Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa
File:                     1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa (raw, json)
Hash identifier:          1Dda76kYqIhhT5ZB18CRcw1R6VWJ5dnWHpD8/hrOXm0=
Subject key identifier:   11:0C:7F:AB:22:D9:2D:77:DC:3A:01:C3:14:AF:A5:6C:F5:B5:1B:ED
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       03AB161918362E167370D7CBE3F87280DD25D2D2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da18:c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:16:19:18:36:2e:16:73:70:d7:cb:e3:f8:72:80:dd:25:d2:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c73cda8f03186f53b96f383834b849a0a7699bc00d05342805901c6ff579acc3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:9d:00:d7:23:9d:1a:af:f4:be:ae:99:74:
                    90:51:0d:3d:d4:75:47:0e:65:e6:d8:a3:69:39:8a:
                    3c:ca:33:40:29:4f:b7:68:2e:b0:6f:f2:46:85:e4:
                    51:88:1b:7a:c6:c9:ce:78:13:17:ea:0c:b5:6a:32:
                    52:48:50:69:1e:9b:5a:f6:fd:4d:28:ef:00:7b:89:
                    a7:dd:a8:56:26:61:5e:8b:a0:8f:8e:94:53:22:44:
                    a0:cf:46:a7:50:45:db:4d:ca:90:8a:39:1a:18:5a:
                    98:9c:af:3c:5e:35:9e:6c:67:d8:5d:8f:07:83:d7:
                    0d:33:5f:80:ff:22:5e:f2:05:aa:01:08:f0:cd:9d:
                    5b:19:4b:5a:f0:31:14:51:89:8a:30:7b:96:86:04:
                    15:55:ad:ef:d2:20:7e:d7:14:7b:49:45:86:ae:56:
                    2b:a4:55:c2:bf:b6:b1:f7:e2:ba:bf:4e:9f:fb:73:
                    32:6b:7a:37:ce:5e:cb:22:b8:6c:a4:d5:09:8f:33:
                    b5:cf:e0:c4:e9:07:62:87:44:bf:3a:c5:12:aa:ff:
                    24:70:df:5f:20:36:c2:8a:48:63:47:ca:3f:91:99:
                    09:98:88:fd:d3:3c:fa:ed:5c:21:ac:58:0f:b0:6d:
                    af:26:28:cd:d7:93:61:71:9d:68:a7:8a:93:4c:94:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0C:7F:AB:22:D9:2D:77:DC:3A:01:C3:14:AF:A5:6C:F5:B5:1B:ED
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ee9fbda-9a9a-4e0b-9057-c318014d6ede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da18:c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:2a:35:70:a1:ce:34:8f:c8:be:2d:1e:5c:48:c2:8e:e1:
         94:a0:dd:ec:fb:73:3f:b4:70:21:ce:d6:8d:2e:31:ef:1f:7f:
         6e:3f:67:eb:32:41:b6:67:df:87:65:5d:9b:52:3e:36:5b:39:
         9f:fa:5f:78:95:e1:98:01:cd:7a:1d:e8:d7:95:8f:a6:51:5a:
         df:a1:86:92:31:da:60:e9:13:d4:6e:f1:34:e1:8a:49:c3:2a:
         2c:d7:35:b5:69:76:a7:66:79:31:f1:3e:64:ba:1f:c6:8b:fc:
         60:ba:c1:fe:56:a6:f1:ed:4d:93:71:56:f5:2b:b9:f0:e1:96:
         cc:e8:1d:b0:c7:01:30:7a:c0:c1:af:b7:fc:5a:d8:d3:fd:1c:
         59:c3:37:13:1e:4a:78:69:db:f9:3f:a3:d2:9a:a7:2d:9d:f5:
         7d:16:fa:8a:b3:b5:be:54:45:06:75:cf:1c:96:9e:95:fe:97:
         97:b2:48:48:7a:1b:78:6a:e0:9b:3f:41:07:ee:30:1e:81:d2:
         d5:99:49:ef:7c:b5:06:36:45:7f:e4:9e:0b:bc:bb:f1:7a:e2:
         38:d1:6b:bf:6a:81:2a:e9:d4:ab:93:fb:ed:fa:4b:73:7e:ee:
         21:b6:e7:c1:30:a7:4d:76:b1:08:60:6f:26:fb:3e:44:95:8a:
         fa:80:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----