Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa
File:                     16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa (raw, json)
Hash identifier:          dIaxntAUiPgiB9rad0HWa5DmbPbeaqt3wkwcin0iqtg=
Subject key identifier:   99:2F:2D:BD:72:6E:EE:96:D6:CF:31:9A:CE:2B:B1:A0:C4:2B:E8:31
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       087BE79C862B38F2063D4FFF0505BE0374BEF93E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:c800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7b:e7:9c:86:2b:38:f2:06:3d:4f:ff:05:05:be:03:74:be:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f260b27438374916c1053b1134f7f364b693ea510301c7e953720f4b8fe2d8cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:26:c1:fa:1c:be:58:96:0b:02:8b:c1:a0:
                    84:02:de:ea:f2:b4:8a:21:4f:a7:f5:dd:5f:63:8e:
                    3e:f2:d2:9c:23:ad:05:ad:a2:c8:a3:e7:37:f6:30:
                    24:60:42:6b:e7:95:52:5e:02:68:5a:be:e8:a6:a3:
                    0f:3f:cb:6b:7c:54:46:51:fd:58:d1:a4:a4:97:6f:
                    3e:88:9c:c5:f9:5f:d5:4b:68:03:f6:71:e7:6a:f3:
                    f1:70:82:47:10:aa:8c:f2:ef:20:33:3a:23:b6:99:
                    a1:54:dd:01:33:e3:70:28:15:62:e8:a3:35:94:a4:
                    9a:24:77:f6:74:1a:19:72:c9:58:68:4f:7d:45:4b:
                    84:15:d1:2d:2f:e3:5d:36:8b:a3:08:dc:88:37:9a:
                    a4:0e:8d:23:4d:17:86:75:5d:3c:c0:82:75:ed:95:
                    22:0e:52:e5:52:62:6b:db:2a:e2:df:53:38:80:d9:
                    27:ea:f1:69:cb:2d:04:b6:38:24:45:e0:44:a7:33:
                    d9:75:ae:74:44:42:b7:87:3a:b6:78:34:67:75:e9:
                    8f:3e:de:7e:2b:0c:46:c1:07:ad:28:73:f2:50:cd:
                    11:b0:39:19:db:01:59:97:90:83:26:39:b5:19:94:
                    ef:3c:16:d9:3c:67:9e:37:f4:37:2e:dc:d4:84:79:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2F:2D:BD:72:6E:EE:96:D6:CF:31:9A:CE:2B:B1:A0:C4:2B:E8:31
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/16fa5cd6-d620-4eea-82e0-c8708b35fa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:06:91:a0:b5:bf:07:74:0d:d4:d0:01:81:f8:92:86:fb:0b:
         fe:b9:28:37:72:1d:bd:da:a9:38:6f:28:eb:f6:71:ff:8f:43:
         c1:6c:75:dc:6b:1f:ab:0c:d2:d7:6b:fc:9b:1f:f6:64:f5:24:
         be:ab:07:56:6b:68:e8:de:dc:04:67:87:a0:24:4b:83:c9:7a:
         00:18:8b:88:d7:c4:58:be:01:2e:23:1f:92:94:f3:80:66:d7:
         ad:fc:b0:d9:26:92:61:7a:eb:29:43:36:01:73:61:e4:0e:67:
         22:c2:77:65:82:fa:0e:45:66:e9:eb:dd:c3:77:21:9c:10:0b:
         52:ba:72:60:4e:0d:3b:c2:94:f4:a4:ab:a4:dc:1d:39:40:8e:
         70:d0:9d:97:b4:0d:33:21:e1:a2:f7:8c:a6:77:d9:88:f1:52:
         31:f7:d8:e4:53:dd:a2:0f:a1:3b:ed:ca:0f:a5:f0:6f:92:07:
         a5:79:50:53:a2:ad:94:23:4c:85:d3:2b:7c:ea:2c:68:bd:60:
         74:f8:7b:1b:06:cd:b0:fe:26:ef:55:da:42:c5:fc:c7:84:59:
         72:cd:55:8e:e9:7d:7a:e1:73:16:c5:65:91:8c:fc:fd:a8:ef:
         a5:a3:28:9d:1e:0e:67:4e:de:cf:8f:17:73:ac:c4:d2:70:f7:
         10:82:cf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----