Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa
File:                     07cfb406-d628-472a-94e3-493598a051d0.roa (raw, json)
Hash identifier:          BLYD1suKC8YI6d6Yb2xpL85siBY57Tnc8u6VryTgkag=
Subject key identifier:   57:53:12:48:4F:43:AB:26:05:BE:F7:72:38:B0:43:37:AA:C5:F7:51
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       70162A1D23C8D8F0E8BADAD6009A0851F9BE0B31
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:2040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:16:2a:1d:23:c8:d8:f0:e8:ba:da:d6:00:9a:08:51:f9:be:0b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=63ca95d07af2a2c95af131d2a15d5ff0b4c920265eb62f7edfaaba0d515cc179, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:5b:19:3a:16:e7:af:3e:14:90:56:29:8a:
                    95:ae:0e:aa:c7:fa:e9:61:e2:48:fc:36:9d:b1:c9:
                    50:0f:45:07:c5:40:11:88:1e:4c:86:65:47:30:b8:
                    40:1e:b9:d7:80:00:f5:6e:8d:3a:a2:89:61:73:bc:
                    73:d7:7f:34:a1:96:3d:95:2e:3e:bf:e6:08:b7:70:
                    ba:ad:9b:b3:20:6f:9a:55:5d:97:a5:e7:d5:8e:fd:
                    93:4f:64:16:2b:01:2a:9e:2e:9c:88:4f:36:aa:53:
                    3b:f5:14:d7:36:54:e4:4e:93:0f:f9:b4:18:57:89:
                    88:fe:86:b1:59:29:96:a1:2c:b5:b9:c1:64:f6:de:
                    86:02:6a:dc:d5:b4:35:8d:91:9a:e1:f3:59:ce:09:
                    72:da:67:7e:80:f4:29:be:8c:5f:c1:8d:2c:db:09:
                    93:6a:c3:ec:fa:7e:b1:8f:d5:c5:d8:1a:ed:a5:e9:
                    00:fc:2c:ec:9a:df:9e:82:2e:e6:47:a4:30:6c:03:
                    e6:c1:df:48:65:36:3c:04:79:37:0d:63:76:dc:89:
                    fd:74:14:ba:ae:27:c9:97:33:6f:ba:5f:4a:4a:9a:
                    e9:f0:70:f8:cd:4f:18:e3:3f:22:4b:6b:4d:f6:81:
                    e4:9a:ea:f1:dc:87:35:2c:21:9a:0a:2d:d1:bd:fc:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:53:12:48:4F:43:AB:26:05:BE:F7:72:38:B0:43:37:AA:C5:F7:51
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/07cfb406-d628-472a-94e3-493598a051d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:21:40:81:3a:c4:83:66:0e:36:b4:46:6e:58:06:52:b7:3c:
         b3:49:1c:fc:01:ea:31:2e:09:03:98:60:d2:12:e3:8c:2b:95:
         54:45:bc:28:92:1f:8e:d4:61:93:d5:cf:aa:d1:ef:86:4c:4b:
         f8:8a:08:86:46:dc:d6:0c:d0:44:1e:3a:82:66:17:00:a8:7e:
         3d:93:94:30:65:e6:ce:a9:8f:eb:9b:bf:0a:a4:cf:9e:5e:1d:
         9a:28:98:80:60:f7:fe:f8:a1:cb:d1:9c:3b:b7:9e:29:d1:22:
         0a:b9:1c:5c:25:79:97:d9:2f:33:53:19:23:cf:c1:00:cc:da:
         d3:61:3e:6c:40:ba:33:e7:1d:67:cc:e1:75:d8:09:75:2d:20:
         d7:d0:bb:99:c2:a8:a1:fa:26:48:aa:40:cf:bb:10:f9:61:97:
         c0:59:aa:a5:e7:7b:13:52:54:6a:e2:85:22:4a:ca:25:fb:7d:
         6d:36:0e:ec:8f:c7:ee:0d:0b:91:23:9e:0a:9c:32:ae:cf:90:
         ac:27:9d:a1:27:f6:e8:20:69:e7:c4:0a:8b:48:9a:d0:4b:0f:
         a3:5c:53:17:fc:43:4d:15:97:ae:49:56:ea:43:45:b8:95:17:
         3c:f0:16:74:8c:19:be:11:63:d7:ec:97:94:5d:ef:f8:2a:cf:
         54:a1:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----