Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c5cdd49-e98b-4e3d-8a61-094f381d2fae.roa
File:                     2c5cdd49-e98b-4e3d-8a61-094f381d2fae.roa (raw, json)
Hash identifier:          y+za3WkjgJgJ3KnMMY2YxyEPWCw1CI2wyJrAP+hLY+8=
Subject key identifier:   EB:41:77:73:83:70:19:61:B6:A0:92:07:2E:AD:30:E9:0F:D1:BE:99
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1D7EAB1A851A442B8E09993AD489AB57FA966F81
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c5cdd49-e98b-4e3d-8a61-094f381d2fae.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:9040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7e:ab:1a:85:1a:44:2b:8e:09:99:3a:d4:89:ab:57:fa:96:6f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bac191d5a64acb5afee4456f4a5f0b0465f6a360c95ea93637deabc6eb779773, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:9e:2a:98:8a:32:c2:ec:e1:a1:78:70:71:
                    1e:3e:fb:e8:70:b4:4d:7a:9b:51:e5:a8:e0:81:b3:
                    d1:6e:11:aa:9c:4c:56:a6:f3:3d:d5:d5:f2:18:01:
                    d2:ce:97:02:69:16:2e:6e:00:74:1b:bc:5b:d4:b0:
                    b1:89:d1:8d:53:88:03:e5:0b:79:dd:2e:c0:95:7f:
                    f0:85:7f:b3:34:f6:a5:15:d5:b2:34:f6:35:e5:97:
                    c5:24:d6:1c:e8:f4:61:d1:f3:1f:7c:49:1a:15:3b:
                    56:84:a3:f5:30:1c:97:5d:7b:0e:44:3c:2b:73:a2:
                    8f:68:90:e8:0a:6e:56:e8:a0:99:cf:97:bf:aa:c8:
                    90:cd:06:0d:41:51:9c:91:6e:0a:e9:5c:95:b4:56:
                    a4:ed:57:e5:91:d3:2f:bf:ff:8b:1f:77:58:f8:d1:
                    f1:31:67:b5:ab:d8:d7:d3:b3:37:21:d7:62:64:48:
                    18:a9:43:cf:d5:6f:4a:48:44:61:8a:82:00:04:0e:
                    aa:be:11:52:5b:3b:fb:de:18:62:de:32:d4:b6:41:
                    d8:09:df:a4:1a:2b:b7:93:1e:8b:39:84:db:da:ab:
                    1e:4a:8e:e0:d5:fd:32:04:38:32:16:b5:c2:42:a2:
                    a1:a2:cf:cb:bb:e3:49:88:9f:15:fc:ea:b1:64:d7:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:77:73:83:70:19:61:B6:A0:92:07:2E:AD:30:E9:0F:D1:BE:99
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2c5cdd49-e98b-4e3d-8a61-094f381d2fae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:3f:42:08:52:39:56:86:3e:b3:32:4f:dd:e9:7e:5e:ac:
         8f:ec:b2:67:ad:5e:69:b1:f0:28:64:b5:9d:20:16:02:ef:2a:
         5f:bf:6f:6d:83:d5:4f:56:c0:dc:91:c8:a1:af:f5:f9:db:65:
         30:14:ef:16:01:9e:03:18:16:e2:a3:33:4e:5d:56:d6:3e:28:
         2f:32:81:8e:6f:d0:33:2c:d1:0a:01:03:3f:51:be:39:f7:5c:
         04:96:42:d9:e9:90:a3:5d:14:cb:67:c2:88:f2:c3:69:b1:63:
         40:76:58:ab:e7:2b:b0:50:a6:c2:b9:ac:5f:f5:1e:53:8f:25:
         e0:1b:3c:c6:6b:f4:7c:5d:97:02:db:a5:a6:9e:fc:46:ea:a8:
         72:f8:17:1b:32:03:9b:99:e2:bb:38:3c:c7:2f:09:e9:5f:42:
         6d:dc:6f:7f:fa:0a:34:95:c3:e4:65:a5:d5:53:32:97:8c:41:
         0b:88:b2:7a:1c:b3:c7:09:86:f7:6d:66:22:ce:69:18:95:e2:
         4d:69:8a:a7:cd:13:50:23:5d:36:79:63:44:15:26:40:d6:bd:
         e4:f2:bb:8b:2e:89:fd:c0:a1:46:50:d6:74:c9:c3:f0:03:eb:
         3b:26:c4:ff:ba:6c:47:84:1a:92:d8:bd:b6:bf:0a:ac:15:c8:
         f4:22:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----