Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa
File:                     63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa (raw, json)
Hash identifier:          pT7O3oOdirwJxgYv2HXeqR88WXnTvBkeBHjD6v8rEbE=
Subject key identifier:   E8:16:52:81:8A:FA:4B:64:B1:CB:A1:F8:C5:05:DF:7E:A1:DF:CA:73
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       182393CE490E2E2CBD8D28694489B85FB5EDCFEE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:23:93:ce:49:0e:2e:2c:bd:8d:28:69:44:89:b8:5f:b5:ed:cf:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4308298f35f9d018a37d1279dc817f9f7024d8a1fb9613231fd9f784cd46a9b6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:9d:e0:10:58:1c:c4:5b:a5:7a:cf:53:3a:
                    6b:5b:fd:c5:62:0f:e3:9a:f8:fb:85:2f:bf:a2:40:
                    07:64:ad:82:7a:74:c8:67:06:fc:14:f9:44:6a:c4:
                    6a:77:4f:a4:bd:e1:70:e1:e5:7c:27:e9:2b:12:1e:
                    72:25:2c:9d:4b:ab:a4:28:5b:62:f7:e1:ab:ee:68:
                    76:08:f1:e4:d9:c4:5f:99:72:fe:a6:28:bf:d3:53:
                    97:eb:95:7b:9b:97:53:3d:a5:87:05:f6:59:89:16:
                    66:f9:1c:0f:a7:be:39:52:7e:3d:65:be:4a:35:ed:
                    0a:61:d7:b6:e7:6a:d1:c8:f1:96:a2:fa:b9:c1:62:
                    ac:bb:3c:91:4d:3e:bd:a7:23:1c:d8:5b:64:c6:73:
                    a6:ab:83:00:eb:87:50:00:0f:1a:b6:cf:a6:72:fd:
                    cb:31:22:e3:ca:2f:85:07:10:44:ca:6d:ea:e8:af:
                    db:36:12:51:11:7f:44:fc:a1:ae:fd:65:1e:56:76:
                    71:2f:45:f1:c6:99:53:ad:6d:71:f1:c9:3a:27:0f:
                    5d:c5:9e:30:70:2a:25:d5:75:c9:9f:8a:33:e3:f4:
                    32:1e:06:39:04:9c:74:57:8b:fd:3e:f9:55:64:65:
                    a8:d8:03:a3:73:4e:09:68:1d:73:09:35:53:e9:8c:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:16:52:81:8A:FA:4B:64:B1:CB:A1:F8:C5:05:DF:7E:A1:DF:CA:73
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/63fa6d0e-6726-46dd-8ccc-34d86aee4374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:6f:ca:dd:d0:1f:bc:4f:6f:87:fa:cf:31:8d:11:ac:20:01:
         33:47:bb:a6:65:2a:cb:97:95:8b:7a:d6:07:5f:20:96:1f:de:
         8d:73:5a:3d:dc:60:92:e5:5e:ff:07:f6:6e:9e:69:a6:a5:0f:
         21:54:e4:4c:07:c9:9c:69:21:8e:68:be:89:1e:d4:e2:95:8e:
         ad:0b:87:5b:51:89:2e:50:06:13:4b:45:ac:22:0f:30:99:91:
         16:84:fb:f9:a2:e0:b5:5d:29:3f:06:bf:72:67:0c:8c:ca:89:
         33:a1:d9:7f:0c:69:b5:f1:db:e6:11:b1:58:dd:41:6e:91:bc:
         9a:68:63:e6:db:48:51:ce:ae:eb:17:b8:f0:7e:d6:56:0c:36:
         5e:e2:1a:c0:02:a1:58:fc:9f:93:f6:05:29:04:17:b2:3c:6d:
         f5:93:de:96:ee:b2:1c:bd:05:25:18:31:13:bc:5e:65:bf:92:
         c7:c3:00:d5:5f:34:81:8d:41:7d:19:92:6d:44:30:9f:11:04:
         f2:2e:8f:5d:0c:5f:92:0d:1c:40:52:9c:a2:14:3e:b4:02:b0:
         26:25:e0:fc:28:36:93:86:d8:67:46:d4:ed:8a:c3:74:3d:73:
         78:fa:30:7f:e7:97:8d:9a:31:c7:cc:2a:29:3f:16:45:65:bf:
         e4:26:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----