Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa
File:                     c2c34d45-d139-4122-8407-d2263ceee098.roa (raw, json)
Hash identifier:          pM+5hPoM/U2pEwPkiEHAiFCgk1puEryvkLLdH+K4Mvg=
Subject key identifier:   C8:21:EE:B8:8B:B8:6F:D1:4B:10:DD:9C:27:C3:1E:71:95:F6:C2:5A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       68F4F2FF0A9E12B12B0EF53FC349B0628F4FDF4E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da32:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f4:f2:ff:0a:9e:12:b1:2b:0e:f5:3f:c3:49:b0:62:8f:4f:df:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=972b9cd55da4fa16f67236ccbf7477af041e2a9089405acb4e6a25c19360f08f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:86:3d:84:69:cc:3a:81:6e:11:03:d3:49:
                    87:4f:65:e5:89:7e:36:38:b8:b8:cc:4f:93:36:f9:
                    9b:70:94:0d:05:63:3c:c2:40:58:30:9f:ea:5a:45:
                    2f:df:07:46:c6:cc:77:5a:e4:1c:00:85:df:9a:d6:
                    f2:1a:1b:7a:1e:43:1c:67:de:08:18:cf:d9:66:7d:
                    ea:17:20:f4:8c:42:1e:12:eb:ba:1e:f9:29:11:1a:
                    9e:1c:be:5b:ca:16:a6:e5:bb:3e:1f:3a:6d:81:84:
                    a2:24:74:39:30:4c:5d:b1:d8:2f:bb:b9:a1:e6:0b:
                    76:59:bb:39:52:d4:7f:61:e8:45:3f:18:f6:f5:61:
                    b1:7a:c5:32:dc:56:46:17:35:04:cd:de:17:27:88:
                    32:e3:9c:9e:a4:4e:a1:3d:e0:da:ff:6e:29:e1:0c:
                    f3:7d:d6:a8:97:1e:80:a0:bc:df:1e:08:80:ca:28:
                    06:4e:05:e3:ad:a8:52:f6:e6:c3:34:96:c2:16:29:
                    9f:e2:2f:3d:42:98:bc:b5:8f:86:5c:61:60:19:f6:
                    81:83:47:9a:ae:6b:6a:21:c7:a5:6f:4d:41:4f:bf:
                    12:95:ea:7e:fc:66:8b:29:47:c3:22:18:39:a8:ba:
                    fa:29:53:68:47:15:b3:27:5c:49:26:dd:bc:9c:0e:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:21:EE:B8:8B:B8:6F:D1:4B:10:DD:9C:27:C3:1E:71:95:F6:C2:5A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c2c34d45-d139-4122-8407-d2263ceee098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da32:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:f7:34:a8:7d:d3:5b:1f:f0:68:cc:9e:8d:2c:c9:19:0d:0b:
         24:06:a8:8e:1c:c6:cf:ab:0b:87:8d:59:98:9e:5e:3c:1b:a9:
         29:da:34:15:e1:03:46:de:ab:62:9e:df:52:c9:5f:4e:6b:28:
         cd:7f:72:5d:89:be:d4:33:25:03:e6:05:49:36:a2:ad:0e:34:
         09:d8:e1:14:37:5e:b0:bc:99:17:6b:a1:a7:81:c8:cd:71:ed:
         36:2e:85:65:9e:0d:88:91:44:5d:fa:a2:21:ec:06:24:73:62:
         6c:e5:87:03:b3:7f:47:99:76:85:e9:3f:c1:c7:51:b7:5f:2c:
         bc:43:98:06:af:7f:0b:4e:19:e5:2a:61:6a:0f:d4:43:68:b8:
         f4:97:fe:ee:43:ac:e9:6b:09:fe:28:a2:41:67:7d:62:e6:9f:
         82:02:0d:98:87:66:b9:90:c6:42:7a:62:63:6d:69:a9:21:d1:
         78:ed:d7:f4:da:72:83:32:0c:ac:8e:5d:a3:1c:63:3a:81:cc:
         d4:83:8d:91:32:32:64:59:b6:d6:19:97:8d:a5:67:df:01:87:
         da:81:16:6f:f2:f7:27:9b:fd:50:66:48:b0:51:91:29:06:ac:
         fe:52:5b:7a:0b:55:42:62:14:6c:99:4d:68:cf:34:15:91:34:
         f0:0b:da:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----