Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa
File:                     9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa (raw, json)
Hash identifier:          mQwN3XA55g8Zh4BMG2RrF/ffTKJfNIFPVzzr2a45fPg=
Subject key identifier:   95:3F:6C:6D:5C:B0:80:AC:11:39:20:57:3F:18:2E:AC:A4:EF:7D:95
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       03244D321AF854146590821B8F5BCBC1F9E84288
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab9:b000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:4d:32:1a:f8:54:14:65:90:82:1b:8f:5b:cb:c1:f9:e8:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=5ae0510afd90f2feb1fb8c53fab7d3311c19cbb79404a6fcbb4c881426873e2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:b6:73:cb:ed:68:52:2d:17:48:cd:e3:fa:
                    b4:3e:30:bf:7c:45:e5:b8:22:71:ea:bc:30:d7:e3:
                    b4:b4:4a:81:29:d9:6f:e2:87:e2:a7:47:1f:1a:45:
                    01:f6:fb:40:dc:fe:91:5b:54:b1:ff:f4:a0:56:28:
                    17:9d:8b:b5:36:20:6f:0d:7e:ff:c1:39:f7:2e:f3:
                    6c:96:35:16:0c:39:f9:9c:43:84:f0:f5:b4:68:22:
                    60:54:cc:f2:c2:8f:0c:dd:0a:50:58:af:ec:55:d9:
                    e0:76:c0:aa:e0:af:81:c3:54:f8:56:e8:ac:29:32:
                    5b:c0:54:fe:13:79:a4:95:db:f9:e6:42:a7:a0:c2:
                    42:7f:e4:fe:48:ff:fc:c8:45:44:77:39:82:b3:64:
                    ad:2c:92:4b:fb:33:90:32:ea:fe:b7:d6:da:08:28:
                    86:e4:39:7b:b9:8f:f3:b3:90:7e:ce:2f:f3:92:21:
                    94:42:31:53:15:9e:f3:61:45:78:87:30:28:cc:bf:
                    3d:f5:a3:30:48:11:20:dc:25:5c:91:c3:93:79:f2:
                    fe:b6:f1:a3:3e:b1:16:51:f4:29:2a:c9:17:cf:48:
                    1f:a0:70:b3:fe:74:e7:fa:84:23:e3:76:c4:82:ed:
                    32:0d:59:eb:95:35:b6:8e:ef:66:25:da:a0:d3:43:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:6C:6D:5C:B0:80:AC:11:39:20:57:3F:18:2E:AC:A4:EF:7D:95
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9aef2d7c-13ad-45c1-b5b7-aa535dfbf17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab9:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:9a:94:39:5b:ac:47:01:e8:0f:4b:66:90:07:19:03:cd:
         a5:4d:f4:a4:c3:12:93:1e:b1:d8:fb:09:6c:f0:79:3f:b3:9d:
         cc:22:3d:76:7d:b6:33:62:e3:ad:5b:31:1c:d8:63:11:71:83:
         1f:02:11:c7:7c:4a:cc:7c:96:ed:2b:3a:bd:be:70:06:dd:59:
         4c:0a:45:40:85:29:bd:4f:b5:0b:4c:03:e9:d7:51:0e:4a:98:
         1e:b9:b6:cb:4e:1d:d5:85:ba:12:90:86:0e:7f:ec:4a:12:ed:
         a5:e7:5f:18:86:97:99:18:33:d2:b4:25:40:46:20:6b:72:f9:
         f1:2c:ec:77:32:89:1f:2c:cd:45:71:e4:6a:66:59:9a:29:07:
         0d:8b:6b:ca:51:f9:be:d0:fc:c3:06:cf:02:4c:13:65:4c:88:
         5a:20:59:38:aa:69:5e:5f:c5:b8:76:8a:ba:7a:ae:fc:70:fb:
         87:6f:13:b7:9d:27:b1:6e:65:37:1f:d4:77:e5:ae:80:c9:ba:
         96:cf:ef:8e:74:a8:9f:33:64:97:44:0e:60:f2:bb:5c:59:78:
         b2:6e:20:87:6d:06:01:7c:22:2c:2c:f4:ec:e7:73:cf:52:9f:
         50:82:c8:23:c2:f9:cc:03:e0:79:8d:23:c7:49:3e:56:e8:44:
         c1:06:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----