Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa
File:                     386d354b-b333-4d2d-95e1-ce56676d00ec.roa (raw, json)
Hash identifier:          T6OW2hNfI/h1CgxgfrEW7hp8mKE9HeR7W8hoZNNPP9Y=
Subject key identifier:   70:02:65:22:A1:6B:6A:05:2F:25:C3:87:93:34:78:E3:C2:BE:9F:81
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2CBB3E7FEC1900FA0C484144F07399D9ED412B24
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da22:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bb:3e:7f:ec:19:00:fa:0c:48:41:44:f0:73:99:d9:ed:41:2b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b88a7bc0c7894d79ca452db4d4d9cc9f410ce4a4e54f3e7ef5e7a7279e4b1cca, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:cb:0f:38:f0:0a:9e:37:9a:84:15:9f:48:
                    3f:0b:b1:83:0e:e0:54:67:88:73:35:18:2d:46:7f:
                    27:1c:0a:5f:27:43:d5:3a:df:2e:7c:aa:47:e3:4c:
                    cf:e7:84:6f:29:6c:fe:80:ad:d7:99:19:8e:8d:14:
                    ba:35:5f:47:80:0e:ab:8d:34:13:46:da:c7:8e:01:
                    de:cc:13:3a:e5:86:04:f5:cb:1d:94:d2:c0:dc:76:
                    db:18:07:95:a0:95:f5:dc:7c:05:52:36:2a:d5:24:
                    28:d6:ef:11:3b:0d:df:fc:53:13:16:8b:4c:3e:99:
                    c7:4f:4e:e6:28:b8:14:e7:cb:30:28:2e:a2:a1:9d:
                    58:9f:a7:be:b5:14:5b:39:27:b2:25:46:fd:57:b9:
                    3f:ed:48:c6:12:fe:da:25:b2:45:35:d0:5c:29:5d:
                    69:ff:15:8b:92:33:7c:39:3c:56:eb:af:c6:b9:ef:
                    cd:c6:49:bd:1f:fc:1e:9d:2d:78:9a:92:ea:aa:c0:
                    44:64:d0:4e:66:f4:42:1d:45:1f:bd:70:8f:40:b6:
                    49:f8:d4:31:58:0b:61:fb:43:59:53:7d:45:74:7a:
                    c9:f6:52:fe:26:26:86:72:4f:c9:7f:67:29:e3:23:
                    c4:fe:d3:f8:df:0b:01:3e:7d:14:6e:50:2e:c4:ff:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:02:65:22:A1:6B:6A:05:2F:25:C3:87:93:34:78:E3:C2:BE:9F:81
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/386d354b-b333-4d2d-95e1-ce56676d00ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da22:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:e4:cb:15:c7:67:ef:e8:e0:6e:27:8b:a2:f2:63:2f:e2:
         b0:24:42:93:00:b7:28:b9:5c:f0:2f:0d:c7:f1:85:f7:f9:89:
         38:78:6a:0a:cb:8a:b8:fb:07:9d:ad:24:53:ed:60:69:5b:ff:
         b2:fc:0b:37:1f:a1:61:50:6e:ea:e3:0c:6b:f9:3c:a1:34:a5:
         85:a7:cb:35:0c:14:ae:86:6c:54:0f:e2:c5:6f:af:7e:92:a8:
         84:91:50:ca:e8:a1:16:b3:4b:a3:27:c5:de:b6:24:6a:b7:ad:
         fd:c6:f2:07:55:4d:28:53:25:8e:ff:48:ca:32:90:b1:1d:b9:
         9a:3d:57:f6:e4:8a:d0:ab:db:c2:68:9c:f2:2a:fe:c4:b6:2e:
         69:d7:27:0c:4c:79:4e:4c:a7:76:50:0f:6e:18:27:80:c9:4c:
         03:b7:ac:9d:5b:f2:98:ea:d3:54:28:5b:84:83:a4:a5:d5:90:
         3c:ba:35:f9:30:06:3e:30:b8:8a:50:f8:fe:65:78:69:19:4f:
         fc:21:67:49:78:49:a0:28:92:e7:a9:b6:c9:81:a3:da:ea:f9:
         fd:2d:18:25:62:3f:48:7e:0c:13:de:7d:9a:e9:d4:88:15:7b:
         08:b9:54:a2:21:1a:eb:2a:96:ae:1a:75:45:9e:6d:c9:f9:e5:
         5d:78:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----