Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa
File:                     4f94d4be-2864-45c5-a16e-6384684a8060.roa (raw, json)
Hash identifier:          svvrR6MjdryAyMeEbjhbqwvXwQYmQczG+GgvM8eKuRM=
Subject key identifier:   9E:72:DF:1B:EB:04:EA:53:53:27:99:43:1A:9D:12:1E:29:DD:EB:0D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5E63B84F91A00030CDC3F77A2867D6A8E09E0865
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da16:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:63:b8:4f:91:a0:00:30:cd:c3:f7:7a:28:67:d6:a8:e0:9e:08:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=80862ab0a3f8280db5c6edd59a4f67156586ed3709ea3b3629a8cefd00b5aad1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:05:e7:70:fd:90:76:32:16:68:13:be:7f:
                    76:dc:2b:25:ae:6d:8d:38:05:86:5a:8d:f1:28:0c:
                    a6:c6:b7:a6:27:9a:1f:ab:7f:66:c1:10:cd:9d:75:
                    9d:2e:5c:50:28:81:ec:67:a7:af:55:10:20:7b:cc:
                    d4:72:89:cd:6f:97:8e:38:7d:e0:6f:e3:f2:ce:50:
                    d7:6d:02:7d:ae:cb:86:53:b4:6c:78:79:31:c7:90:
                    c1:0a:a8:9c:41:93:64:a9:ba:48:08:2f:a4:15:27:
                    75:50:45:e9:e3:48:7d:97:00:2a:a9:3a:7e:e8:d6:
                    f4:80:8f:08:c4:2a:5d:b9:f6:a7:e9:04:57:df:1d:
                    2e:63:29:fa:c9:2d:97:98:11:52:f5:56:9f:48:4f:
                    49:c0:4a:7b:20:fb:4a:c7:6c:dd:03:51:57:c6:45:
                    f1:d6:fe:58:4a:59:38:08:c9:18:8d:01:bb:99:55:
                    8d:39:8f:4f:ea:a7:e9:56:be:99:e2:e7:b3:ed:57:
                    83:c5:89:b1:da:94:09:59:c0:3b:9a:dd:54:8e:96:
                    92:cc:b2:40:69:a2:e9:6c:36:22:a6:9b:a0:2a:ad:
                    89:af:5d:b3:64:52:5f:56:11:9f:61:45:8a:b8:f4:
                    c4:c0:01:e5:30:05:a4:c5:3b:e2:bb:07:f5:db:be:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:72:DF:1B:EB:04:EA:53:53:27:99:43:1A:9D:12:1E:29:DD:EB:0D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f94d4be-2864-45c5-a16e-6384684a8060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da16:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         22:04:3e:cd:14:0a:5f:d1:90:83:b4:20:e9:ef:55:41:db:fe:
         4a:44:da:fa:28:24:1a:4f:62:9e:db:d9:eb:c4:82:19:8a:ca:
         de:ef:99:58:81:1f:67:f9:db:8c:46:fd:84:d4:80:42:b8:c5:
         09:13:62:68:ab:20:ce:1c:d7:c6:48:01:c8:93:2b:a7:b3:35:
         95:2f:eb:0f:cb:79:fb:70:2f:b5:b9:a8:97:1a:57:8b:15:3b:
         9e:57:3e:89:68:c6:e7:69:ff:95:d9:ff:e8:05:8e:5b:05:d0:
         f4:2f:96:01:fe:bd:a4:e1:25:00:b9:31:ca:57:5a:78:e6:2c:
         c5:26:24:01:dd:8e:b7:0d:7c:6e:0e:dc:2a:f1:03:e6:a1:8c:
         81:72:f0:ff:7e:6b:9c:33:06:a8:ec:d6:5a:d2:74:be:2a:30:
         88:85:6c:fa:5b:a2:09:f6:6d:18:45:f8:71:78:06:67:e8:a7:
         02:26:ca:dd:5a:f3:0a:ea:76:09:63:44:de:38:5c:65:1a:ab:
         1d:0a:85:9a:ce:dc:4a:8d:8e:f6:45:4e:b7:32:e7:de:ac:0e:
         de:0f:61:d0:e4:11:91:2c:16:23:66:43:8e:9e:79:98:d6:70:
         50:2a:c5:bd:d8:0e:4b:3e:63:5d:cd:d1:79:8c:1d:6e:25:94:
         0d:25:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----