Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa
File:                     3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa (raw, json)
Hash identifier:          FwG1LjNZFcIl0wzHv+msQzP4ohQsBsyzd1BJ9qPKKDY=
Subject key identifier:   1A:88:64:73:9B:60:99:6C:73:48:59:3F:D4:CF:FE:18:D2:53:68:86
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       34B2D7B6530DDC103EDE10735C730492EE9E0882
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:d7:b6:53:0d:dc:10:3e:de:10:73:5c:73:04:92:ee:9e:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=64fb948b419cf1ba00e1966a2762e15d82b9d7ae8329bd26cd9ba43f89bea9c2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a0:bf:a7:fe:31:6c:6a:5b:3e:ae:90:4e:5f:
                    fc:27:c5:5f:2f:df:41:c5:8f:3f:73:94:ee:75:9b:
                    0b:c3:ff:58:79:c1:a7:23:a0:41:ac:48:d4:45:80:
                    92:f7:2a:2a:2f:30:ab:8b:cb:e3:67:33:9f:c6:f0:
                    c2:b0:9a:47:ac:fa:b3:be:da:df:48:fc:e4:75:07:
                    1b:cf:58:b4:eb:3f:82:78:bc:d2:27:44:c4:46:90:
                    8f:12:87:0a:10:5f:fa:2f:e8:49:f8:0a:d6:bd:21:
                    dd:36:27:4f:74:18:0c:ea:2f:3e:00:42:2e:4c:4f:
                    e0:a0:3d:29:a0:ae:14:ba:f3:a6:0f:f1:e7:57:42:
                    4e:9b:e6:57:04:5a:aa:9d:e4:fa:94:07:c7:f3:1c:
                    d9:75:0f:e0:84:34:19:f3:27:84:43:a1:b5:d0:c0:
                    ee:4a:b6:3b:c7:fb:cf:4e:75:19:2a:40:e1:6f:f5:
                    f5:93:7c:9a:20:41:20:de:ca:61:bf:80:b1:d6:83:
                    29:ed:70:85:62:5e:16:5b:0a:5f:14:bd:35:0f:53:
                    3e:8b:50:94:98:ea:92:25:e0:b7:3d:41:d6:5d:92:
                    53:7c:2a:54:16:3f:95:ba:ee:16:3d:0a:db:2f:ad:
                    8a:52:7f:57:0d:db:15:91:01:4a:07:f7:5f:8b:ae:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:88:64:73:9B:60:99:6C:73:48:59:3F:D4:CF:FE:18:D2:53:68:86
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c2fd284-a71c-43cc-a0ab-a26c0b64f475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:02:ef:1d:d9:b7:3f:31:bf:20:aa:b0:1d:04:d1:80:29:
         ba:74:9d:75:64:c3:b9:b2:b0:01:f8:0b:04:7f:08:b4:1b:b8:
         02:93:35:6f:ef:40:a9:cd:f6:8c:83:a0:e1:a0:02:88:ec:ad:
         52:f0:4d:18:ba:49:2b:65:83:9b:0d:9d:25:11:6e:ac:2e:6f:
         4e:1f:2d:8b:ba:d7:c9:bd:4e:63:c6:59:82:d3:9b:1f:cd:7f:
         e7:0a:79:a7:30:a6:b9:88:87:c8:bd:d8:2b:25:7b:bb:04:28:
         db:6c:0b:f1:b7:9d:03:a9:1a:c5:b4:b5:18:45:62:fc:6e:86:
         03:7b:57:31:c1:67:0f:2d:88:a6:6e:cf:3d:c0:bc:6b:14:6b:
         03:d7:0c:31:24:95:35:69:08:c3:93:28:e3:01:94:9f:32:f5:
         70:39:d6:d9:d5:56:00:d4:7a:86:52:4f:ce:4d:a4:ea:bf:26:
         87:d6:cb:16:ec:79:ee:73:6c:1d:fd:e1:fe:7c:90:57:b7:fd:
         e1:96:94:65:ae:e6:50:03:12:84:ef:fe:eb:f0:97:3f:a3:72:
         70:3b:a5:bb:5a:b3:b6:29:c0:6c:48:74:87:ed:93:bb:7b:31:
         0c:be:64:50:0d:9d:78:1a:5f:ad:71:01:52:7f:f3:e7:40:fd:
         25:bc:d6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----