Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa
File:                     c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa (raw, json)
Hash identifier:          mk7M3rKlWinSz+B3VjMVe4Oexut0XRta4B7ocHXLEFc=
Subject key identifier:   9A:0E:84:C9:D8:CB:F9:AE:62:FD:45:4A:C4:A8:E7:6C:56:21:B6:86
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       648F2D5A64C035609DD9A87ACA855E34A3FA9974
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8f:2d:5a:64:c0:35:60:9d:d9:a8:7a:ca:85:5e:34:a3:fa:99:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=a264db93c4a761700d6811a88108f65b96d043f31f7ebbcf3e85024240154183, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:a1:34:74:61:5e:68:4f:e4:14:f6:51:7b:
                    18:d6:32:9e:bf:f2:3e:4b:73:ca:6a:1f:01:58:48:
                    ec:80:e0:26:3f:b1:dd:c8:ce:94:05:29:92:cd:41:
                    e8:3c:1a:72:8b:2e:0c:a9:ab:63:d6:f5:db:3f:bd:
                    26:35:b7:dd:53:c3:76:39:17:ba:c8:81:0f:91:1b:
                    f2:fd:5a:3d:8b:66:c2:78:fb:1e:63:01:77:64:b7:
                    6b:f7:d6:a5:1b:d3:60:16:34:fd:fd:1a:08:df:bc:
                    9a:11:19:c8:87:44:3b:3c:eb:64:b7:44:da:0c:95:
                    36:34:d6:be:9c:8d:51:fa:e9:86:8e:37:b3:14:e6:
                    d4:43:78:26:2b:30:c4:c6:a5:26:e0:85:12:69:25:
                    49:68:72:5f:56:97:3d:68:62:31:e8:ac:07:60:14:
                    70:33:ee:3d:42:25:38:e4:72:37:b6:53:bb:1f:1b:
                    d0:08:56:18:0d:c6:85:f6:bf:c6:5e:18:c7:5e:af:
                    1f:8e:33:27:08:9d:a8:25:4b:29:a4:20:d3:31:e1:
                    6f:44:25:a6:0b:b2:45:56:92:7b:e6:cd:60:ba:e7:
                    d1:07:cb:c2:c1:a5:98:3a:bf:d3:ee:0f:a6:f1:bb:
                    33:6e:2d:e1:11:0e:63:4f:05:06:d1:34:f8:93:01:
                    9e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:84:C9:D8:CB:F9:AE:62:FD:45:4A:C4:A8:E7:6C:56:21:B6:86
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c6ac1a0f-d49c-46c6-8787-267094ee9f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:15:32:77:fa:92:49:f2:66:d5:84:cf:b1:0b:d7:3b:13:64:
         a0:14:8b:9e:bf:dd:b9:21:e9:48:fa:a7:3b:19:d8:7c:51:30:
         45:e4:81:fb:62:a4:4e:14:96:1d:8c:f3:cc:b6:8d:a7:42:df:
         38:83:cc:f2:e6:4d:73:fc:e0:e8:0b:03:dd:fb:de:8e:00:bc:
         ff:4d:7d:85:75:4b:99:21:ce:1a:82:d1:9f:f8:16:8d:e6:e1:
         e9:27:22:d9:20:c8:41:01:d5:66:84:34:94:ff:d2:ca:40:cc:
         01:17:8f:7c:e5:f8:be:cd:66:33:6d:76:fc:0b:88:e6:9b:d2:
         58:1c:0d:f2:79:93:42:6a:51:68:fb:ed:fa:8a:24:61:ec:d9:
         a3:c4:f2:4b:56:11:0a:90:0a:68:1c:2c:ef:b9:d9:ed:7d:4f:
         e6:16:6d:c4:49:ea:45:bf:13:5b:07:26:71:8e:3c:ed:8f:65:
         eb:d0:d2:57:9e:9d:3f:8f:3b:9c:08:49:a8:da:4a:67:ac:71:
         50:1d:0f:5f:c1:8e:e3:64:c1:d8:6b:02:40:29:e9:46:b6:ff:
         f5:9a:8d:13:08:1d:95:5c:a9:cd:7d:0e:33:12:14:39:48:9b:
         21:d4:e8:b9:67:c5:98:47:cb:95:79:e3:f4:d3:ce:da:45:fb:
         43:58:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----