Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa
File:                     2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa (raw, json)
Hash identifier:          yA6FeRFFM22+Hx8V/N4Mj25I9jOvjHkwD6EobfVvONs=
Subject key identifier:   26:40:2C:4B:D2:27:9D:AF:21:FE:76:C0:A5:E1:A3:8A:C1:B1:0B:49
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       30E6C9E7ECF0664CE4EE810DF0D40117DB118632
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:c9:e7:ec:f0:66:4c:e4:ee:81:0d:f0:d4:01:17:db:11:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=651f5b13c00e50d3e91438ce46942712a9de32892dd745daa7d213437cf4b493, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:40:9f:98:1c:05:41:ea:a9:27:64:b5:2c:
                    50:05:27:f1:a6:7d:86:89:89:df:bf:d6:df:a6:5b:
                    a0:3c:3a:a7:19:f5:73:4a:0b:70:3f:87:eb:15:a3:
                    fb:e0:d6:58:f4:b0:b5:2a:f5:b1:b6:e9:44:64:6e:
                    42:03:87:e2:a7:91:5c:3d:a0:fa:bb:7c:1c:5d:27:
                    06:52:93:ba:64:b8:04:58:81:0c:2f:25:65:9a:b5:
                    71:85:29:89:16:99:d3:f2:9d:77:d7:c3:18:d7:f5:
                    41:dd:d9:92:7e:47:74:8f:0f:b6:67:a7:fa:5c:a7:
                    f4:0b:5a:f7:69:89:09:7a:6d:6e:ab:53:77:70:a1:
                    e1:7f:33:35:ca:3f:8a:c4:ba:b7:38:1d:a9:b5:3d:
                    ab:65:e3:dd:04:5a:b3:64:bb:ef:fd:f3:e7:3a:b0:
                    28:53:4e:4f:3b:4d:69:73:fc:3c:9b:e7:6d:e9:f2:
                    dc:47:c4:97:2b:26:49:6c:34:2f:38:ae:66:1e:ac:
                    31:47:ab:2d:1c:7c:62:81:19:46:89:03:e2:88:6f:
                    3f:4e:ff:d8:ec:0d:d2:83:0a:0f:7b:4e:7c:59:f0:
                    cf:03:9b:b8:64:a3:4e:53:25:df:08:16:bf:ca:0c:
                    ab:c5:4f:5a:21:4b:fc:27:5b:6b:b4:9b:65:2b:10:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:2C:4B:D2:27:9D:AF:21:FE:76:C0:A5:E1:A3:8A:C1:B1:0B:49
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2a886a6c-2239-4f2b-b527-519cf5a4bab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:5a:bd:58:36:68:68:7b:bb:e3:30:bb:c8:01:9c:48:e6:
         95:54:cf:bc:22:c7:98:b3:db:c0:84:48:cc:b0:f5:f1:95:d9:
         aa:93:c3:64:3c:ab:82:46:bc:88:ac:6a:53:83:60:cd:ea:38:
         58:28:ff:41:cf:be:69:c5:70:e1:dd:eb:43:da:2f:09:84:f5:
         d5:14:c8:5c:57:ba:77:1f:46:cf:3d:a9:fd:26:b1:41:88:fc:
         1f:8b:92:85:57:b1:27:fa:aa:52:b0:4f:54:47:04:0e:57:bf:
         7e:fc:5a:0d:2d:57:70:d3:90:77:7a:3d:8e:3a:ad:3a:aa:01:
         aa:14:a3:d9:e8:2d:73:cb:7b:36:d0:b5:6c:4d:99:ef:b8:30:
         45:b0:d4:5f:b3:f2:85:25:ec:2f:b6:86:a3:12:e2:71:5f:97:
         09:61:c9:0e:74:ee:1a:07:5d:7b:08:32:fa:71:c0:d9:6c:88:
         fe:b8:61:cb:e4:ca:14:29:26:52:be:18:21:c7:79:65:e1:3d:
         70:bb:6d:40:45:10:56:99:3b:2d:58:a0:58:84:c8:3c:73:db:
         cf:c5:ea:55:b5:0a:03:cc:6a:b6:7b:21:67:79:f9:df:f9:20:
         4e:9f:c9:34:59:13:0f:4f:5e:7d:4e:8b:c9:1c:9a:1d:22:dc:
         53:b7:bd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----