Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa
File:                     2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa (raw, json)
Hash identifier:          nIasOIP+mFfLcFfD62Kc2fOvdOlXPCsOBa+OpA4E7Gc=
Subject key identifier:   3B:2A:CC:E5:70:B4:11:A8:6E:1F:80:F4:C2:72:F8:38:11:F2:F1:13
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       23C1F7FBF5BAAD10FB96C14959D2E2F54E1DCFFF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:a080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c1:f7:fb:f5:ba:ad:10:fb:96:c1:49:59:d2:e2:f5:4e:1d:cf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bf49ebe3cacbd11eec6e89b107d266c9f47bc1b6b3717cb5f393018354b462df, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:9f:3b:7e:08:dd:1d:74:16:11:00:f8:d9:
                    4b:5d:46:00:57:64:3a:79:ce:fb:8a:a3:58:ac:71:
                    79:d4:09:82:74:83:eb:4c:cd:18:96:92:6d:6c:d9:
                    17:f2:17:e9:46:46:c1:fb:bf:bc:89:68:b7:f3:d4:
                    28:37:b4:9b:b3:6a:8d:e0:9f:35:96:d5:73:ec:88:
                    a9:4c:fb:b3:95:87:12:a5:28:53:e5:9b:40:e2:9c:
                    fd:35:6a:ce:85:61:de:ab:99:9a:1a:e5:f8:08:f6:
                    b2:1a:2c:69:87:84:73:a2:2d:7c:c8:bf:c1:9b:59:
                    15:95:1d:c2:1b:ff:03:1f:97:40:cc:f0:00:96:a0:
                    22:94:06:7d:1b:aa:4d:6f:b0:c1:ae:b4:5b:5b:9b:
                    6e:da:c9:29:77:5c:99:8c:c4:36:cf:35:42:cd:df:
                    69:9c:e7:0e:21:cb:70:3b:19:1f:c9:ae:ee:4a:76:
                    0d:ee:65:2a:9c:58:3f:36:79:9b:24:cb:f7:ca:7f:
                    77:41:22:5e:6d:e3:9c:e1:8a:1d:2c:36:8a:2b:f3:
                    44:74:70:4b:72:a5:58:fb:d9:27:3d:35:8a:1e:ee:
                    1a:99:e7:fe:ed:60:fd:db:16:6b:5f:59:34:10:df:
                    a1:cc:ad:3b:24:95:e9:8d:3b:3a:c1:bf:d4:39:5f:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:CC:E5:70:B4:11:A8:6E:1F:80:F4:C2:72:F8:38:11:F2:F1:13
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2ebdc1e9-0e4b-42ff-9a27-800b739897a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:33:09:27:8f:49:bd:1d:a0:46:57:e8:68:46:9d:92:bc:d9:
         29:7a:5b:01:15:96:c2:34:bd:2b:10:b0:35:5d:90:d2:17:3b:
         45:9e:ce:1d:84:5d:a4:78:cb:22:bd:8c:a6:4b:ec:8b:13:78:
         43:79:17:1a:32:91:d6:8d:73:c8:8f:4c:52:db:9e:c4:ed:63:
         f7:80:ab:d5:99:a7:af:c4:6c:e5:34:6a:16:31:a8:19:ea:e1:
         11:ac:2d:53:df:96:bb:ee:98:76:a9:7c:ab:76:32:2e:c7:ca:
         3b:a7:71:b4:b6:c3:f1:0d:84:84:44:c8:5b:33:a2:33:31:5a:
         ef:46:9c:12:ae:93:46:5a:06:fc:ef:01:18:29:57:df:74:ec:
         07:be:20:ab:8f:d0:e8:d8:ef:62:ea:79:1c:1b:72:33:a8:ad:
         bf:62:c0:7d:99:b4:9d:bd:a4:98:a3:cf:86:7e:78:97:61:e1:
         af:f4:67:04:12:6b:4f:73:4f:1c:f8:79:56:f6:af:f6:b2:37:
         a2:5a:d3:dc:cb:ef:11:9f:e7:99:ec:8c:5d:82:1a:df:15:45:
         c5:4f:60:1e:04:47:70:66:89:6a:84:8b:fc:23:d0:cf:fd:41:
         97:5a:71:fa:bb:dc:fc:1d:fc:2f:5a:0c:22:2c:9e:91:a7:5e:
         1c:2f:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----