Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa
File:                     44659a2f-b700-46f9-96cd-a4f62edfbf44.roa (raw, json)
Hash identifier:          4Z0MdT8GuEXeu4Wcztu+CCe6+bQ3KtuRa31ikjiHtc8=
Subject key identifier:   9C:D1:40:49:D0:90:9C:8B:B1:56:8C:6E:15:18:A7:FF:3C:27:B0:BE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1872355EF8B5021E031071A6AC266643BCF2487B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:4000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:72:35:5e:f8:b5:02:1e:03:10:71:a6:ac:26:66:43:bc:f2:48:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a068ea4f8cfe9fed6719c5f979e62ff5be712982f77e73bdcf74517a0969f223, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:d4:9c:cd:f9:46:f1:36:c3:01:78:be:9a:
                    9a:25:3e:12:8a:ba:aa:71:f6:94:55:cb:e2:78:b3:
                    43:fb:74:0a:82:27:34:36:cd:7c:16:af:26:22:f5:
                    1c:17:be:58:f8:e0:fd:e2:83:a7:89:99:e1:02:34:
                    30:89:6c:ea:2c:0b:10:91:26:8b:b6:a2:60:d1:ab:
                    aa:83:22:c2:39:3d:fd:03:5b:9a:db:a1:50:8d:20:
                    39:66:e0:9f:a4:28:7c:c4:24:02:b7:4c:92:65:0c:
                    9d:82:8c:18:b7:6f:db:5f:16:f1:84:b3:e7:72:ae:
                    ab:96:02:59:f3:b0:3d:ea:2b:18:0b:b1:a6:9a:37:
                    63:5c:a3:16:ec:4c:6c:d2:fd:5d:82:ef:d9:c8:c7:
                    4a:a6:b1:4f:ae:e3:2e:71:91:53:42:2a:91:3e:d7:
                    e0:d5:c5:19:05:53:73:75:3c:5a:97:02:a5:9c:86:
                    ae:89:e7:87:e4:32:25:a8:2d:d5:9f:d6:d5:93:d2:
                    70:a9:12:74:31:93:fd:74:85:a7:56:a6:38:34:e2:
                    50:85:d6:f2:51:e2:16:d2:19:ed:1c:04:a7:b5:32:
                    11:b7:b5:67:39:7f:cb:e2:f0:0a:7c:5d:83:b9:40:
                    5f:aa:31:54:60:f3:e5:3d:c3:60:c8:b2:9b:6f:f6:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D1:40:49:D0:90:9C:8B:B1:56:8C:6E:15:18:A7:FF:3C:27:B0:BE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/44659a2f-b700-46f9-96cd-a4f62edfbf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:58:ca:46:32:84:2f:f7:d1:4b:79:05:a7:d8:13:c8:b7:
         a8:4f:ed:c6:fa:69:3e:5f:8b:70:c1:e8:f7:39:d7:16:ff:14:
         97:1c:ca:53:87:3f:6e:b3:b5:2e:8f:27:45:85:84:fb:d4:b4:
         62:b0:91:bb:2b:e8:71:0f:03:23:22:7e:25:aa:50:12:56:d2:
         0c:69:63:aa:53:17:61:e7:02:0d:d4:ef:c5:5e:2a:d8:ed:ed:
         8f:b5:d3:25:92:c0:53:92:a1:31:72:9e:8c:bf:d2:af:b9:25:
         98:06:39:79:9b:d2:c8:32:8b:75:70:82:f5:d3:d2:ac:e2:be:
         bf:ab:bf:55:52:98:4d:3f:5f:e3:ed:ea:6d:32:cb:ed:b7:eb:
         77:7a:31:96:32:6b:66:0d:18:d5:46:ac:83:9e:00:33:95:05:
         d4:9e:5e:c8:31:8c:cc:e0:42:57:a5:8b:d5:15:b1:ca:45:83:
         69:19:4e:dd:9b:a8:87:5b:c2:aa:9f:82:2a:3a:87:8c:eb:44:
         eb:a0:fb:f1:07:94:31:55:e4:a7:3a:a3:fc:04:28:ea:19:f9:
         cb:ad:19:87:ae:13:f1:41:49:9f:0e:15:05:be:dd:99:82:68:
         c9:51:75:65:f6:22:ea:61:d1:74:4c:e7:f3:7b:86:55:38:f6:
         0b:b8:6e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----