Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cd5ed4-3b35-4d90-8e44-d72d219dc120.roa
File:                     24cd5ed4-3b35-4d90-8e44-d72d219dc120.roa (raw, json)
Hash identifier:          vJdkUdUQSs1oDDXlLct7sgrHPXgxAkt+ynSK5jvnt6Q=
Subject key identifier:   D9:36:F2:CE:AA:08:76:F2:74:C3:2A:CB:EB:43:57:71:1C:F0:C6:5F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       45162828F7038C7A2086C54F66BD6554245A12CF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cd5ed4-3b35-4d90-8e44-d72d219dc120.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:16:28:28:f7:03:8c:7a:20:86:c5:4f:66:bd:65:54:24:5a:12:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=609a63bc882672dcb858800997ec2978cca6f700bbc39da49a69c0068eb1a01b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f9:12:85:e5:19:b5:c6:ef:b6:b1:05:80:fa:
                    1a:b3:5a:5e:57:81:28:ca:c6:51:c7:c5:75:f2:c3:
                    83:fe:68:f6:56:c0:cc:c5:3f:14:47:31:fa:be:b6:
                    d1:55:ec:53:23:fb:21:54:6d:3f:14:d8:e4:73:74:
                    34:e3:b8:36:08:cf:41:59:db:7a:f1:7f:26:8e:20:
                    a2:75:d1:3a:3c:27:54:b8:d6:1b:ee:f5:ca:97:fa:
                    7e:74:77:18:93:19:32:54:70:89:bc:95:09:47:4c:
                    1b:c2:e0:75:17:b9:fb:49:23:94:75:14:1e:46:a2:
                    b5:66:41:4c:91:cf:10:f2:73:ae:0a:a4:36:a2:c7:
                    0c:00:a9:ef:ee:f8:3c:e3:ac:c2:58:d5:7f:09:48:
                    2f:24:5a:d8:14:c0:e6:cb:6e:93:f2:4d:30:70:d9:
                    f7:50:f7:61:63:02:d1:2d:e8:d9:b4:67:90:eb:3e:
                    f7:1b:76:a1:be:36:be:3b:59:ef:12:af:3c:76:0c:
                    33:eb:18:df:91:92:7a:0c:58:e7:55:b3:74:15:d3:
                    6c:6d:82:cb:ce:d0:29:45:ef:93:e3:bd:e7:09:62:
                    88:af:63:a3:f6:6b:69:6e:a6:67:3c:1a:e2:b6:e3:
                    9c:6e:7f:15:8a:ca:ad:0c:0e:ac:11:65:44:93:b1:
                    0b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:F2:CE:AA:08:76:F2:74:C3:2A:CB:EB:43:57:71:1C:F0:C6:5F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/24cd5ed4-3b35-4d90-8e44-d72d219dc120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:ab:40:89:b4:46:d1:f0:21:4c:90:b3:cf:fc:9d:53:24:
         71:59:45:75:e8:cc:87:bd:92:e0:bd:23:92:e0:ea:60:2a:70:
         a8:15:99:d9:65:b8:89:1d:31:5a:0b:cc:45:9e:13:96:40:aa:
         09:21:ee:50:a5:38:83:d3:f4:10:7d:b2:97:d7:bb:c5:08:5d:
         5e:a8:29:82:44:b1:27:56:28:27:cc:05:67:c6:b7:7b:73:14:
         76:8d:40:96:f9:2c:5a:9d:4f:16:f4:21:11:41:00:1e:2d:03:
         d9:bc:9a:54:32:bf:f6:a1:3f:34:3b:ea:22:e7:bb:8b:48:80:
         1b:36:55:14:c5:e5:80:46:25:a1:95:ba:7e:14:16:bc:22:b2:
         88:03:73:0b:98:73:a7:2a:4f:33:14:b2:fb:3f:56:55:2e:f0:
         6b:d9:56:0c:32:fd:ad:19:18:45:61:6f:08:40:d1:11:f9:e2:
         5a:a6:10:22:84:ab:66:6c:a3:51:05:2d:70:b2:fe:d1:68:b8:
         a8:be:f5:7d:38:b7:ae:a1:fd:71:cc:4d:76:28:3d:7d:fd:1c:
         a5:e6:6c:c7:af:91:d6:d0:b6:a5:de:d5:3f:52:30:7b:3b:3f:
         8f:d2:21:eb:72:f6:2d:2c:8c:19:2f:1a:90:33:a5:9f:4d:83:
         0f:5a:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----