Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa
File:                     8eab24e3-cddd-4314-ba19-97484d66d2ff.roa (raw, json)
Hash identifier:          3/kxZ+yT6BPoH1ODw4Kbim9mFlUph2vXxIO3MXC6IKQ=
Subject key identifier:   92:96:94:A6:06:50:84:85:F6:C5:B7:DC:5E:69:A6:67:8F:A2:D7:1C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0E11C1DDF90E54689ABA5DE8AA00E33352D7073B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daa0:4800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:11:c1:dd:f9:0e:54:68:9a:ba:5d:e8:aa:00:e3:33:52:d7:07:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c6540c863535f6714ba942cff4224d6580af7815c1fa3225c8a8a2bb90a99456, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:f0:2e:43:4a:32:23:cf:86:3f:31:f1:9f:
                    05:d6:79:63:31:a5:dd:64:91:c5:90:63:f8:b8:51:
                    d5:80:40:65:8d:6f:56:3f:a3:9c:57:2d:fa:1a:94:
                    f2:39:da:c0:de:d8:14:c6:d8:f9:87:a2:53:9d:3c:
                    34:76:69:d6:98:05:df:76:c6:de:93:cc:ab:be:18:
                    01:07:ff:3f:98:b0:fb:88:c1:98:2a:2a:4a:85:0f:
                    06:30:db:b9:74:c6:35:b4:ad:32:fa:bc:90:b3:ed:
                    9d:46:22:d2:3a:53:48:e3:84:79:93:bc:ce:9c:78:
                    04:b3:18:12:91:fd:79:fc:8b:cd:30:cd:87:f3:44:
                    e4:0b:7a:c7:b1:d4:9e:d0:20:04:1e:85:54:51:a1:
                    a2:03:0f:54:a9:0a:39:eb:f8:71:da:e2:ea:f1:3a:
                    4f:f7:24:c6:0d:8a:2a:ce:70:c9:ee:b9:39:a6:d1:
                    b3:08:0e:2a:e0:fd:62:b0:3d:88:ee:0a:b7:79:b0:
                    58:c0:a6:3c:7e:61:17:f7:ac:e2:a0:30:dd:fa:c0:
                    db:45:84:e5:ca:ca:8a:ee:8d:53:02:8b:d3:d0:c5:
                    94:7f:fe:d6:73:5f:18:d0:72:1d:00:46:2f:7d:90:
                    b1:e7:9c:45:06:a6:fb:7c:18:58:96:35:df:85:0f:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:96:94:A6:06:50:84:85:F6:C5:B7:DC:5E:69:A6:67:8F:A2:D7:1C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8eab24e3-cddd-4314-ba19-97484d66d2ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:f1:f8:e2:29:fa:18:f8:eb:57:2b:6a:87:b0:e9:f5:cb:30:
         7d:6b:26:0d:c0:3f:a2:48:ea:15:17:b3:48:b1:9c:28:0d:bb:
         22:dc:5e:a7:b6:0d:f1:a8:06:05:f4:b9:55:23:5a:0a:11:ef:
         33:e3:77:18:c8:50:30:85:35:44:d5:61:d9:b8:74:c6:91:e7:
         c2:ca:73:67:7d:d5:fa:c5:99:c2:ff:d6:56:00:12:3c:12:a6:
         e6:b7:bd:dc:ac:33:25:4f:17:ec:6d:a5:19:21:6c:a5:0e:93:
         0d:36:ef:5e:1e:89:f3:63:9a:4b:53:29:e2:34:25:10:28:1f:
         0e:f2:fe:ad:4b:a3:20:27:53:ea:ab:82:4f:fd:81:ec:b7:92:
         0a:68:a2:01:13:09:de:70:e3:5c:13:04:89:c0:2e:e6:36:c6:
         57:86:72:9a:56:a2:57:00:80:b7:e8:2a:24:8f:83:4a:61:a1:
         5d:3a:1e:f0:ab:a4:3e:d5:5b:89:d6:4b:29:11:5f:5c:f4:85:
         be:57:fc:94:fc:a5:41:a8:62:50:41:6f:ec:46:1f:a5:18:d2:
         5f:4d:f8:05:d7:62:b4:64:34:ea:01:f6:80:4a:4e:14:e4:1b:
         b1:4e:1a:71:a1:ab:e1:ad:cc:6a:76:d9:a8:ff:a3:31:f8:1b:
         ad:57:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----