Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa
File:                     b3eb2916-fdc8-4499-8857-c751c9ab3822.roa (raw, json)
Hash identifier:          9AFCOotHasJYQPUn8Ak6Rxw+vNzIKf2OTXSkTmVUR8s=
Subject key identifier:   D1:76:67:CD:5A:BF:AB:09:A2:AE:3A:95:8A:DE:39:64:9D:B4:F3:B0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       19B18B4FBAE31D123D32156C1E05B9AA1C86180C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:4040::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:8b:4f:ba:e3:1d:12:3d:32:15:6c:1e:05:b9:aa:1c:86:18:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=125732944bbeca03d44e1f6934a864fb70c723aeea0ea780d85cccaff23b1389, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5d:a7:b0:75:71:9e:7a:38:86:fc:cd:c3:ba:
                    b9:d5:98:d1:28:cb:55:d4:c1:56:04:9e:1f:67:83:
                    d1:c7:e1:e0:42:60:8c:58:ec:f3:2f:94:22:17:16:
                    68:1a:40:68:78:4e:bb:ba:e1:82:70:84:d6:64:fb:
                    61:a9:1e:5a:4f:ca:ea:08:76:5e:e9:1f:e6:cf:f2:
                    1d:db:6c:1a:08:b1:51:8f:7b:e0:3b:a5:bc:9d:88:
                    10:3e:7e:14:e5:f4:98:6d:2d:31:25:1b:20:30:de:
                    85:17:f1:61:07:80:24:e0:e5:07:62:c3:58:53:2c:
                    3a:0e:a1:3b:f3:f5:48:90:06:dd:98:bf:46:c5:cf:
                    14:af:04:e7:90:f0:31:0e:67:a6:4f:cc:31:22:c2:
                    d9:84:50:a6:ca:9b:17:c0:c5:d8:87:b2:06:97:fe:
                    62:8a:10:22:d6:63:3a:1c:aa:1a:13:d3:03:b2:e3:
                    eb:15:7b:aa:1b:f0:32:21:ed:73:84:e9:13:c2:bb:
                    97:22:0c:a9:3c:11:6a:ee:99:f2:26:a0:84:81:7c:
                    f1:5d:80:18:db:2c:ed:89:39:5a:67:af:83:de:78:
                    ee:4d:ec:5a:95:75:cc:f2:fa:b3:e8:03:3d:07:60:
                    ba:b1:67:7c:72:b5:8d:3b:5c:aa:aa:20:4e:94:5a:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:76:67:CD:5A:BF:AB:09:A2:AE:3A:95:8A:DE:39:64:9D:B4:F3:B0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b3eb2916-fdc8-4499-8857-c751c9ab3822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:4040::/46

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:38:d0:29:2b:4d:a7:98:09:78:2b:44:5e:04:b8:30:91:
         53:62:42:c7:af:e5:b7:36:23:68:27:90:99:92:ba:b1:d4:1d:
         ac:72:b4:97:ff:c8:9c:7a:39:2f:dd:b6:b5:c6:1c:5e:15:f6:
         76:26:e8:90:a9:85:07:f5:04:66:5b:35:7c:b6:9a:c1:87:d8:
         f2:4e:93:e3:f1:88:90:2a:53:fa:bd:b2:83:e2:79:07:95:90:
         b9:98:84:9a:8c:02:ea:1d:2c:b7:32:26:fb:e1:e7:f5:03:db:
         51:0c:29:24:0b:98:ca:75:4e:bf:c6:bc:7d:e9:07:a6:6d:0c:
         8a:5a:d7:fb:ec:b8:f7:f7:53:5a:12:85:9e:ec:38:5d:7c:b7:
         67:a2:7e:56:c0:20:b4:df:fe:ee:d4:1f:f4:42:bc:2b:b9:e7:
         69:10:39:40:7d:c4:b5:99:d1:32:e8:05:ac:fe:40:2e:b4:01:
         41:3b:4a:8c:49:15:ba:1a:7b:ff:c2:3b:21:86:5e:3e:c0:39:
         ba:5d:05:3c:a6:bb:04:b1:ca:92:03:d8:66:96:c1:5b:df:5c:
         75:25:0a:51:fc:5d:dc:d1:83:fc:41:51:29:c1:aa:be:16:a4:
         5d:de:5e:92:47:ad:39:ba:7f:c5:b9:2a:f6:76:fb:68:15:15:
         65:9a:52:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----