Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a952ae5-20a0-4370-99d5-bfa0be40b40a.roa
File:                     6a952ae5-20a0-4370-99d5-bfa0be40b40a.roa (raw, json)
Hash identifier:          R4QjIbicFvRBRyaaS/liX8QEZbNS2U2hG4ZfU77qSYQ=
Subject key identifier:   58:D2:89:88:DE:B1:57:15:2F:EC:74:CE:9D:0E:38:28:01:3F:73:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1B55A35C47207B9C2DB6BBA6C723AB352C13CF4D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a952ae5-20a0-4370-99d5-bfa0be40b40a.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:7000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:55:a3:5c:47:20:7b:9c:2d:b6:bb:a6:c7:23:ab:35:2c:13:cf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=08c2424f653c05f6fa41d7061104a88cd3ae7131a1c6c9cbcf198014d858adf4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:7e:21:96:68:b7:fe:06:14:85:b8:53:79:
                    00:a1:30:16:2c:1a:8d:6e:31:b7:de:29:85:66:0d:
                    61:2a:c4:1e:5c:03:66:73:66:b4:bd:b7:79:cc:20:
                    87:ad:66:66:4e:ed:76:ff:7b:da:da:e6:68:06:da:
                    c5:34:b1:62:17:67:1c:b9:78:6e:20:35:72:e5:bd:
                    6f:bc:e8:82:fe:b2:61:2d:e6:bd:9a:b7:ae:8b:72:
                    16:09:26:60:f0:fe:76:c3:e7:32:f6:e6:4b:e5:51:
                    52:ca:d8:2f:ad:1f:9e:2e:61:a3:e7:e6:0c:db:2b:
                    f3:0b:18:65:e3:0d:5e:25:8b:7a:e3:19:f6:90:38:
                    57:b8:a3:45:24:dd:da:71:a9:e1:48:34:78:85:61:
                    42:3e:4c:49:bb:9a:19:b2:77:5b:0a:72:42:a5:b6:
                    19:14:e6:fc:60:77:59:29:2f:cf:c3:e8:9e:12:16:
                    9a:6e:b2:53:8e:5e:1a:5c:6c:0c:1f:51:b3:8c:5e:
                    61:fd:26:41:e8:92:8b:2e:e1:b2:3c:de:11:fa:c8:
                    73:d3:78:90:6d:19:8d:84:fb:ce:5b:78:b1:07:56:
                    60:0e:ca:dc:70:d1:0e:12:99:50:7e:aa:4d:07:37:
                    07:0c:3b:17:9f:f5:63:69:1d:a0:bd:12:1e:71:c2:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D2:89:88:DE:B1:57:15:2F:EC:74:CE:9D:0E:38:28:01:3F:73:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a952ae5-20a0-4370-99d5-bfa0be40b40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:a7:1e:0a:2e:bf:be:0d:0d:5b:93:a1:3c:f9:bf:36:f5:
         f6:c4:13:f4:94:99:84:92:df:98:f1:32:64:b4:f8:47:a9:b1:
         5f:10:c3:98:e0:9a:f2:37:cd:f0:75:d9:83:19:7b:2e:01:b9:
         6c:41:08:31:af:f3:fc:c4:7f:c7:e7:fb:84:d0:b3:dc:dc:61:
         63:2b:b3:75:3f:e0:b2:60:45:d7:1c:07:4c:ea:27:3c:ff:e0:
         6f:50:d0:c0:72:32:8c:a4:59:2a:e0:6d:57:0c:bd:f2:02:f3:
         0e:4d:69:c8:36:39:8c:85:b3:c1:b6:aa:70:20:5f:f3:9b:05:
         d7:76:1b:fa:f2:d1:4c:a8:7f:69:68:19:89:c3:63:53:d1:b9:
         41:64:cf:c4:e5:3a:b9:8d:32:eb:d1:9c:bb:7d:21:ec:19:96:
         dc:a6:8c:70:a7:c0:41:8c:9b:dd:ae:74:68:25:7b:10:f7:29:
         11:d0:b4:87:77:4f:2b:a1:b1:ee:9d:b6:f3:8d:b9:54:f1:af:
         81:d8:74:1a:0e:34:fb:b9:c2:70:36:23:8c:71:ed:5b:87:fe:
         53:49:f5:1e:e3:52:04:a1:4a:b8:a7:45:b9:8e:96:f2:2c:c3:
         31:ad:e4:28:60:56:d5:a4:65:ac:04:0e:0c:0d:33:55:86:b5:
         14:93:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----