Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa
File:                     a6bff16f-4159-48b7-bc80-a4353edd73ed.roa (raw, json)
Hash identifier:          tOdzsDTaaCiD1WMpH2kLVJKs/4ignrS7ZZDeJiMDs6A=
Subject key identifier:   97:FC:4D:9C:49:B0:49:66:7B:12:6C:D3:76:3B:FC:E7:95:08:11:6A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3BCA1D4A422C49FCE57A3223B7ECEA8DF00AB0AE
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da14:8000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ca:1d:4a:42:2c:49:fc:e5:7a:32:23:b7:ec:ea:8d:f0:0a:b0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6fb8b9031e1ae01539420ef40da0f416d5237e20a3d6904b416aa5d189ad85f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:8d:47:08:08:0d:bd:dd:31:f4:32:2d:64:
                    f0:48:5f:55:27:d7:52:fb:ea:61:ad:89:90:29:26:
                    99:69:f2:90:f1:bf:51:58:fe:12:33:1c:08:b1:63:
                    4e:fa:85:0e:ea:55:ac:8a:4e:de:b5:cc:25:1b:bf:
                    d4:4b:86:02:de:bb:01:09:cc:a7:63:e4:bf:51:e3:
                    be:e5:40:05:2e:8d:79:41:54:49:11:f0:7d:53:44:
                    42:4a:b3:d1:34:b9:35:14:0b:57:01:c4:66:8a:32:
                    d3:a1:d0:5d:fa:3e:92:e1:15:ad:84:9e:0f:dc:f5:
                    c2:ce:d9:3b:ad:e8:c1:a7:85:b4:05:0c:3c:0c:54:
                    71:d0:6b:c4:41:83:65:55:b9:98:3f:7e:1e:9d:11:
                    fe:3a:1a:b7:84:a6:95:1b:06:82:f0:ad:3e:4d:04:
                    66:34:b5:24:cf:bb:8b:b7:bc:bf:1c:92:b6:c8:c7:
                    77:0f:f8:de:03:6b:bf:00:ec:f8:80:ac:d4:af:3e:
                    f2:c0:42:55:43:d9:7a:ae:86:b9:8b:1f:b0:94:72:
                    14:9d:9e:35:25:27:8d:bf:b2:4e:73:87:f2:d8:45:
                    10:f6:a0:81:7f:14:b0:bf:bf:03:9b:3e:7d:51:e6:
                    48:84:5e:5a:6f:25:62:cd:a6:23:bd:38:c1:9a:08:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FC:4D:9C:49:B0:49:66:7B:12:6C:D3:76:3B:FC:E7:95:08:11:6A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a6bff16f-4159-48b7-bc80-a4353edd73ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da14:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         bc:39:a2:a0:73:03:61:61:d8:b9:44:c0:ad:46:ef:19:5c:1b:
         67:d3:e7:1d:f6:81:19:55:cc:53:7a:f7:5e:0b:32:b5:65:1b:
         18:a9:17:84:15:a8:c8:5c:0e:5b:b7:01:56:b6:7b:99:d0:0e:
         79:d8:23:77:c5:0e:28:63:f3:8e:57:33:38:de:47:da:37:5e:
         77:2a:48:cf:ff:46:cb:7d:98:d8:75:f2:87:33:c3:c3:f8:56:
         0c:70:d6:a9:f9:f5:3b:98:c4:e5:9a:00:79:de:ad:7e:c5:a9:
         d8:cf:ec:96:1a:e4:a8:4f:81:20:d1:b0:4b:af:4d:8d:2e:65:
         21:c9:e1:00:83:09:1a:17:f9:70:38:11:72:79:21:c8:cf:5b:
         14:53:7e:93:22:5a:cc:20:9c:9a:58:09:55:4f:b7:48:85:ec:
         2a:c5:59:ee:0c:78:27:2a:06:45:49:03:3d:f2:ed:33:9c:ec:
         39:bb:4b:5c:37:75:ab:b1:49:10:99:80:6e:a0:e4:74:59:21:
         b2:c4:3d:b3:93:a0:0a:2f:b7:ba:02:11:76:3c:81:5f:17:94:
         cd:1d:c2:23:db:e3:dd:78:39:73:04:25:e1:c5:45:d6:62:2c:
         e8:55:3b:c1:18:de:7d:4b:2e:63:12:64:32:66:57:ec:7f:cf:
         62:d7:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----