Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aba2318c-e96a-4058-8e0c-5aca2b56aad9.roa
File:                     aba2318c-e96a-4058-8e0c-5aca2b56aad9.roa (raw, json)
Hash identifier:          vylAfsUH9Xe8jmZzQZXugKckCll6pD6wl+TgG7m0bTU=
Subject key identifier:   1D:36:39:2C:BB:D3:8D:D1:0A:3D:6B:E0:61:DA:F3:BB:E3:17:52:38
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       72E90635098BF38E0D7733E635F8A4E053E69715
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aba2318c-e96a-4058-8e0c-5aca2b56aad9.roa
Signing time:             Fri 24 Jan 2025 00:00:00 +0000
ROA not before:           Fri 24 Jan 2025 00:00:00 +0000
ROA not after:            Fri 28 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:a000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e9:06:35:09:8b:f3:8e:0d:77:33:e6:35:f8:a4:e0:53:e6:97:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 24 00:00:00 2025 GMT
            Not After : Feb 28 23:59:59 2025 GMT
        Subject: serialNumber=e314dc695fbd27851f9ec125493a5b3c49444e85d51c992dc55df4b2da68259d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:6a:b6:eb:33:ee:53:be:b6:4c:88:54:51:
                    3f:3a:80:28:57:34:d2:73:89:33:72:fd:ed:d4:8f:
                    41:27:55:84:3b:79:13:a2:22:fe:8c:38:39:a5:7b:
                    5c:fd:05:bd:c6:8c:5b:7c:9c:da:16:35:97:f0:93:
                    a2:ff:7a:42:b9:69:55:27:4f:32:fc:f0:e7:f3:96:
                    f9:3f:1b:41:3e:86:d4:68:81:54:be:fb:a4:35:67:
                    d0:9f:4c:ff:a2:04:23:b1:38:93:b9:6d:ee:ee:ce:
                    ac:e1:44:e9:a3:a0:bd:70:f8:47:f0:e6:97:9c:23:
                    70:16:16:a9:fe:73:64:b1:d6:53:a2:c2:a8:25:ec:
                    fe:f4:32:1e:d2:3a:60:59:13:55:e3:35:24:17:1d:
                    92:44:a0:c1:67:b1:c5:5f:f5:be:15:46:66:ff:26:
                    d1:03:95:5b:a5:bb:7e:aa:db:ff:c4:47:2c:48:b1:
                    24:35:be:98:3e:62:7b:81:f6:0f:53:1e:7b:ae:5c:
                    53:d8:b9:62:94:49:99:82:86:cd:d9:1b:19:ab:e9:
                    9b:45:b5:c3:1e:7a:e3:cb:40:31:27:61:51:26:08:
                    14:1e:7f:03:d0:4e:58:fe:35:36:1e:66:c2:e3:10:
                    16:48:9c:61:65:11:68:79:fc:7d:c4:1b:87:83:e4:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:39:2C:BB:D3:8D:D1:0A:3D:6B:E0:61:DA:F3:BB:E3:17:52:38
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/aba2318c-e96a-4058-8e0c-5aca2b56aad9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:f8:6c:17:d8:42:6c:fd:27:b9:a7:21:84:52:da:c9:67:9a:
         d1:0d:77:43:74:5b:06:b7:33:69:6a:84:c4:b4:4f:b9:f1:bb:
         a3:ea:bb:c3:9a:38:7b:da:8a:6d:89:5b:ca:d3:dd:73:ae:d1:
         c6:30:9e:e1:a6:e4:5c:ac:06:9b:56:a8:53:cb:55:91:f6:53:
         e2:b7:d2:c0:3d:7c:da:d4:e1:fe:45:fa:ec:3c:fa:ef:d9:d2:
         5b:1a:76:b5:f9:45:f9:82:1b:1c:2e:e8:c7:24:73:8a:ae:9c:
         b0:29:93:93:da:4c:54:1c:67:ec:8a:81:4b:99:a9:91:e9:b6:
         de:e1:b6:26:90:4f:b9:3c:98:a2:b9:f3:7f:60:1c:60:ec:a6:
         93:98:5e:7f:df:48:e7:80:13:0c:d0:bc:d4:5f:b4:d6:45:d1:
         b2:d6:ea:61:0f:c9:d9:ff:1f:0b:bb:8e:cc:f6:b2:cd:2e:47:
         b9:b1:25:79:e5:0a:ad:c1:a0:1e:05:92:5b:0a:db:29:6d:b3:
         89:ef:0a:47:50:d1:30:7b:08:99:46:86:cf:c3:d3:6b:84:cb:
         1c:65:6a:f4:98:1f:ba:86:fa:88:04:2e:76:2f:17:aa:db:8f:
         28:61:1a:ff:d8:67:ab:8e:02:a5:a9:b5:55:07:19:fe:59:45:
         f8:da:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----