Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa
File:                     c8788082-9bee-454b-a32c-e6d016b76179.roa (raw, json)
Hash identifier:          dAZKcMm4JhQYu6r0RygScjrlndb8vThjhvvNt7xp/M4=
Subject key identifier:   28:D5:9F:11:D1:6A:7C:29:53:76:11:A6:E8:69:E2:EA:F2:58:06:04
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       756A321FB45E78BE0B70EEC7121FC6EFA92FC3F1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da20:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6a:32:1f:b4:5e:78:be:0b:70:ee:c7:12:1f:c6:ef:a9:2f:c3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=54317a89b04683631d824df5b08d8eadf71ebee7ec776bbe8e903a087261a2cd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:eb:2e:2d:cc:84:c4:40:3b:9e:cb:10:29:
                    08:b5:20:98:f1:1e:03:49:19:ab:94:fa:f1:6b:be:
                    0f:63:ac:56:8e:94:92:97:36:5d:52:2d:be:ac:87:
                    a4:69:63:ff:82:06:10:15:1f:61:78:d1:c2:97:87:
                    f0:84:28:41:8f:24:af:f6:20:50:10:25:a7:a8:84:
                    f8:ab:48:18:a2:32:59:fe:3d:a9:43:4c:98:7b:97:
                    e6:ba:43:5e:f1:1c:e0:e9:75:8a:d7:8f:1f:6d:c2:
                    41:9f:b4:e8:88:42:7a:36:17:4f:0d:99:b9:0a:4a:
                    8e:27:5b:4e:26:49:e3:5b:39:c9:a8:11:59:28:23:
                    8a:77:ef:dd:09:7f:66:da:c3:0e:00:2c:ff:05:aa:
                    b7:cb:d2:58:21:75:06:43:1d:d5:f2:88:45:54:48:
                    ac:2e:c8:44:2d:23:08:63:4d:28:39:7d:77:dc:1f:
                    c1:76:fb:c7:93:93:8d:83:98:e9:e7:82:91:e5:7c:
                    43:89:fd:b9:dc:31:1c:68:6d:32:e8:48:53:4a:28:
                    54:26:e5:3c:a6:6f:14:de:6e:54:b8:d5:9c:1b:5b:
                    ad:ed:7e:49:73:f9:64:ea:92:32:33:93:c0:ec:5a:
                    03:78:03:e7:0d:25:a4:9a:dc:dc:78:04:8c:0c:5c:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:9F:11:D1:6A:7C:29:53:76:11:A6:E8:69:E2:EA:F2:58:06:04
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c8788082-9bee-454b-a32c-e6d016b76179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da20:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:e3:e8:3d:71:8b:4b:fd:0f:2d:3d:d2:fd:ae:72:19:47:73:
         11:49:d0:18:f8:8b:81:3a:9d:82:59:2e:db:14:5c:25:82:f5:
         1d:fc:04:46:14:44:79:1c:07:d6:e5:39:a5:40:db:76:16:b3:
         6d:ff:4c:90:cd:8d:69:b0:e8:e0:6f:65:ac:46:4c:9c:9b:66:
         19:80:dd:cb:e8:df:88:fa:47:30:a8:5e:e9:f6:86:f9:26:61:
         19:89:17:6c:23:79:69:6d:b8:70:c6:f6:9a:fa:c5:89:0b:62:
         bf:85:bc:1a:df:b1:22:90:16:26:a7:ae:34:5e:47:3d:fa:72:
         c0:58:72:df:8e:46:9f:57:ee:88:34:f1:27:d2:94:fd:c5:56:
         cd:d4:2b:26:da:c0:2b:7f:1e:c2:9d:11:eb:6b:b1:5a:92:75:
         cc:0f:d6:31:ca:f2:e5:52:6a:c3:20:5d:47:5c:de:e2:a7:ff:
         72:79:de:55:da:c1:1e:25:d2:33:06:53:13:5b:31:85:59:49:
         bb:18:5c:01:28:91:9c:42:b7:ed:25:08:ca:c3:1b:f4:3b:13:
         ed:73:38:b8:84:ca:42:46:2f:b5:78:a7:e1:27:34:2b:41:17:
         31:a9:a5:f2:a7:4f:fe:ab:ca:e6:2c:1f:15:ad:aa:46:6e:75:
         85:27:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----