Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa
File:                     b355bf84-223a-40db-b012-87ca07f79405.roa (raw, json)
Hash identifier:          U0JiqrQU7FD5YeHD5Pk9I+RLhETmGmWeLswaC9gqxlU=
Subject key identifier:   F0:97:74:FC:52:15:4F:AA:4F:4E:23:04:79:81:0B:4E:4D:39:F0:BB
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       313EE05C5A4234ED1A879324ACAC44121B627381
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:c800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3e:e0:5c:5a:42:34:ed:1a:87:93:24:ac:ac:44:12:1b:62:73:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9393822e81ddd5f01b1c5a980e87d72548f338302b16bf3eeccf599f4a8562f6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:b5:a3:02:ae:fd:c5:03:fa:53:3b:4b:f7:
                    3b:85:bf:8e:0f:ae:c9:a9:39:f6:89:8c:db:03:f1:
                    eb:8e:0f:c1:40:56:2b:4c:75:37:8b:ca:4d:b3:41:
                    5c:93:c0:6e:ed:4a:82:2d:a1:95:ab:fb:b3:70:2c:
                    21:6c:af:8a:dd:3b:4a:7f:cd:40:45:de:24:80:95:
                    60:a5:2e:57:16:11:a3:b7:40:3d:59:f7:12:be:20:
                    90:5a:99:12:03:0a:cb:6a:86:bb:ec:5d:70:f1:1c:
                    b9:4b:58:09:87:9f:45:6d:b6:65:ae:ca:6e:4a:f4:
                    3e:e7:3a:08:3c:31:f9:1d:a3:2f:77:80:23:d4:50:
                    6d:ae:64:bb:1f:ce:82:8b:54:1d:d6:23:b8:13:1f:
                    07:c4:72:a1:c2:82:ec:59:be:51:c6:ee:34:fb:44:
                    c7:e6:9c:8a:a2:d9:dd:d1:0a:6b:0e:6b:3f:81:78:
                    29:ae:ce:81:28:34:82:08:5c:78:d5:e3:77:08:d1:
                    3d:86:43:ec:e4:d5:6e:9a:42:cf:88:3f:59:a9:af:
                    78:55:b5:67:bc:eb:20:8f:d3:12:94:b4:29:1b:4d:
                    00:d0:5b:66:5d:67:48:e2:8f:24:71:a1:2d:a7:b0:
                    cf:65:d3:51:3a:55:10:28:7d:24:19:81:64:1c:4c:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:74:FC:52:15:4F:AA:4F:4E:23:04:79:81:0B:4E:4D:39:F0:BB
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b355bf84-223a-40db-b012-87ca07f79405.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:ad:69:b0:5b:d5:63:b5:2b:12:8d:a6:48:cc:c5:1b:62:3c:
         95:46:01:98:71:30:bb:9c:27:48:e8:c1:10:ab:a4:bd:81:73:
         6b:38:e2:b6:c7:59:75:b7:8d:cf:8e:8a:01:93:64:6a:6e:cf:
         a0:0b:30:04:a0:41:9e:6a:47:3e:8f:66:00:43:80:6d:04:c1:
         26:b0:85:06:dc:6b:b5:42:83:b3:c5:6c:c9:2a:d3:d3:5e:32:
         7f:4b:e3:cb:62:86:cf:fd:f0:08:25:04:2b:6a:06:96:71:f7:
         4e:3f:0c:60:70:1c:73:f6:30:de:0d:5a:d8:7c:de:bb:3a:a3:
         e0:08:b7:d0:20:9b:3d:bb:dc:4b:d7:8f:d5:0c:6c:3b:60:bf:
         7d:6f:82:64:33:6f:5a:66:6c:25:1a:a7:cb:f5:0e:d3:9d:58:
         88:cf:94:7d:a8:9c:f2:a9:f9:75:41:4b:31:0b:df:a7:08:d6:
         94:bb:ad:39:64:bd:03:c0:60:a3:d3:ab:52:59:82:8a:d2:b3:
         93:b7:6c:dc:a6:48:98:5c:38:89:22:bf:34:16:42:40:03:e3:
         12:f6:ac:f4:89:0e:80:10:c1:da:7e:ef:ce:a7:de:78:41:b1:
         33:c4:bf:1d:b8:a5:44:b3:e7:c7:57:9b:ee:b9:f9:ec:df:ef:
         2c:06:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----