Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa
File:                     b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa (raw, json)
Hash identifier:          2m6T0hJDVPsZIPmjHvvpTs9f4uvCRcDJ+V7oZtr1Hgk=
Subject key identifier:   BD:85:C3:82:A9:B1:97:6D:64:2E:3C:12:A9:EE:37:EF:E1:E5:26:E4
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0F3078F2A9AD7F098E66B92CE96F6FFA41025D5C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:30:78:f2:a9:ad:7f:09:8e:66:b9:2c:e9:6f:6f:fa:41:02:5d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1aec4dbe9104ca3aad1ea5bfb0f9e367f9b48c46b477cd9ea2326d60dd7d1898, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:6b:43:29:be:0b:e3:26:ab:49:d8:a0:c1:
                    44:3a:9f:b8:d6:c7:9f:9c:ad:cd:2c:12:05:ef:bb:
                    c8:b1:46:25:e1:67:21:8f:47:f6:7e:a9:e1:18:a6:
                    b8:71:65:cd:a9:1a:7a:9c:a1:77:32:32:a6:61:42:
                    5a:d4:ef:57:df:e7:64:e4:53:12:ae:7e:ed:c5:18:
                    34:13:08:4c:ba:cd:d2:3a:24:69:af:24:69:6e:08:
                    04:ea:35:f1:ef:cc:3e:63:1f:92:65:49:53:f7:30:
                    7d:4c:77:28:d7:23:35:fb:8e:50:c2:d9:7a:90:61:
                    f8:c0:50:96:a8:bd:e3:e3:6e:40:c7:65:4f:1e:a0:
                    6f:98:23:16:3d:7a:57:3e:ee:80:49:dd:3d:c8:8a:
                    ef:15:e7:b3:0f:14:aa:1d:41:37:4d:8b:9b:a4:7b:
                    a0:f1:f7:19:66:15:9b:d8:05:20:b9:64:62:70:15:
                    e9:ca:b1:88:78:76:9d:90:9a:bf:1f:27:aa:4f:b4:
                    69:1d:b9:50:0f:71:c8:77:8a:ab:cc:18:b1:be:da:
                    b1:08:35:41:19:e3:27:f2:7d:b4:eb:0e:2d:1e:e3:
                    fd:d8:e0:23:29:24:67:03:6f:99:d0:06:89:ef:d6:
                    39:91:fd:38:b3:8e:3e:27:65:c4:c7:dd:e4:22:7f:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:C3:82:A9:B1:97:6D:64:2E:3C:12:A9:EE:37:EF:E1:E5:26:E4
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b868e112-2c68-4dc5-b29f-8c64c4e09c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:a3:fd:c4:78:e7:56:37:a0:f2:5c:44:fe:9f:df:02:9c:a3:
         37:a2:aa:37:a2:fd:cb:8b:06:4d:ce:a6:25:b0:5b:25:3d:31:
         3b:60:21:64:88:40:87:e4:8b:0d:5a:05:9f:12:2f:8a:f3:75:
         0f:07:07:5a:c6:74:ee:b1:c7:0d:71:22:dc:33:57:cc:a3:ef:
         64:fe:84:44:96:de:b7:1e:d1:a0:e0:a6:ff:79:3d:23:ad:e2:
         9b:0c:11:36:fb:bd:74:3c:58:61:70:61:18:63:84:35:b8:0c:
         51:2e:d0:7e:a5:86:49:ab:25:ab:a8:7f:9f:a7:97:f7:82:30:
         75:4b:6e:fd:38:e8:c8:f0:f5:02:22:f5:35:9c:0c:00:03:41:
         97:c8:7e:6d:71:9b:67:ec:e4:09:b9:cb:e8:af:0e:af:44:e2:
         8f:9d:5b:15:f9:21:b6:8a:93:77:dc:ca:6c:4d:91:14:04:18:
         88:45:8e:d5:73:28:96:b8:20:c9:b1:3e:a0:93:c3:74:5c:c2:
         e5:c8:3b:c2:13:09:3b:6b:d2:60:b8:0d:0d:7b:cb:cb:33:b5:
         58:f6:d4:06:14:27:b5:49:93:d1:9d:5e:56:66:f9:d1:11:8d:
         bb:55:81:37:8c:cf:e0:7f:40:1b:19:fa:4c:3a:f9:ed:8f:14:
         04:71:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----