Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa
File:                     95769528-fe79-42fd-bbc3-1d9507dfe45c.roa (raw, json)
Hash identifier:          lxuoHGZeLif+zvFWeH+NuPoDlH+JKC6IZu8vZ2Xa1fk=
Subject key identifier:   42:75:8C:33:C9:78:21:B1:A2:8D:48:51:93:DB:6B:E0:5E:92:67:C5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2F9794598A9C9B7E91549B6200B41F4599BD9EE1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:97:94:59:8a:9c:9b:7e:91:54:9b:62:00:b4:1f:45:99:bd:9e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a61dadfd230933d5b609efc675e26acdaa47d0221aac04adcb417e1ec8bb51ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:1c:ba:1d:81:85:55:23:16:e0:55:4e:0a:
                    a4:06:30:92:7e:f2:e0:8d:b8:37:d9:d1:7c:83:4f:
                    ce:64:e6:fc:9b:1e:0e:43:02:5d:84:a6:c1:c5:61:
                    ba:18:62:2c:36:ec:ac:52:87:cc:e9:6d:1d:8e:24:
                    ac:2b:7c:83:c6:83:de:35:5c:39:63:b3:09:8a:f7:
                    80:4c:48:73:8e:26:4c:70:eb:52:54:3f:a9:12:15:
                    5f:ae:0d:b5:52:33:df:26:83:c5:1e:78:5e:5c:30:
                    38:ab:fb:c8:c4:ee:86:cc:10:5c:5a:82:93:10:22:
                    9e:15:62:7d:50:de:66:da:dc:11:9d:69:09:61:fc:
                    fd:b2:4c:aa:a3:6b:f7:78:90:ea:5d:04:81:d3:99:
                    ae:09:0b:5c:f3:c0:89:69:17:a2:54:d9:19:09:1f:
                    7c:6a:35:da:e2:f5:02:1e:93:23:62:72:17:38:9d:
                    1d:76:60:02:57:22:72:a9:15:fa:8b:bb:f5:88:fb:
                    fa:97:a6:83:15:77:03:63:61:37:78:ad:e8:c6:27:
                    1c:74:07:3d:99:2b:19:b3:28:57:e4:7a:f6:59:10:
                    c5:e8:e3:23:46:d6:ba:49:8f:ed:22:25:f8:4e:85:
                    6a:66:0b:73:a5:af:97:fe:52:a6:5f:a7:28:dc:6e:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:75:8C:33:C9:78:21:B1:A2:8D:48:51:93:DB:6B:E0:5E:92:67:C5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:84:6c:cd:a5:82:6a:ef:25:72:c6:c4:aa:2b:62:7b:29:77:
         45:e9:f4:eb:64:02:2b:78:d7:aa:3d:6e:c8:17:0d:87:ce:12:
         3f:9c:92:71:96:ae:55:83:c6:7d:d6:ea:14:b8:6b:e7:a4:dd:
         8f:f6:1e:08:7c:8f:b5:a8:80:9d:09:02:5e:2b:47:9e:10:25:
         9d:83:62:33:79:5f:e2:57:d9:87:86:4b:b1:66:7d:2e:3a:3d:
         a6:ca:93:16:02:b3:03:0e:01:2a:30:42:c9:ae:c0:87:c6:a2:
         48:4d:dd:57:9b:fd:64:fe:a6:5a:2b:fe:73:f2:88:58:d1:05:
         58:c7:26:e6:d8:1a:09:c8:82:56:5a:a1:79:e8:52:62:2b:8c:
         14:7d:d8:99:16:29:70:9d:a4:8a:31:ae:f9:5f:41:b7:a8:7c:
         1d:ef:30:bc:bd:ef:6d:18:58:4b:bf:bf:19:8b:58:49:d2:a7:
         dd:a4:a8:32:3d:10:2e:13:9a:b2:76:a4:8e:5b:9d:2a:1c:2e:
         33:e4:d3:26:e4:43:97:87:a3:a2:23:31:d3:70:d2:ed:02:c4:
         c3:bc:f9:d7:01:91:b3:4b:9f:22:8f:e6:6b:68:ae:85:e9:33:
         59:f2:82:86:9c:ba:25:bd:b8:ed:f0:a0:80:96:66:3b:01:c2:
         8c:b2:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----