Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ee57ef-3324-4ff2-a960-650eb31bcca0.roa
File:                     27ee57ef-3324-4ff2-a960-650eb31bcca0.roa (raw, json)
Hash identifier:          aOtaApXA8f4MiCgcU3QKU0VdDNtQEIfoQezt6jrTOrE=
Subject key identifier:   AC:CA:EE:DC:B7:49:FC:E9:28:88:A3:81:3C:C1:73:D5:9A:9A:B1:57
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       64883F67F70157022DB1593B03977E4A4723D0CC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ee57ef-3324-4ff2-a960-650eb31bcca0.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da28:8800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:88:3f:67:f7:01:57:02:2d:b1:59:3b:03:97:7e:4a:47:23:d0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1d433a2f4c2d8341162ef9b49e6dc24ce0ffc836ddb0fe26836b0da404e8614a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:e1:55:b3:46:e1:ea:df:82:df:bd:07:4b:
                    da:eb:79:41:58:67:06:d7:60:08:a5:7e:49:59:b8:
                    c3:13:6d:c4:e4:34:c6:77:7c:c1:8b:3d:82:a0:41:
                    22:37:48:3c:03:a2:95:2b:88:25:47:59:38:0d:5f:
                    3c:d9:54:2a:a9:b6:7d:5f:56:96:47:25:65:d5:50:
                    3e:ea:3f:96:12:90:f2:da:a6:9a:de:c6:97:78:38:
                    ce:23:e8:95:05:5e:f4:19:76:e0:12:de:71:9a:58:
                    6f:39:9c:a2:00:44:52:06:80:47:20:4c:5f:40:3f:
                    0c:c3:97:93:ca:f5:fc:b5:ff:eb:1e:bb:d3:a8:1f:
                    40:9a:c0:5b:8b:57:4f:5a:3d:f6:67:95:a8:10:9a:
                    74:9f:5e:48:a5:07:f0:b8:61:9f:a6:46:b9:fe:4a:
                    4f:06:84:41:87:b2:fe:7b:e5:6e:01:36:bc:c5:b3:
                    53:d1:ed:86:d6:28:fa:13:b4:b0:ac:74:bc:c1:68:
                    70:6d:fb:02:1d:1a:14:52:72:f5:2a:3e:1d:79:d5:
                    7e:19:64:d4:de:0c:fb:47:bd:d9:66:23:78:74:76:
                    ea:b5:c9:bc:10:26:4b:e0:4c:60:a5:fa:b8:06:b2:
                    ab:6c:2e:4a:f4:41:ea:03:1b:07:e9:32:47:92:cb:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:EE:DC:B7:49:FC:E9:28:88:A3:81:3C:C1:73:D5:9A:9A:B1:57
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ee57ef-3324-4ff2-a960-650eb31bcca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da28:8800::/37

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:41:7e:1c:73:f6:4b:88:d6:6c:e9:88:43:33:dc:d1:9c:
         20:a5:aa:9b:85:0d:62:5a:0b:60:4a:ce:87:cf:46:5a:10:a8:
         8d:10:c5:45:b7:29:00:e4:72:19:f6:c8:91:f3:0d:79:90:cc:
         f6:14:f6:24:52:63:cd:dc:5e:bd:93:86:0a:78:f5:df:72:7c:
         af:e5:cc:c5:0f:f2:6f:f4:f4:e8:01:59:bb:af:fd:83:1c:bf:
         32:72:16:fb:f5:d3:bb:62:f0:7c:86:72:17:b3:5d:28:f3:6f:
         6c:79:2a:3a:65:97:70:5b:cc:c3:4c:4a:a2:23:87:7c:fd:80:
         98:01:a0:62:96:35:f3:87:c4:53:df:79:28:c6:16:85:5a:74:
         21:8c:e5:d9:27:5a:8c:29:a5:67:0d:72:ca:c4:c2:26:98:4e:
         6f:52:7d:f9:89:f5:80:80:26:37:30:f6:43:73:25:a9:3f:9a:
         3e:85:48:24:90:f8:4d:23:28:a4:15:71:84:5b:5e:99:57:4e:
         74:9f:06:cc:bd:3a:9c:8e:50:04:b4:0e:19:57:68:56:19:d8:
         fa:7e:b3:ce:0a:6c:db:55:08:8f:b6:1c:8a:7d:fc:6c:3f:81:
         49:67:bc:6e:25:d6:b2:0d:95:a0:92:2f:39:9b:75:34:a4:e2:
         f7:45:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----