Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c51a47b-9b21-4980-bd0d-6c35a1031ca9.roa
File:                     3c51a47b-9b21-4980-bd0d-6c35a1031ca9.roa (raw, json)
Hash identifier:          5TIhSCjW0fl1u7gB1Xe0JFeyeRBfcOPIoNFt0A3VcJ8=
Subject key identifier:   60:42:13:F6:14:CF:E6:F2:43:F9:6D:30:2F:0A:04:CA:A9:7E:62:D6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       388DD0CE3C6CAE3458EF0497ED2E3AEDE70F186B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c51a47b-9b21-4980-bd0d-6c35a1031ca9.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:4800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8d:d0:ce:3c:6c:ae:34:58:ef:04:97:ed:2e:3a:ed:e7:0f:18:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d60b8433926bc66b22ced48f2e85222e6ae6ac8a25719eff4a9d0a94af15cb11, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:1f:04:ae:03:b5:8c:0d:24:2d:34:e8:0f:
                    01:5b:56:98:63:09:f9:d6:4c:c5:ac:cd:c7:07:e5:
                    ca:54:62:f2:7b:e1:f1:ec:d1:fd:fd:20:ad:a7:b8:
                    69:b3:9e:aa:b8:9e:e0:a1:23:9e:8c:78:4e:94:ae:
                    83:e6:48:84:1f:93:04:cd:0b:33:c1:4c:f8:d1:bb:
                    a0:28:59:b6:43:81:55:c7:af:00:31:6a:77:2c:eb:
                    a2:2c:96:82:63:54:43:07:71:50:64:58:50:af:ed:
                    c7:f0:ee:8c:95:5c:2a:ab:c2:38:63:0a:97:ef:22:
                    21:15:fe:c3:0c:7e:a5:ef:12:5d:c9:3b:f1:0b:77:
                    13:04:ae:7a:c3:75:e0:fa:fa:48:2d:c0:cf:c4:0f:
                    4e:67:64:7d:4b:08:15:0b:58:0a:37:37:fc:32:7e:
                    5a:1a:6b:af:83:b2:f2:0b:f9:16:22:eb:4e:ad:1f:
                    0e:23:cc:74:1a:51:9b:70:71:ce:2c:e7:a3:11:db:
                    8f:d5:c6:6c:ea:9e:54:eb:46:a5:09:91:7f:7e:85:
                    92:f9:28:ef:8e:d9:40:fe:b5:b8:44:bd:af:13:4e:
                    0c:77:68:2c:a5:6b:bd:a7:b8:5d:8c:ca:72:cb:3f:
                    ae:e3:39:0e:54:85:2d:92:76:28:c2:f6:86:ec:03:
                    f4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:13:F6:14:CF:E6:F2:43:F9:6D:30:2F:0A:04:CA:A9:7E:62:D6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3c51a47b-9b21-4980-bd0d-6c35a1031ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:22:22:fc:cf:59:f5:63:40:19:52:99:c9:f7:56:f3:a2:b3:
         68:42:fe:56:d4:0c:fa:da:83:f8:3b:5c:12:56:ad:0d:ac:8a:
         19:fe:d3:8d:44:2d:2f:ad:b2:6c:d4:c1:0a:63:51:fe:12:c0:
         ae:37:35:82:df:09:a8:b8:4c:78:b3:cd:b7:fb:dd:d0:19:c3:
         71:e4:70:e6:b1:fc:e9:71:8b:68:4b:b9:f6:93:09:94:b1:92:
         55:7d:24:1d:1b:c1:1b:a9:5e:ee:5b:a3:61:b2:60:82:de:22:
         3c:fa:4a:ff:b9:7a:cb:e3:8f:3d:8c:97:d8:82:52:58:75:c8:
         89:d6:d6:3a:66:94:44:ea:af:cd:85:e5:12:d9:83:f4:d3:9a:
         f3:77:b6:9d:91:3d:92:bc:c9:18:aa:f4:5d:77:4c:bd:5a:be:
         f6:cf:66:30:56:b5:08:da:33:6e:3c:40:67:93:78:1a:b8:a4:
         3a:75:5f:2e:48:1d:7c:97:4e:3a:32:4e:22:2b:6a:20:8e:9b:
         86:ec:a9:c8:47:ff:ac:f8:62:68:d6:2d:30:2b:7b:82:fd:8f:
         67:ee:b3:8d:6a:9c:a7:88:57:35:07:70:ba:7d:8c:ba:2a:7b:
         c9:eb:51:30:e6:65:5a:4a:be:54:1f:54:64:60:81:5a:30:93:
         a3:00:2f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----