Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa
File:                     47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa (raw, json)
Hash identifier:          UppEbxnN2Np7DXzSYeOa94RnmckLyNM+zxbAjLLEY8Q=
Subject key identifier:   CB:5B:36:AC:32:5A:9C:4C:7A:BC:D1:F2:29:C1:5B:1D:C4:C1:AB:D0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       38CE157707894BF79D3E493B5AC50EFDB0B0C12B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ce:15:77:07:89:4b:f7:9d:3e:49:3b:5a:c5:0e:fd:b0:b0:c1:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=5c15a753e25800b2f1396d141fd3ebe2afbec8060bba618cc7caa6b837468cd1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:c9:70:96:df:62:c0:aa:45:91:33:7c:fd:
                    61:e3:4b:b4:ee:4a:8b:a7:a1:23:2c:14:fe:79:13:
                    33:12:00:fc:52:b9:d4:f4:8d:62:02:0a:8e:5f:87:
                    02:1b:e7:d2:9c:63:1c:59:f1:6f:42:42:2c:c3:9f:
                    ad:ff:26:a5:a1:59:c9:fd:86:af:dd:56:12:08:0c:
                    06:5f:77:4f:db:0b:be:ab:0f:73:84:ba:cb:91:8b:
                    3e:58:32:1e:e6:6e:74:18:af:b0:40:55:18:dd:6a:
                    c8:72:8b:65:c7:0c:8c:cd:58:d5:03:85:06:d9:d7:
                    ec:13:80:38:1c:83:b7:b8:0a:d3:dc:be:ee:70:28:
                    28:99:e2:05:c6:6d:35:d3:81:d5:cc:0c:f8:5b:9a:
                    78:d6:68:d1:9a:8a:cc:c4:a6:bf:df:dd:ff:cb:f6:
                    30:9d:27:71:c6:95:30:b2:c6:2e:70:61:04:f9:1d:
                    18:2d:40:76:7e:14:33:4e:40:d7:37:39:fc:d7:7e:
                    30:aa:ef:3c:c9:f6:23:41:e0:01:89:6f:72:bf:61:
                    df:17:d8:7b:fe:e9:36:9f:c6:c8:a9:c3:0a:0a:2d:
                    72:f5:a0:9d:15:d1:f6:56:4f:db:af:9c:1e:ec:a2:
                    d7:9e:e9:b5:49:33:63:39:90:0e:64:b0:06:9b:10:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:36:AC:32:5A:9C:4C:7A:BC:D1:F2:29:C1:5B:1D:C4:C1:AB:D0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/47ab50a1-fe55-45fe-99e6-cd7b2f672a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:cf:8d:a2:87:99:9f:c7:a0:17:93:56:14:ac:5b:58:be:5b:
         27:c7:ad:fa:04:19:5c:ad:e9:12:5d:5b:d1:d2:07:88:8c:f1:
         46:ba:ad:2b:18:e8:ed:d8:ce:06:6d:ef:65:9e:d7:87:41:a7:
         09:fa:ac:01:40:ed:a6:a9:5b:e8:42:40:e1:56:2f:f7:2e:89:
         76:5a:b7:35:64:0a:a0:be:f2:ad:06:e6:a5:39:9c:f9:12:e1:
         2e:90:51:b0:7f:4c:fe:1f:39:95:f0:8b:9f:ec:dc:b4:9d:64:
         28:2b:44:86:ea:ed:51:85:33:5d:9d:89:91:8f:3b:45:05:2d:
         40:8c:84:35:4d:f1:c0:34:38:aa:7f:96:46:65:09:d9:c6:d5:
         a6:e2:d7:e7:59:cf:96:ba:3d:8a:cb:11:bf:54:43:11:70:ac:
         09:28:01:c4:85:5b:ee:49:0f:10:80:a0:33:07:b0:cc:13:32:
         d8:30:b5:53:53:bd:e6:78:50:4c:24:e9:70:a1:95:4a:f4:ff:
         23:77:d9:9c:e4:cd:fd:b8:29:24:38:67:22:56:3d:b3:72:07:
         6b:b0:b6:d6:1a:4d:a9:e6:3a:84:df:49:3e:5a:99:03:85:70:
         7b:30:b0:a0:31:42:8d:f0:45:18:69:16:bc:57:ec:cd:60:0b:
         6f:08:53:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----