Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa
File:                     9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa (raw, json)
Hash identifier:          KWsKagJ4Tezz7XOvaMlZP+yHfhpAmv0fMFOVN9miIuY=
Subject key identifier:   17:C6:A2:C3:7F:EB:AD:C5:A1:B9:4E:E2:34:C7:51:C0:69:A5:96:F2
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4D6CCEE96FAD61BBE6AE742F2AF2150F92A27182
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:7000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6c:ce:e9:6f:ad:61:bb:e6:ae:74:2f:2a:f2:15:0f:92:a2:71:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=d06e6531a4fc75a8e335a57b1e105ecd6b0727a91addb6a7cb4a8e2bbe5871d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:dc:6a:e1:d6:59:fa:e3:7e:74:9c:7a:01:
                    a3:d7:ea:0b:e9:2a:73:fe:6f:4b:d2:ee:e9:fa:07:
                    01:d7:e5:e6:fe:b4:5e:4f:c4:e6:25:fd:26:b8:db:
                    54:45:ef:e5:7f:0b:86:dd:50:ab:70:41:63:bc:a8:
                    db:eb:c4:82:9a:ce:cd:7a:36:02:5c:e7:fa:ec:09:
                    c1:e2:70:2d:f2:88:7c:7d:75:85:df:69:a2:ee:4f:
                    27:7d:19:1e:fc:4b:80:69:35:b1:3d:2a:35:d3:5a:
                    72:7a:3e:16:ee:cc:f5:3f:83:a8:71:bb:41:24:34:
                    ee:0b:90:e5:b8:19:e9:cf:fe:a0:e6:a3:c0:b7:3a:
                    fa:32:55:12:f1:ab:f9:d5:82:83:a2:a6:8d:52:98:
                    97:af:7b:9f:c7:ae:82:c3:e9:f8:42:2e:56:70:60:
                    be:f5:06:09:27:4d:b6:9c:03:77:ee:74:7d:8f:3e:
                    d0:53:1b:11:3b:46:62:18:fe:28:48:68:29:04:9b:
                    7d:e6:8f:b3:a3:55:e0:a1:d6:6f:dd:09:b9:41:64:
                    e6:d7:97:7c:b2:67:49:61:ae:3e:8c:ea:b4:44:e4:
                    4c:e5:38:29:02:f2:78:4f:b0:41:c3:93:31:b9:a6:
                    23:eb:02:86:67:24:94:6f:d3:94:83:26:38:0b:ff:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C6:A2:C3:7F:EB:AD:C5:A1:B9:4E:E2:34:C7:51:C0:69:A5:96:F2
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9189bfbf-3763-4a1c-b4d7-fb9e56961927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:42:52:e6:de:aa:20:3d:ce:e5:47:14:6b:7b:4e:ab:cd:
         fc:19:e7:47:a6:94:56:40:c6:f7:1c:e3:5f:a2:6a:9b:60:8c:
         26:2d:89:af:d8:5c:cc:2b:9e:de:c9:26:97:48:1c:20:a8:5e:
         64:9d:01:72:74:e3:46:e0:7e:41:e2:3f:c8:f3:54:21:d3:90:
         bd:1e:ff:b9:73:1b:15:7b:8f:cf:29:a1:de:b3:4c:48:a4:56:
         f2:d7:cb:ca:3f:af:84:d1:dc:d5:c9:4e:6c:c5:52:81:2a:29:
         f4:52:16:f7:61:fc:e2:5b:79:a0:1e:bf:47:9b:d7:df:c1:48:
         c6:8f:87:0a:c9:39:b7:03:7a:89:47:59:7b:05:47:67:2b:a9:
         4c:67:77:87:72:15:31:0d:66:da:04:50:8e:7e:2f:d2:51:32:
         48:8e:a3:e2:02:17:5a:73:0d:64:b8:ce:c8:b6:a3:db:ab:e6:
         e8:b3:5a:f4:de:fd:68:f5:32:fc:4f:54:6e:03:60:b4:db:ff:
         11:66:3e:aa:49:90:fe:b8:5e:85:0d:02:94:98:12:22:13:01:
         1c:d9:87:d6:c6:30:48:15:58:b4:e4:48:aa:aa:48:4f:7b:33:
         d4:b0:d1:92:1a:92:14:19:ee:07:a0:a2:13:35:85:31:24:eb:
         2f:d7:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----