Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa
File:                     4070787c-7920-4341-afdd-98830283493b.roa (raw, json)
Hash identifier:          qqfv9pSpdlAoSy3isYnjmEBJjE5ALs/Bd4iIvba++VU=
Subject key identifier:   ED:DE:B6:C4:59:71:5F:5C:2C:06:F5:7C:93:3B:1E:55:81:06:6A:D3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       38386364A7DA0A30A4E5CF567DF9250980280201
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:80c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:38:63:64:a7:da:0a:30:a4:e5:cf:56:7d:f9:25:09:80:28:02:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=74d7e15fd5729f2b641c4fa6e633ae0de9fa956d8181d4272c59d50455c9d4b9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:c7:cd:a3:e7:42:de:c8:89:19:ea:87:bb:
                    fb:d9:08:24:fd:83:9d:00:a8:e4:5a:6e:e5:33:e3:
                    39:a9:a9:63:e3:dd:91:e1:ad:89:52:cf:e8:3f:c5:
                    95:d9:59:6c:2a:4c:01:22:95:e7:60:91:8e:87:c2:
                    21:04:01:90:b6:03:17:9e:3d:8b:f9:ea:74:d4:46:
                    ec:62:94:1a:fb:be:6c:de:57:c6:1b:2e:8d:18:c8:
                    de:c3:1b:0e:61:cb:f2:9b:da:8c:ad:73:f1:37:da:
                    1b:2f:09:c8:76:49:25:fa:aa:c5:d1:0a:b7:52:f5:
                    bf:f5:de:48:db:f9:dc:7b:eb:32:53:49:f0:c0:19:
                    a6:03:a0:28:36:39:96:e1:72:df:12:cd:06:96:cc:
                    f9:6e:90:f4:c2:fc:17:bf:bc:e6:31:a9:55:f2:f3:
                    64:b1:7f:ac:02:ba:b0:2b:bc:26:19:5f:b8:25:72:
                    a2:c7:73:02:d7:37:ec:0b:2e:f2:8f:f5:77:6c:5e:
                    0d:c7:7c:48:40:cb:2f:06:6d:b3:ec:0d:88:52:4d:
                    23:81:e3:6f:eb:6e:ef:a0:ec:b4:61:bd:4d:55:23:
                    cd:1b:d6:c2:48:03:1e:38:7d:cc:4c:e3:45:1b:20:
                    78:79:be:d6:d6:d0:94:c8:b4:46:88:4b:13:c6:64:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DE:B6:C4:59:71:5F:5C:2C:06:F5:7C:93:3B:1E:55:81:06:6A:D3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:80c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:81:b9:13:18:99:39:48:7f:30:7f:2a:a0:94:db:95:65:bf:
         43:9a:d5:6a:eb:02:93:3e:97:f1:5e:50:26:92:3c:b3:7d:7d:
         93:65:4c:f6:a6:16:24:45:5c:fb:f8:84:5f:f7:25:01:a7:5c:
         d1:3e:85:44:6f:04:03:6b:e3:dc:fd:e9:73:e9:e6:eb:0a:1f:
         00:11:a7:f4:e3:8e:52:ca:3d:d4:50:83:ac:21:e4:67:62:62:
         40:49:c4:5a:c5:d8:d5:2d:5c:01:bb:2c:c0:02:ea:8b:83:38:
         93:ed:cb:a0:52:6a:d0:f7:2f:8f:d7:b0:01:89:e4:ee:49:d7:
         74:80:92:f3:78:2a:a9:19:81:ba:b0:b6:64:d9:0a:20:28:ff:
         ea:e4:21:21:10:f6:72:27:aa:d7:dd:99:aa:91:a3:ec:9c:fb:
         b1:61:5e:61:db:5c:94:49:88:bf:34:84:92:2c:89:6d:e3:4e:
         52:c4:17:ea:45:22:f5:c3:76:78:64:e0:e8:f7:28:82:14:c9:
         c4:e2:ab:ec:ca:39:e3:9b:47:c4:ec:1d:05:9d:c1:3d:f8:f9:
         a2:3a:8e:a0:20:5d:fe:a5:02:4e:54:42:12:17:45:14:b8:81:
         8a:71:2b:a9:b6:a8:b1:14:f7:52:10:09:ab:60:d2:66:03:34:
         6e:25:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----