Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa
File:                     e07764e8-f635-4cf8-8330-8cffc6056fd8.roa (raw, json)
Hash identifier:          KMsLCkr4z2OIuXQkdxRNOaIoyFAmZn1OQsiD6PuKX1Y=
Subject key identifier:   F0:3C:D7:EF:DE:97:D5:E4:D1:93:BD:E6:1B:D9:7E:D4:47:2A:5C:9C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       63616D705880CBE4CCCCFE1B0EC0EDA69683FE08
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da14::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:61:6d:70:58:80:cb:e4:cc:cc:fe:1b:0e:c0:ed:a6:96:83:fe:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=92424d088be2540f326f991015e70df100446bd410a995b4b50aa28cce1e3cdd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:24:7a:73:ee:fb:af:9f:61:62:c4:f2:e6:5c:
                    6e:7e:71:c9:5a:32:fe:fc:13:fc:69:44:8b:6f:d2:
                    31:95:80:e6:d3:36:3a:c9:9a:5c:08:90:2b:84:07:
                    fe:75:3d:f4:42:88:3a:8d:32:ea:87:02:67:47:41:
                    01:95:f4:e3:41:55:88:e6:40:fe:5b:0e:02:98:00:
                    ce:f3:48:e4:7b:07:04:b5:b4:33:09:2d:4c:2c:7e:
                    07:5e:6d:21:ba:76:7d:8f:4c:b1:e6:64:c4:27:e1:
                    fe:0d:b7:72:5f:db:7e:94:9f:30:eb:86:30:18:f1:
                    55:31:8f:98:7b:1f:8c:7c:a5:41:37:c3:44:05:1c:
                    79:9b:7a:fa:1a:8a:cc:05:6d:78:8d:03:d0:61:0e:
                    fd:57:c9:aa:56:cf:74:aa:ab:fc:d0:fe:47:6b:a9:
                    41:1a:a3:d6:65:c4:3a:b2:fc:65:c9:9b:f4:4c:bf:
                    8a:3d:6c:44:2b:33:61:0e:dc:81:73:79:b4:ea:1d:
                    79:8a:31:bb:41:f6:14:7e:c5:5f:9a:86:d6:32:a1:
                    98:c7:2a:81:3d:c4:2f:2c:8f:eb:af:03:1f:7c:4a:
                    27:96:93:7f:83:e0:f2:c0:e0:8a:af:d8:f3:5e:b9:
                    c6:3f:cf:04:e1:d7:1c:d0:f4:3b:8a:d6:1e:d1:eb:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:D7:EF:DE:97:D5:E4:D1:93:BD:E6:1B:D9:7E:D4:47:2A:5C:9C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e07764e8-f635-4cf8-8330-8cffc6056fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da14::/35

    Signature Algorithm: sha256WithRSAEncryption
         49:fd:0c:09:64:5d:c2:27:44:b0:78:4c:e6:c4:b8:4f:34:99:
         9b:88:79:bd:28:07:cc:ce:3c:1d:56:93:82:df:b2:c8:ac:07:
         93:7f:6b:f2:2b:a8:13:aa:7b:ed:bc:46:83:a4:12:be:ba:fe:
         43:d0:67:46:0f:0a:c1:6c:1d:29:6a:98:50:1f:01:1b:a7:f6:
         a3:80:5b:b2:cc:f6:36:28:89:82:69:48:80:a5:e8:3e:d0:71:
         31:cf:0e:ef:49:2c:f4:06:ab:02:04:ee:f0:67:af:1d:63:81:
         8f:ea:ad:e6:33:b4:b9:95:2c:f5:a2:7d:6e:49:01:1f:e7:a0:
         e0:87:7c:84:3f:03:e8:3a:80:ed:a2:da:18:77:e0:38:f3:81:
         72:52:94:77:f5:2b:e6:57:35:98:44:37:c4:b5:d6:27:00:54:
         4d:dd:51:61:2c:b8:7a:f7:ce:51:af:af:78:78:e2:7e:65:c1:
         8a:73:50:ad:d6:0a:cf:e1:cb:04:11:66:55:eb:b4:cb:72:d6:
         26:c0:af:a4:e5:09:e4:32:7e:c5:39:0e:eb:56:1c:5b:32:be:
         11:63:c1:84:36:82:bf:6b:35:0a:01:f6:6d:7a:08:f0:24:88:
         ec:42:d9:a7:42:f9:8d:11:64:00:d4:f7:6d:fc:28:ed:6c:12:
         34:8c:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----