Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa
File:                     c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa (raw, json)
Hash identifier:          dpGvJGeXYyocak49By9sUG8exaSfgjN/WSRkyW15Exs=
Subject key identifier:   DC:2A:FF:1E:4B:70:CB:01:09:6E:2D:7C:01:85:57:E3:8D:98:24:32
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1335274EF550F6CBBB3C35104E860D8406C08D39
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:c800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:35:27:4e:f5:50:f6:cb:bb:3c:35:10:4e:86:0d:84:06:c0:8d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=99bc2978e028ad7d1c557d4db1fd8ea0281d9ce51544a7492c37bec9d1679747, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:23:17:b7:5a:17:ba:84:0b:11:76:6b:ae:
                    f9:53:40:82:16:1c:e0:cd:4c:3a:7b:70:26:e2:82:
                    37:d2:db:86:d4:92:89:61:54:46:38:c8:b8:c8:c9:
                    90:51:df:70:49:2b:a0:64:d0:43:0d:82:fc:af:7f:
                    9b:03:1d:aa:4a:6b:a8:ca:bc:4a:9b:a2:65:fd:fe:
                    ed:08:a5:d7:30:7e:7d:a0:e8:5a:7f:79:1b:e3:a0:
                    df:f2:19:ae:17:fa:e0:eb:30:9e:4b:a1:2c:55:21:
                    5f:93:6e:b8:70:db:00:77:74:63:f7:01:42:63:bf:
                    a2:b3:1a:ed:c9:5d:49:6a:07:09:95:32:c8:12:94:
                    88:88:41:d6:eb:55:25:8c:60:5e:f5:b3:90:d1:2f:
                    2d:50:62:1f:15:ec:dd:f5:59:df:9e:0d:05:db:8f:
                    27:00:dd:d9:54:22:3b:b6:63:42:10:1d:46:7c:64:
                    a7:56:d1:34:00:84:33:ab:d2:a7:79:45:e0:d3:07:
                    c6:4a:a3:e7:04:46:be:0c:98:54:cb:93:a9:1f:b8:
                    0d:a6:72:b0:c1:26:fc:58:48:5b:76:32:09:b4:23:
                    ac:cb:a8:71:25:6f:09:dc:f1:29:06:fb:04:fb:08:
                    eb:f1:1f:ee:b7:a8:c3:95:6b:a4:52:49:55:c8:22:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2A:FF:1E:4B:70:CB:01:09:6E:2D:7C:01:85:57:E3:8D:98:24:32
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c9bc976a-9bbb-401d-9a58-bcfa6dc78171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:92:8f:d4:0a:aa:f5:0a:b6:00:47:02:43:dc:f8:d1:2f:35:
         ba:0b:81:c6:41:0e:12:f6:8b:e2:f1:61:79:28:75:93:95:fc:
         a6:2b:4a:c7:df:1a:70:c3:1a:cf:c8:4f:31:fb:3b:bc:19:bd:
         91:20:c9:8d:bd:cc:22:3b:fc:1b:56:8f:ef:79:86:6f:91:20:
         75:d9:c9:16:42:c5:ad:d5:d3:21:97:d3:ab:70:0c:6f:b5:9d:
         19:c5:a9:f9:30:70:24:2f:df:2b:42:2d:06:12:1b:20:0f:80:
         05:ad:83:28:85:3a:b8:13:83:20:ef:73:28:8b:1b:ad:8f:c1:
         cd:0e:74:4f:19:1b:5d:41:28:73:5b:05:85:44:0a:f7:c2:38:
         f0:c1:47:de:79:09:c3:f4:42:4b:1b:aa:7b:ba:f8:17:61:28:
         c7:ff:1c:04:b0:82:17:4b:15:7b:79:16:d0:9f:40:81:0c:31:
         72:0f:4a:4f:7b:11:47:d6:88:75:fb:6e:ae:58:d1:e6:d7:33:
         b6:d5:d8:67:f8:dc:c5:3e:79:ff:43:3a:f8:df:eb:43:b5:89:
         08:14:12:43:e2:06:e4:30:f9:9a:d3:1d:95:a4:58:8a:e8:ef:
         ee:a4:91:64:d2:73:00:32:ea:f0:94:8e:ba:14:86:14:14:f2:
         3d:28:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----