Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa
File:                     46414410-3c41-474e-9f4b-cac045e67568.roa (raw, json)
Hash identifier:          DWoOsUVZVB1AvtJCM8gz29XXQNoKO1ulrJGRfvb7gTY=
Subject key identifier:   F1:B7:13:47:D0:A9:49:B0:AE:87:42:84:E0:5E:54:AA:D3:BC:BA:E3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       374057176C062494D389B1C0FFBD9DE4CA24FFC1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da14:8800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:57:17:6c:06:24:94:d3:89:b1:c0:ff:bd:9d:e4:ca:24:ff:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b880aa1b4b6b4caa2efa804f54d36a545b65913a085cabf3319b9b7eedd1472c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:ff:ff:9c:72:66:af:5f:58:d4:99:64:66:
                    4a:a9:6d:c0:4c:57:ef:fa:e6:89:9c:b6:63:de:9d:
                    43:1f:e8:09:90:6a:0f:1c:bf:17:df:1f:05:b9:0a:
                    5c:ab:1d:bf:25:93:4b:96:2a:3d:ae:75:5f:5b:6a:
                    a3:f0:53:79:eb:90:62:5a:43:b1:21:2f:6f:32:e9:
                    ba:89:65:81:64:29:79:9a:f9:c7:20:38:ef:c9:35:
                    ab:f9:42:ff:7a:d1:df:b1:3f:84:1b:09:54:51:02:
                    92:3f:97:67:e6:f3:e1:4a:2f:a0:9e:14:22:2e:43:
                    6a:25:6b:b2:b1:fe:93:b2:9c:99:91:29:76:a1:34:
                    8d:b8:3f:63:75:dd:92:13:90:d7:89:20:90:98:1f:
                    cf:5c:bd:d7:e0:e7:7c:33:3e:86:7d:77:8b:61:03:
                    c0:09:50:56:e2:0d:26:c2:ed:38:de:0d:fd:73:45:
                    9d:25:ce:7e:05:e7:97:52:0e:ee:9e:22:e2:ab:4e:
                    23:71:b4:71:6b:a5:6d:36:54:ad:d0:70:7c:a4:f4:
                    fb:df:1a:85:bf:11:5d:bd:29:d6:8c:6a:0f:6a:70:
                    1d:7e:3d:1c:f4:b7:aa:02:e2:b2:c4:85:52:d6:23:
                    91:c2:3c:19:47:ef:03:ca:55:55:c3:fb:83:37:1a:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:13:47:D0:A9:49:B0:AE:87:42:84:E0:5E:54:AA:D3:BC:BA:E3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46414410-3c41-474e-9f4b-cac045e67568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da14:8800::/38

    Signature Algorithm: sha256WithRSAEncryption
         25:79:9a:ef:57:c4:21:92:dd:74:92:b8:81:c2:93:f1:0d:8c:
         8d:c8:c8:0d:76:d6:1a:30:74:f6:ad:5a:e0:ce:5f:ef:ba:84:
         5b:91:b8:22:5f:99:34:39:71:22:48:fa:7f:48:a8:a4:e5:92:
         92:33:b9:0a:a2:60:60:ad:26:f7:fd:6c:c4:d6:27:8f:f6:94:
         75:43:ed:72:1c:94:6e:50:36:ce:82:5d:7e:cc:75:42:a2:2f:
         73:2f:77:2a:9f:69:46:b0:ad:2f:a8:79:a8:93:55:3a:a3:c2:
         71:a1:2d:32:2a:ee:af:bd:31:a0:76:5a:c3:c4:c9:0c:86:a9:
         e4:ab:b8:44:d4:b6:f2:b9:2d:2f:6f:95:14:c6:2d:2b:32:bc:
         15:69:af:08:9c:66:de:53:5a:e7:bc:f5:ad:d7:f2:21:52:05:
         84:6d:e1:00:0a:a4:63:0d:7a:73:59:6d:61:f3:49:d9:17:a3:
         20:12:46:91:9b:4e:1d:ee:95:e0:55:5d:1a:ab:b7:53:98:dc:
         6e:8c:99:46:a2:4a:1e:db:1b:38:e7:dd:60:02:27:c4:2a:6d:
         08:48:19:15:ed:72:9f:61:65:58:fe:c0:76:29:d1:06:f1:8b:
         92:ba:04:a1:e2:d7:0d:1c:2c:85:c1:74:a9:31:aa:00:94:b9:
         0c:5a:00:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----