Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa
File:                     43b679b3-4697-405a-940d-1245ad38a867.roa (raw, json)
Hash identifier:          7oQcJuYmQ1uCMCuB3KK7wWuY+G09Co/lhdlPhzyp6dY=
Subject key identifier:   B0:6F:B2:A1:B6:37:FE:61:59:72:BB:12:FF:76:E5:16:B2:79:C8:CD
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       134C1A46D2C8C0FF24FDBFFA5873A85F83E9BBDB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:f000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4c:1a:46:d2:c8:c0:ff:24:fd:bf:fa:58:73:a8:5f:83:e9:bb:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6f435f037d5b230bcd7115cb45d05da19028550d2205c7b23e4ff26bb2042994, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:86:35:c7:41:7f:bd:d0:c7:30:99:b9:c9:34:
                    50:06:0f:3f:a8:ba:d7:05:89:49:d7:86:7e:35:f7:
                    f4:cf:9c:89:3e:22:41:9e:a5:92:5a:83:d3:23:c8:
                    d9:72:54:77:1b:0c:1c:5b:46:88:81:d4:57:3d:a9:
                    6e:df:84:90:6e:4d:9d:03:8f:c4:23:88:f4:dc:7e:
                    61:a5:13:78:e8:f1:0a:f0:29:33:3d:8a:ce:5f:b8:
                    dd:b0:bb:10:3e:b9:2a:5c:6e:76:81:0a:4f:7c:f3:
                    eb:88:40:34:2b:01:b2:ed:33:0c:c2:5b:0f:14:1b:
                    3d:81:6a:7a:00:78:0c:62:41:12:ce:4d:ff:69:74:
                    94:6c:8a:05:94:2b:6d:3f:19:20:13:50:b2:7d:b0:
                    24:12:b0:63:2c:7e:e9:d7:50:a6:e7:d8:a0:1c:c6:
                    f5:7b:e1:29:7f:bf:0b:73:13:55:65:c0:e2:38:29:
                    f3:1e:7b:88:3d:2e:be:67:1b:12:8b:76:f5:a0:4b:
                    b9:eb:d7:e9:b8:cb:a8:25:f3:56:58:68:e5:06:10:
                    73:75:f7:f4:9e:6d:2b:1d:70:bd:f7:69:44:c6:f9:
                    68:27:39:9b:a1:7d:8c:7f:07:50:ed:ce:44:6f:53:
                    4b:42:09:7a:f1:a2:62:f9:30:11:b5:eb:e6:10:6d:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6F:B2:A1:B6:37:FE:61:59:72:BB:12:FF:76:E5:16:B2:79:C8:CD
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43b679b3-4697-405a-940d-1245ad38a867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:cd:65:68:97:27:ab:96:7d:25:b6:dd:0b:68:3f:8e:df:58:
         2a:b4:44:9a:8c:6e:92:e7:56:24:0a:cb:44:82:de:62:b4:c9:
         fa:44:c8:98:e4:e7:40:a8:0b:00:d6:32:fe:56:0d:0a:8d:e5:
         26:12:32:89:6c:63:79:94:f9:c3:02:37:1c:29:29:1c:ae:37:
         ea:ea:19:ab:c6:7d:07:a6:41:bc:20:e3:cc:c7:8f:8a:51:9b:
         61:35:4f:e1:b3:14:3c:6b:82:c1:73:93:2b:c6:71:f0:ea:70:
         87:23:f8:33:81:b6:68:cb:b3:47:a9:bd:d9:8e:fd:28:65:aa:
         94:3e:db:79:16:53:bc:51:e8:b9:59:1f:69:66:0d:53:14:77:
         56:ae:93:b4:25:0d:33:12:39:4c:f4:ac:5a:d2:48:41:b5:93:
         aa:8f:8e:34:71:8d:13:28:3c:d9:76:1f:5b:6c:61:e7:b9:ee:
         95:51:6d:47:80:b4:10:ba:4a:76:74:32:30:32:4b:7e:91:f5:
         78:be:b9:84:c3:ab:9c:20:92:cd:86:c1:64:0f:de:f6:6a:d7:
         31:e7:04:82:74:72:72:f9:a7:5a:58:e6:33:f5:be:1b:32:eb:
         b2:ed:85:8f:40:74:12:d4:9e:97:ee:d2:a8:ea:a3:3c:ae:f9:
         81:0b:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----