Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa
File:                     92488c39-e92d-4c20-9728-7956e83ecf4e.roa (raw, json)
Hash identifier:          WQoMnGMeaylnaV8jzLqzPdQldvoAcy7OttongcgAAI4=
Subject key identifier:   3D:45:70:A7:5D:BD:B0:7E:CD:CE:77:55:89:FB:94:C2:3A:95:73:2C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2F8CCE2E2D98D043205A9AA6EEE62CF28ED48F28
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da19:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8c:ce:2e:2d:98:d0:43:20:5a:9a:a6:ee:e6:2c:f2:8e:d4:8f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=80574e338516aed42b23fa2ae34b25e1c26ea402e13dc4c4eed6a55e410c8d6f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:b2:28:8f:74:a6:5b:1f:af:bb:10:e3:88:
                    4d:33:04:fe:36:6e:a4:47:f4:12:bd:2e:6a:22:6b:
                    7c:fd:7b:55:7f:03:c7:27:8a:c4:c9:9f:76:22:28:
                    79:36:2b:4b:d1:b9:be:f5:2e:dd:b4:24:f0:50:55:
                    62:0c:d0:22:0d:1a:d6:1b:a1:15:f7:3e:73:ae:d0:
                    b4:84:c4:35:5d:7d:52:51:6a:6a:09:2e:16:0c:44:
                    bc:a7:4f:04:49:e7:d3:b8:cd:0a:61:df:94:78:c8:
                    d9:f9:0b:94:be:ca:1d:3b:13:c7:a6:af:9c:1f:c1:
                    a6:10:52:7f:be:1e:3c:de:7e:8a:35:78:8f:42:e8:
                    fe:09:a1:fa:ef:f3:a9:01:47:e4:dc:9b:2d:f8:9a:
                    4a:59:43:6b:7c:aa:ca:c0:1e:7e:0e:3f:0e:37:75:
                    e1:ec:e0:34:2f:d0:f1:6d:68:a0:0a:1a:2a:4c:4c:
                    b6:de:b3:58:60:84:4b:d7:2a:d3:06:a0:1c:70:83:
                    7a:38:bb:07:6e:9e:9d:07:c0:85:4b:ff:9e:2a:33:
                    73:0e:e9:16:2c:a0:c2:cf:c2:56:b9:09:ba:5f:7a:
                    03:c5:be:1e:df:7a:f8:b9:e4:07:e2:a5:b2:40:81:
                    aa:04:b7:81:73:67:16:63:23:d7:7a:52:77:47:07:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:70:A7:5D:BD:B0:7E:CD:CE:77:55:89:FB:94:C2:3A:95:73:2C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/92488c39-e92d-4c20-9728-7956e83ecf4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da19:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:3a:95:b0:af:b8:e6:a0:2d:db:e5:3d:d5:22:aa:c8:44:
         17:67:7a:f8:96:1f:86:c2:62:69:77:7f:c7:67:4c:e1:45:56:
         18:bb:28:86:66:14:cd:73:ac:77:14:d6:11:8c:8b:54:c9:58:
         6a:13:46:17:8d:c8:31:c9:0e:aa:9e:8f:82:fe:51:76:0a:1e:
         0c:9b:a0:83:ed:46:80:ea:8f:0d:84:f3:44:ef:d0:85:45:73:
         12:ed:00:19:65:19:09:f1:0d:82:aa:aa:a9:58:d9:4b:37:b3:
         ec:12:fc:de:0c:69:aa:39:8b:ee:85:b8:fe:ee:31:84:fa:16:
         03:db:a2:b0:6e:b8:86:45:b1:47:40:53:17:9a:74:8e:88:9a:
         81:cf:00:6a:07:2a:d8:7b:a9:a2:fb:58:c1:b1:01:17:c3:0e:
         07:68:13:12:8b:49:d1:7a:af:61:5b:71:8c:42:a1:a8:e8:43:
         09:6f:3f:ef:07:76:f6:8f:fc:a7:b4:94:16:cb:13:ed:9d:bf:
         1c:a7:0d:34:21:52:db:45:a1:64:a8:de:bd:cf:1f:ee:cc:cd:
         5b:08:cf:aa:58:83:01:de:77:aa:ff:51:a7:8f:62:7f:96:47:
         11:d1:c7:ed:b2:c3:59:a9:b2:cd:32:38:3b:4d:04:2e:3b:6d:
         02:fa:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----