Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a90cf5-2de1-4992-9955-72ed2e3ba622.roa
File:                     04a90cf5-2de1-4992-9955-72ed2e3ba622.roa (raw, json)
Hash identifier:          9TEOk7V/Yq6PFf6vAe1Rrula7SscpoZHCJjayt0ETC4=
Subject key identifier:   B9:96:BC:1F:46:3A:2E:51:98:E4:17:BD:DE:5E:42:9A:BA:2C:F2:71
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3942AD5A29F86C993ED2B2C3FD2E51E283727106
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a90cf5-2de1-4992-9955-72ed2e3ba622.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:9000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:ad:5a:29:f8:6c:99:3e:d2:b2:c3:fd:2e:51:e2:83:72:71:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1fce41ccb8a382af7cb6019bbc785e30b1774d8ded41ed54dc39b358a2655cf6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:b1:6f:8e:d5:d9:9d:52:09:45:34:57:3a:
                    19:ee:3d:3c:84:00:c2:e2:a9:26:aa:0a:e6:01:88:
                    39:c8:7c:b6:0f:02:2c:31:d2:ed:5c:6b:a7:16:a8:
                    c1:3b:63:3d:da:cc:a3:58:fe:c9:01:db:f7:90:a0:
                    74:7e:6c:a8:4b:a3:3d:77:b5:67:e3:af:43:bf:59:
                    f6:6e:5f:80:76:ae:71:8e:63:2c:4c:e7:b5:eb:bd:
                    7e:71:05:a5:99:4a:c0:4b:2e:e3:78:18:cb:88:47:
                    03:e8:48:c9:87:87:a1:8e:43:9b:b4:1d:2a:d3:8f:
                    41:98:d3:9e:fd:6a:81:fd:9a:25:6c:59:1a:5a:90:
                    69:06:f6:d5:ba:12:b6:09:db:8e:7e:16:ac:68:59:
                    d0:a4:ef:e0:08:22:f0:eb:68:49:4c:88:84:20:fa:
                    03:ef:69:02:07:f7:13:10:b3:ea:34:9d:e8:7c:7b:
                    e9:3d:4c:ad:f2:53:c0:ea:57:d1:03:be:52:54:28:
                    f2:1f:a5:81:7c:69:e9:e2:00:76:01:c6:75:87:0a:
                    79:2d:92:5e:dc:43:4d:07:fd:3d:20:3c:ab:f9:67:
                    68:3a:45:f7:34:22:bd:e0:3c:5a:db:ff:54:f7:61:
                    13:29:65:85:d0:d8:41:d4:78:90:69:3d:b4:d3:60:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:BC:1F:46:3A:2E:51:98:E4:17:BD:DE:5E:42:9A:BA:2C:F2:71
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/04a90cf5-2de1-4992-9955-72ed2e3ba622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:e1:20:88:15:0d:24:4e:ee:e4:be:1e:7a:8b:59:85:36:
         de:7a:18:b9:b5:29:12:32:ad:f4:33:af:83:f1:af:4e:a4:5b:
         86:bc:56:63:d8:95:8b:32:f5:39:59:d5:d4:e2:c1:b1:b0:62:
         11:53:dc:48:71:53:52:f7:27:05:4d:5b:8b:6c:49:9b:6b:c8:
         3d:11:a5:4d:4f:49:91:02:96:8a:82:50:b5:ef:8d:8d:05:a0:
         a0:9a:7a:72:ef:eb:ae:6d:0a:07:fd:59:de:c8:bc:ff:85:b9:
         14:09:ec:c0:c3:a8:fd:20:74:18:5c:7a:44:03:a7:c0:46:ed:
         81:94:25:28:69:6a:c5:33:80:b5:63:fc:1c:1f:86:b8:2c:53:
         c4:b3:7c:1b:cd:37:3f:de:ef:9b:e8:dd:92:0d:93:03:13:46:
         70:08:70:ba:20:a7:51:77:cf:e8:37:2a:16:85:47:fb:a7:33:
         ec:4d:83:39:9a:9b:e7:d9:73:76:66:1f:d6:c6:bf:49:18:d8:
         03:bc:41:9f:18:52:c0:6a:96:ca:6d:7b:f5:b7:d8:b5:f0:4b:
         8e:80:8c:c3:95:30:62:7a:d9:09:5a:f1:ef:92:e5:47:ca:05:
         3f:82:25:0b:19:0a:76:f1:3f:e1:ce:b8:b8:7f:e5:b4:9a:11:
         eb:ab:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----