Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dab2579e-916e-4ec1-bffe-9f6018c073e4.roa
File:                     dab2579e-916e-4ec1-bffe-9f6018c073e4.roa (raw, json)
Hash identifier:          uZvu2cTvU4VXyDwFE9W2AAINt5y9uzieIXYJdEJsziE=
Subject key identifier:   A8:45:A4:FC:A4:72:DB:AE:05:7C:70:A5:13:56:27:3A:2C:6A:FC:FE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       078A9F4DA59C875B343DE12C78E6166939750ACB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dab2579e-916e-4ec1-bffe-9f6018c073e4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1c::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8a:9f:4d:a5:9c:87:5b:34:3d:e1:2c:78:e6:16:69:39:75:0a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1a2b1492dfe8bc4b6004eb2f4aa1bf8c783c2291fa95ef20af23c40cdf09f6b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:b3:37:0d:95:95:8e:fd:76:99:a6:d5:6f:
                    30:f8:f0:53:41:93:2c:15:6a:44:a2:11:a5:80:6e:
                    b3:c8:45:67:78:8d:cf:78:07:e4:1f:ba:83:04:c5:
                    54:5d:bf:51:da:6b:4f:e0:4d:fc:3b:fc:77:b0:ac:
                    c8:ae:e4:01:99:6a:8c:6d:86:44:e7:94:f4:a0:d8:
                    41:28:a4:65:8a:34:e1:26:a1:5b:66:8e:03:0c:5b:
                    5c:5f:ed:67:83:96:bb:48:0c:9f:56:a4:1a:12:2a:
                    79:45:60:f3:ff:4c:0e:3d:75:a3:0d:9d:c8:75:93:
                    0c:8e:07:b6:53:fb:00:56:db:47:9e:37:99:a1:43:
                    8e:75:cd:ac:0b:80:24:7f:ac:7f:6e:31:1d:fa:c4:
                    91:83:83:6b:7f:68:c3:54:62:e5:01:6c:3d:b1:cb:
                    e8:66:5d:60:f1:97:18:fe:e7:e8:6b:e7:15:a6:de:
                    b8:be:52:2d:6f:36:a5:c3:db:ce:73:e2:c5:4e:d8:
                    b6:81:6e:0f:48:4a:57:f5:07:fc:51:4b:0e:00:91:
                    68:59:3f:9c:92:1f:7e:a1:60:11:bc:fa:93:39:7f:
                    9f:24:4d:63:f1:ae:93:15:37:2a:0f:6a:f3:16:36:
                    2f:81:2c:a9:a5:41:1e:63:dc:48:bf:a5:00:09:a6:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:45:A4:FC:A4:72:DB:AE:05:7C:70:A5:13:56:27:3A:2C:6A:FC:FE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dab2579e-916e-4ec1-bffe-9f6018c073e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1c::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:b5:37:de:98:08:2d:48:ba:a4:02:88:34:83:2f:70:d9:
         93:51:90:db:f7:41:ed:21:42:d3:7e:7d:c2:ca:a1:75:17:90:
         a3:7d:db:9d:4a:d1:b9:8d:40:0a:3d:98:b5:d2:83:20:65:6e:
         09:6c:83:4e:09:e0:d1:1d:12:57:4b:ea:db:c0:e3:16:f0:fd:
         a2:94:30:4b:69:81:17:ff:18:60:d2:b7:b9:1b:ae:84:d4:07:
         b4:45:e7:29:20:0f:98:de:28:fe:32:65:6b:5b:ae:f3:af:57:
         b5:55:0e:d5:fe:72:57:fb:78:92:c1:59:42:af:f2:51:eb:a5:
         6b:77:47:64:32:ea:6a:80:3c:46:41:42:81:8f:2c:c6:f9:bb:
         25:20:c5:5f:8e:17:f7:a0:bc:0b:4c:fd:84:ce:b5:6d:04:16:
         f5:d2:f2:42:d4:f6:93:b1:da:e9:fb:08:d4:30:66:21:96:1b:
         f6:22:a8:a0:1f:d4:3d:9c:f5:c7:88:7e:d9:35:76:3f:10:0c:
         3b:e8:f1:dd:ee:a2:ea:1c:1e:0c:f0:54:f7:ea:53:f4:be:e3:
         37:44:f6:83:4a:19:85:89:b0:e5:32:e9:98:a0:42:79:3a:a4:
         31:0b:af:f8:71:00:70:89:39:fc:d8:2b:45:dd:68:60:07:c0:
         e8:9c:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----