Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa
File:                     0f173998-8628-44e7-98de-49838888c622.roa (raw, json)
Hash identifier:          NzB9cDXIaoFdZyPfuUqB116Y6ze35ZN1i2oW7NtRGI8=
Subject key identifier:   52:F9:C9:B2:55:44:C3:19:F3:93:0A:18:C4:D9:F9:70:0E:13:A9:85
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       22A74A3B447054B2CE7B9C13F8C488DC74350720
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:c800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:4a:3b:44:70:54:b2:ce:7b:9c:13:f8:c4:88:dc:74:35:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e97a218b5321b5a80a574f2f779808d73fd47ba4cd17048d742b724cdf2029ee, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:fd:75:71:b8:2c:c4:cb:58:69:27:5d:7f:
                    5d:a1:9e:21:b8:16:02:fb:0d:ce:59:79:c8:29:0a:
                    97:76:32:66:0d:05:97:ae:cc:63:a2:3e:b7:a3:08:
                    3b:83:80:4b:96:fb:5e:63:5d:f3:24:a1:1a:69:78:
                    8b:02:bf:a9:7b:a5:3d:d1:54:24:1e:a2:3c:a2:42:
                    73:fd:21:83:f8:cb:3e:11:4b:be:0e:d1:f7:68:97:
                    46:ee:e7:18:54:52:0a:c2:e0:ec:f3:4f:49:92:60:
                    71:03:2c:c8:d3:6d:c9:6f:7e:be:ae:a6:7f:19:99:
                    b8:7d:b2:90:2d:e1:ec:5d:e3:5a:63:22:0f:14:30:
                    be:06:23:fd:1f:72:65:1d:5c:4b:86:48:d5:fd:eb:
                    c9:f7:78:56:df:14:78:f1:fc:ec:50:34:7d:f6:e2:
                    a3:07:ac:61:3b:7e:eb:c7:40:9e:93:e7:f5:8b:ca:
                    d1:a9:e8:1f:47:1a:90:96:61:13:0c:24:e3:d9:9d:
                    7c:e1:d7:b6:65:a5:03:3d:ee:a7:40:eb:fd:aa:b9:
                    d5:b9:96:aa:8a:19:78:ae:e3:84:54:8d:ae:04:53:
                    0e:6e:3c:30:ae:10:79:2f:ee:94:55:62:ff:ad:a7:
                    48:67:c5:22:ff:94:46:d6:7c:70:ae:6e:47:08:b5:
                    ef:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:C9:B2:55:44:C3:19:F3:93:0A:18:C4:D9:F9:70:0E:13:A9:85
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0f173998-8628-44e7-98de-49838888c622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:74:81:2d:29:fe:d2:8a:2f:d2:02:77:2f:e2:a9:f7:f0:f1:
         26:2c:bb:c0:25:a6:97:91:0a:b7:9b:54:7f:f1:4d:4f:21:35:
         9b:6f:43:71:ef:4f:19:f6:35:e9:b8:61:40:a5:77:79:de:4d:
         85:94:9b:0b:51:e1:53:45:42:4f:65:59:31:21:59:f5:34:38:
         a8:d8:67:28:19:84:80:99:7e:9f:b3:8b:32:89:c1:ef:73:57:
         1c:ef:4d:5e:73:7b:4d:dc:b4:ac:da:30:30:2d:4a:4d:50:da:
         98:5b:0f:68:1f:a1:40:4c:e2:c8:33:5e:94:43:82:6f:3a:51:
         82:6e:eb:13:66:bd:75:8b:57:6b:62:dd:06:67:72:0b:e7:a8:
         8e:47:00:42:21:51:34:69:f7:64:ea:44:a8:85:35:e1:f6:85:
         af:79:b7:40:81:5b:e6:5c:3c:af:4d:7e:46:7b:2c:e7:2e:4a:
         2b:ad:32:52:0c:e1:6d:6c:92:21:3b:3a:b2:5a:bd:8e:0d:88:
         07:30:3e:a8:2d:1a:ae:90:e1:9f:e6:18:ca:54:e8:17:eb:ab:
         c3:3c:0e:c7:18:79:52:3b:a1:05:a6:c0:43:5b:a0:27:01:1e:
         1b:c1:62:d3:ec:62:d4:8b:8c:80:8a:97:fc:5d:fe:81:97:26:
         6e:c8:c6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----