Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa
File:                     36780eb4-ec67-447e-93dc-7aee759e06ed.roa (raw, json)
Hash identifier:          KcDyUFl6PMr7LP1eG6jSx0Q6qrUVJQt2lNNRMZn+bpo=
Subject key identifier:   92:14:06:9C:40:24:BB:F5:24:A9:F6:25:A1:50:24:60:7F:C6:26:2F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4F624FF6193DC737F81E2CECE516254CE196EB20
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:62:4f:f6:19:3d:c7:37:f8:1e:2c:ec:e5:16:25:4c:e1:96:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c5f7f54c407d091d3c6d104f9da605e18cd6aa3ef6358c026792983b59d02715, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:20:88:0e:a1:7d:d9:17:03:84:fa:3a:ce:8b:
                    38:72:ca:42:84:87:ee:d7:b8:22:ea:3c:1b:6d:81:
                    83:06:97:61:cc:e4:d3:73:7c:28:b2:a5:45:76:1c:
                    24:32:9f:cd:76:2c:e0:03:e3:66:3d:5b:5f:25:10:
                    b5:56:73:0f:69:bf:eb:1f:b6:16:17:6e:60:33:73:
                    b1:c6:79:d1:01:3c:5f:3d:aa:78:ec:6e:e3:03:80:
                    2a:a6:e5:20:36:60:2c:c9:94:f6:bc:80:6b:44:58:
                    5d:25:03:c4:9d:50:63:ba:1c:ca:d6:95:17:ed:30:
                    43:7e:55:30:e9:62:93:3c:56:e2:22:0c:d8:e0:c0:
                    fa:67:0f:4f:de:e8:ef:83:2d:5f:14:9b:96:f4:5f:
                    d9:38:fb:75:0a:aa:62:9c:6e:55:9b:3c:93:72:da:
                    98:68:59:5a:34:67:01:c0:1a:6c:6e:3b:f0:19:00:
                    28:30:3b:cc:69:03:f6:03:34:c5:6c:7d:2a:c7:c9:
                    b2:14:83:15:91:bf:fe:e9:4f:8c:65:74:19:e4:5b:
                    28:77:4f:15:cf:ab:f9:f0:c8:71:1a:19:69:49:d7:
                    7e:cc:65:b5:6f:41:43:80:1f:b1:83:d6:6c:8a:7d:
                    6b:0b:9f:21:4f:d4:62:1e:46:c0:67:9a:e7:01:b3:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:06:9C:40:24:BB:F5:24:A9:F6:25:A1:50:24:60:7F:C6:26:2F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/36780eb4-ec67-447e-93dc-7aee759e06ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:67:ef:d0:dc:b0:91:f4:60:d3:3c:a1:3a:1c:64:5a:99:
         86:a3:49:d7:25:33:d9:bb:aa:88:ef:76:98:5c:be:90:09:45:
         f3:c9:02:0c:af:fa:f1:dc:3e:bf:b2:94:77:be:ae:06:d7:ce:
         8d:59:2d:f4:07:fe:40:09:d8:48:b0:ed:a0:16:9a:ff:32:b7:
         0b:3b:2a:3d:1c:5d:c0:7d:f6:b7:7b:4a:43:76:e1:d9:c2:bf:
         02:8c:ac:7a:83:41:92:44:8b:6c:9c:de:a2:e9:37:80:28:21:
         bc:6e:69:1d:87:ec:d5:3d:3d:c0:4e:f2:03:69:0a:7b:c0:aa:
         9c:47:66:5d:9c:0c:77:38:54:e2:76:a2:ee:7a:b0:c6:68:fa:
         96:39:b3:82:62:2f:77:01:9f:8e:71:fc:90:a1:67:fe:12:13:
         aa:ae:2b:d2:14:ea:33:ac:f0:54:82:de:59:70:94:a9:ec:57:
         43:01:07:ff:45:51:d0:8e:fe:33:c1:10:ce:62:5e:ea:9a:02:
         0f:a2:4a:84:5e:27:30:0a:21:82:9e:2a:ab:40:5c:3b:12:71:
         9c:57:90:09:7e:c0:b3:18:47:47:7e:1d:02:8c:19:2c:14:2c:
         78:f6:d3:db:3b:d4:1f:fb:aa:14:21:ec:64:96:16:fd:92:11:
         1d:36:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----