Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa
File:                     61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa (raw, json)
Hash identifier:          xWMt2aVOwqlRlk3zTT/9cpTvVEXwmiQ2wInd7isT+EU=
Subject key identifier:   E4:A5:F4:C0:C8:FE:3B:FB:9A:75:11:C0:18:72:63:C7:43:7D:75:7A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7C20015DDF054449F4F76A12D388BE236148BFB8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daa0:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:20:01:5d:df:05:44:49:f4:f7:6a:12:d3:88:be:23:61:48:bf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=8ea460be106b077cdfbc1a65bfbd033997f18bb920388117c8b60bc7ebef8bc5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7b:51:86:eb:5d:7d:32:ea:f4:ec:a3:94:f8:
                    8e:8e:e0:5c:27:80:1c:7f:bd:e0:23:08:39:f2:05:
                    27:6e:32:d0:6b:b5:31:db:26:4a:a4:ad:93:51:2e:
                    1e:0f:84:2c:8c:f4:67:04:43:4c:c7:19:59:45:3c:
                    53:c9:ab:90:be:f3:23:15:58:e4:17:69:cb:c9:13:
                    26:2d:6c:a3:3d:d4:8a:8d:c9:b0:20:21:c4:c3:3b:
                    87:01:cf:0e:f0:0e:d3:04:6a:d4:d2:12:42:83:98:
                    d0:00:e5:8f:be:d2:31:8c:09:21:b9:2b:24:47:7d:
                    1f:ae:b8:23:10:77:95:5e:77:51:62:b9:72:63:4b:
                    1e:3b:ac:bc:80:63:84:c4:20:73:cd:9f:7d:0a:09:
                    cd:13:e3:dc:fb:c2:94:99:3a:34:87:0a:c1:cc:44:
                    b2:b0:0f:15:bb:9a:86:47:c0:68:d5:f1:8e:3c:3f:
                    63:f7:7b:20:df:ae:30:d4:63:6c:81:b6:00:46:92:
                    e9:44:3c:aa:96:80:e6:f2:98:30:98:fe:24:3e:e5:
                    64:85:46:50:3a:21:a0:24:c6:39:4a:b1:6c:ed:6f:
                    ba:85:c0:a4:36:9e:43:63:37:ed:a3:16:d4:69:91:
                    f0:b8:27:dd:9c:d6:ea:3f:12:7f:69:98:73:b0:3a:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A5:F4:C0:C8:FE:3B:FB:9A:75:11:C0:18:72:63:C7:43:7D:75:7A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/61b9fdc0-1836-4b63-949b-4a0e2b95516b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:b8:b0:84:63:2b:46:cd:fc:f6:01:ec:a5:61:f7:04:6b:
         cb:25:d2:7c:a5:51:08:cf:c6:4a:7d:5d:33:31:72:41:41:ff:
         93:40:a2:d9:68:3c:cf:86:88:ec:05:28:f1:1d:b3:01:f5:14:
         88:a0:bb:bb:88:f9:da:bd:9a:de:5f:9c:7f:1f:f0:09:63:1d:
         38:53:9f:9e:8e:4f:93:1b:73:b6:ef:56:53:51:31:29:b9:3a:
         44:78:cf:44:f0:5a:6c:ba:0f:a8:9c:bb:29:98:f9:e7:5b:97:
         49:fa:7a:01:62:70:1a:a1:5b:56:e3:d0:2e:03:cc:a7:98:f8:
         05:dc:16:34:ba:a5:a6:f0:da:8d:a0:fd:53:b7:ff:f3:7d:64:
         10:41:76:11:37:f7:cf:1c:5e:42:12:3a:9c:aa:31:02:40:c4:
         a9:7b:51:6f:a4:69:0d:3a:5b:e8:ba:2a:04:97:f6:e2:f8:c3:
         4a:40:33:23:36:41:a9:44:f1:81:e3:67:f2:89:b7:4a:90:1b:
         ac:d4:ce:4d:bf:6b:03:f1:92:f5:85:01:35:94:10:63:cf:3d:
         b3:0b:cd:05:ec:a2:79:66:b7:be:cc:95:f8:07:74:f2:c5:4c:
         59:b9:1a:79:38:6c:9a:9d:72:56:4c:24:5b:cd:0d:a1:61:e5:
         7c:4c:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----