Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa
File:                     67234885-c8a6-442c-9c14-9cd26763c5b1.roa (raw, json)
Hash identifier:          ffgo0jiqo7m1cuPj+5xjGf0C4CQw3fWkgQfh+7GXlEI=
Subject key identifier:   A2:EB:80:63:32:2D:25:98:67:8A:BE:ED:32:1F:BC:51:73:88:4E:72
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3F3BBB697711B43EBE9B7961EE1DB0B550928AA7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:bb:69:77:11:b4:3e:be:9b:79:61:ee:1d:b0:b5:50:92:8a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=fcf8367d735154c21f2f8a0320faa037aaacf0977198a1d5655382561dd6908d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:84:60:21:71:f9:8d:54:5c:fa:9f:13:f5:
                    54:37:c6:82:e3:b2:fd:02:34:c7:1f:19:22:f6:3d:
                    2a:1c:13:d6:18:78:70:87:eb:c5:8a:1a:43:95:f6:
                    47:31:00:26:7b:36:e5:5d:f2:6c:1c:e4:bf:6c:ea:
                    0c:60:56:cc:ac:91:76:47:56:ec:30:16:15:a5:db:
                    fa:01:42:e8:45:71:05:1f:9a:94:5f:b6:45:3f:5d:
                    44:53:ad:12:0a:a9:3b:e3:dd:27:b0:39:22:f1:e4:
                    9a:0d:33:87:32:e4:29:1c:83:eb:3a:b0:f4:3f:96:
                    b4:94:4f:08:0e:81:d2:ec:ea:58:33:2c:17:82:70:
                    4f:4b:88:01:fe:82:59:e4:78:96:0e:35:43:dd:ed:
                    40:47:9c:1e:3d:92:aa:7f:3b:71:5b:da:1d:92:0c:
                    e8:9b:a5:2c:48:1c:fd:25:7d:53:75:8e:cb:3b:cf:
                    11:37:55:61:60:44:5c:45:db:6b:6f:c7:cc:a6:b5:
                    2c:2e:f3:1a:96:8d:c5:cb:e9:c6:0f:8a:e3:b8:75:
                    4d:6c:7a:b5:a6:40:86:50:65:46:9b:05:10:61:04:
                    dc:91:0c:4b:70:e7:95:e0:ed:90:09:8d:d0:77:1f:
                    78:89:1b:2c:96:50:7a:27:bb:56:72:80:40:24:74:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:80:63:32:2D:25:98:67:8A:BE:ED:32:1F:BC:51:73:88:4E:72
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/67234885-c8a6-442c-9c14-9cd26763c5b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:a5:70:08:bd:d7:ac:18:b3:1e:63:28:25:b4:c4:31:7b:56:
         54:78:50:a4:56:a3:3e:94:02:f9:47:19:04:f7:c9:13:bd:54:
         51:0b:14:97:24:6d:33:37:b5:13:5d:ad:1e:28:73:cc:98:cb:
         32:07:c6:4c:96:99:30:a8:9e:55:a3:31:ec:8e:06:1b:b6:08:
         22:db:3c:ad:06:9e:bf:bf:ec:73:3c:ce:dc:ec:73:40:b7:63:
         b8:72:1d:b0:86:e0:5d:78:df:06:0b:ae:4e:a4:44:ff:8d:00:
         c9:88:a5:93:2c:dc:65:b6:df:4e:50:72:86:c3:2d:74:66:e5:
         ee:03:09:a1:ed:37:1e:ec:07:e6:47:08:a0:f6:d0:0c:13:f2:
         59:0d:c8:27:6c:de:eb:0c:c8:60:c0:09:ec:0d:f8:6a:04:2f:
         f3:33:47:19:62:a7:0d:b2:9d:4f:5d:00:ae:ec:21:84:fb:16:
         8c:84:e3:7e:b7:d6:87:08:5a:07:4c:11:b5:80:f2:47:2d:73:
         f2:bb:d6:53:93:9e:e2:0c:da:3e:17:74:ea:ae:13:3a:4a:af:
         6b:2f:eb:60:27:5c:e8:0e:1b:f0:58:dd:27:80:dd:3e:a8:69:
         25:e4:06:8d:e9:f2:a3:2f:f1:29:9a:76:4f:e4:46:0d:10:7e:
         60:90:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----