a9:9c:3c:45:da:90:5e:b9:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:34:EB:C8:7B:A3:F5:FC:48:45:43:4C:01:FA:0B:6C:4C:F4:7E:A8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02a51e54-6bb5-43e7-94d0-a8e95771f2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:42:ee:30:c1:bc:77:96:f0:8d:84:bd:84:66:3d:c9:cc:35:
         ff:7c:e4:33:b9:ad:8e:7a:ff:ca:16:16:18:c9:81:b0:f9:6f:
         88:28:c5:62:35:16:72:cf:bc:77:09:52:d8:8e:99:28:f8:83:
         0d:87:76:d1:87:2e:50:d9:df:8c:70:15:77:5a:7f:ab:7f:e3:
         28:0e:56:f9:12:5e:8f:dd:9b:8a:48:b3:09:e0:be:83:47:3a:
         4f:9d:68:8a:ec:ee:0b:04:24:12:57:2c:f8:bf:63:42:76:9d:
         14:de:d5:bd:38:f1:ba:54:b5:52:c9:e6:44:32:ff:98:4a:8e:
         6a:0a:a5:9e:29:2f:1e:8f:38:a8:7c:74:fb:15:6c:d9:e5:9c:
         14:09:52:0f:d8:b9:24:07:5c:46:ce:c4:ea:c9:ce:e6:6c:93:
         a3:00:d9:dd:4d:fc:e5:b4:88:dd:7d:da:aa:a7:74:aa:37:72:
         fc:04:8a:66:42:94:75:9b:fa:2c:90:e8:99:eb:5d:aa:55:b8:
         f7:76:e0:bf:40:59:a9:29:32:24:35:6d:5c:a2:7b:9d:24:cb:
         87:42:17:7b:03:6b:7b:f0:5e:ea:ed:37:63:ef:e9:f0:e2:31:
         ed:a6:c6:a2:12:83:16:c3:fd:27:10:f0:bf:5a:55:c5:06:0e:
         59:26:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----