Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa
File:                     c98730bc-a0cd-432d-9952-237d62bcfe53.roa (raw, json)
Hash identifier:          6CSu/rsjOx/udlrqyGrZRNa4qkhty9gqZED9V+VcEDA=
Subject key identifier:   90:BA:98:E9:C2:58:9E:2A:F1:0E:DA:0B:38:E4:EC:80:2C:5D:FB:C5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3D96BB8EA2EB8588759E7C544E5897615254C27F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:96:bb:8e:a2:eb:85:88:75:9e:7c:54:4e:58:97:61:52:54:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ebc443291c7f154d32667f1f5f4cfb76d84c1b7dd1e68e5ec1c082ded5a60507, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:75:ba:90:7f:c3:d0:2c:8e:b8:66:ad:c0:92:
                    34:7e:31:61:32:56:df:e1:54:ec:38:a5:15:f7:c5:
                    24:ec:da:7e:25:9a:29:4d:df:fc:e1:53:b0:f5:f0:
                    e1:92:57:b1:0f:b3:5f:98:0e:be:b3:1b:1f:68:3c:
                    e5:03:b4:f0:80:1c:01:93:53:2d:75:7e:a5:54:ae:
                    03:ee:58:c8:fa:35:8d:3e:4c:78:8a:2b:bd:1f:c8:
                    aa:7a:cb:76:36:ae:c3:8b:e8:dd:53:76:5e:85:07:
                    7e:85:e3:e1:53:e0:ac:9c:b5:df:f0:eb:ed:0f:55:
                    8a:6b:8e:53:31:06:fc:f2:fc:47:b7:e0:33:96:eb:
                    34:14:7e:6a:0f:9a:f2:56:b9:88:a2:b5:d5:f7:95:
                    b5:3c:00:3c:4d:b9:6b:9d:85:77:c1:48:73:e5:44:
                    73:93:0a:52:a3:e9:65:b1:fb:9d:1f:17:db:14:3c:
                    de:8c:cd:94:07:aa:22:1c:26:13:7a:cb:5f:5d:94:
                    26:8b:e1:ff:1c:2d:77:ad:d3:b7:06:4a:d0:3b:7a:
                    20:2a:8e:99:60:67:d1:6f:2b:32:83:00:1f:a9:47:
                    e2:6b:6e:80:5e:e5:81:40:67:61:f8:e3:07:e6:8f:
                    39:f8:4b:e4:bd:be:ac:8d:df:10:a3:2e:43:df:ff:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:98:E9:C2:58:9E:2A:F1:0E:DA:0B:38:E4:EC:80:2C:5D:FB:C5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c98730bc-a0cd-432d-9952-237d62bcfe53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:2b:dd:39:ee:37:dc:bb:fb:03:ee:55:3b:7c:b5:85:3a:5f:
         af:2e:fe:a0:8a:22:8d:33:55:87:71:ad:09:a4:d1:8e:c4:30:
         4d:0e:4c:c5:e9:f1:b3:7e:ac:e9:57:51:15:89:e3:dc:5b:49:
         8a:d1:19:b6:0c:93:94:fa:f4:6f:b7:6b:28:2d:06:36:fc:c3:
         82:18:3d:28:33:d5:85:13:66:5b:fd:31:98:fe:65:13:0b:cb:
         b9:f7:cb:a3:ac:0a:c5:a0:99:44:68:0d:80:a9:6b:14:1c:94:
         ba:f5:4d:eb:cd:d5:77:6b:d5:31:c8:a5:ea:83:94:d3:25:6f:
         04:95:69:ab:41:dc:9d:be:e6:44:9b:d1:0d:9e:3b:58:f3:26:
         c2:5d:14:c7:4b:33:7f:d7:87:ab:af:ad:13:df:87:fc:37:a9:
         2c:06:e4:02:cf:39:ce:33:82:8e:bc:38:a3:09:c9:d9:96:08:
         90:58:53:37:2a:de:f5:e7:cd:02:3f:d6:1c:37:1d:e9:ba:93:
         69:a3:91:5c:8b:bb:b2:b6:56:60:da:e3:41:51:7a:a4:af:cd:
         a0:e3:27:16:84:dd:30:68:3a:ab:19:70:81:b5:36:ac:d9:82:
         24:03:cd:76:d0:44:b8:f7:6d:4b:3c:32:8a:f9:0b:db:5e:e4:
         0f:dc:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----