Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa
File:                     6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa (raw, json)
Hash identifier:          LDFrOqJsdwpkTMRIjQMCTWOl+USDdt7iWStS4kNYGko=
Subject key identifier:   6D:2C:C4:6A:4D:AB:B3:CA:BE:5A:62:24:58:B1:AD:BF:17:54:11:B3
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0293283708E3EE441A49234572EDA7C6729FEE99
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:f000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:28:37:08:e3:ee:44:1a:49:23:45:72:ed:a7:c6:72:9f:ee:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b9af8e5bb2bb00d35f0a1a7d4d5b1dfb5373342ef22c8857f1721244068f479a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:90:c8:cc:11:00:be:ab:55:2e:01:5a:70:
                    ab:0f:b5:d8:26:c4:9b:41:1f:ab:24:41:3e:db:4d:
                    2c:31:f3:de:2c:92:18:b1:2d:17:ca:44:a2:11:02:
                    c2:97:90:9b:cd:9b:a9:59:31:44:fa:61:0e:00:6f:
                    18:0d:f8:54:31:03:08:81:75:45:e4:8f:69:74:11:
                    43:6b:32:86:2c:22:7e:59:8e:e3:20:bc:00:7f:1a:
                    e6:0f:e9:e1:2d:0d:0d:12:e6:ce:9f:72:3a:c7:e8:
                    a5:72:35:cf:9c:98:cd:ce:cf:8f:a1:92:eb:9b:8f:
                    98:18:a9:0d:0f:ee:5e:bd:c8:5d:db:aa:17:38:54:
                    ac:44:d7:12:27:89:fa:9c:ae:f8:7c:a5:0e:54:a1:
                    b3:40:50:fa:99:be:ab:b8:61:5d:a0:05:c0:cb:ce:
                    f3:12:4f:83:3d:c3:98:d2:85:7e:6b:11:60:b5:0b:
                    63:b6:03:f4:0d:98:66:21:45:78:46:62:91:00:40:
                    8e:09:1a:c2:c8:a2:73:96:ee:11:2b:42:9c:4e:41:
                    ac:f6:a0:d1:09:c9:68:f1:9c:d7:8c:b5:4d:ed:a9:
                    a1:9f:88:a2:f0:94:fb:6c:81:1b:88:db:e0:bc:6f:
                    4c:bd:b1:b3:98:3e:5d:a0:8c:82:3e:07:70:99:bf:
                    06:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:C4:6A:4D:AB:B3:CA:BE:5A:62:24:58:B1:AD:BF:17:54:11:B3
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6b86e4fe-b34b-45ab-8ce2-590368c9acfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:13:3c:88:07:93:1e:c5:d4:8b:68:a3:89:8f:fb:92:d1:
         58:97:5c:e3:da:a9:09:62:4d:e4:a0:33:b6:cc:47:5c:05:f2:
         b8:cd:6d:b9:ae:3f:b6:41:21:dc:bf:5f:7f:49:83:37:31:ab:
         ca:79:ad:eb:35:1d:f6:da:78:a0:be:8f:ac:67:58:28:b6:57:
         4a:6c:d3:e2:ed:db:4e:61:5d:0c:fb:8f:03:05:41:47:e8:51:
         33:c9:2d:f9:1b:91:5b:f4:08:aa:f2:3a:88:48:89:31:6a:ef:
         e0:69:b3:ed:af:9f:c5:b1:0a:e4:ed:35:9d:89:60:b7:50:ab:
         97:75:b9:57:37:9f:ca:20:d9:00:b0:64:67:76:b8:c4:85:f0:
         06:69:d1:f5:2f:c4:c3:52:4e:bb:ba:2d:d8:8f:be:b3:f8:04:
         70:9b:21:92:8b:6e:ac:ee:51:70:ab:d2:ad:37:6e:e1:73:a4:
         35:72:92:48:d3:59:c6:2b:42:61:1a:ac:17:25:92:00:d0:a5:
         06:21:34:0c:b5:21:ed:72:f4:7f:af:91:52:e9:71:16:03:d7:
         d2:46:6f:c1:4a:7e:ae:92:b5:82:f5:3e:21:f4:92:dc:b6:4c:
         e1:cf:b9:04:20:85:62:7a:5c:70:ab:c9:3e:7b:79:d2:2a:49:
         98:a5:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----