Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa
File:                     e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa (raw, json)
Hash identifier:          qsmk/482aEuz94/iXtxQMdmVzdTYECeZjkRTvRU/UKE=
Subject key identifier:   3E:25:0F:A4:2E:DB:2F:20:D2:4F:81:ED:34:57:7A:73:B9:14:29:F0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7F28B6A735F9CDA240CC95BE593CBF265037A7FD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:28:b6:a7:35:f9:cd:a2:40:cc:95:be:59:3c:bf:26:50:37:a7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=46ddb044124225afd767512c1538d578937629d24f8e506f30b888f8ca51ad92, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:58:5b:56:68:6c:b6:3a:92:ae:fa:05:29:
                    6c:40:67:89:68:60:eb:a4:d7:b1:61:2b:f3:da:76:
                    57:52:6a:8a:07:69:a6:14:b3:bf:a5:e1:93:e7:8c:
                    7d:1f:a4:ab:40:ef:3b:f4:e7:3b:c2:d0:15:69:98:
                    8a:72:60:04:da:b7:58:6e:4b:c9:fc:af:81:a1:27:
                    e8:d0:42:1b:d7:fc:5e:f1:4e:9c:dd:9e:b0:33:29:
                    e7:cb:07:ec:da:24:80:d6:a2:7a:26:f4:5c:fc:06:
                    62:dd:36:1b:1a:b7:b2:87:35:1a:fb:7d:b9:d4:8d:
                    aa:27:da:90:ba:f8:ca:f9:b1:ce:f7:94:c3:70:00:
                    7b:9f:3f:6d:fd:4b:a8:9e:e6:73:d7:51:a2:a6:bf:
                    c5:c2:e0:b8:76:32:39:bd:96:09:a0:7e:c6:23:53:
                    77:62:d9:3b:d8:2e:cf:0d:f5:b1:b5:21:d1:38:ef:
                    a6:93:46:9a:2c:33:0e:2f:9e:6c:87:14:24:d0:80:
                    28:3c:ac:ff:2e:aa:f3:b1:c2:f2:34:b2:09:c3:ca:
                    d7:f1:74:58:96:31:c1:93:6b:ef:5d:dd:8e:06:9f:
                    84:87:03:2a:75:6e:92:67:ab:84:6d:18:21:43:89:
                    6d:3b:3e:8c:cd:85:67:d5:41:0a:49:ec:e7:b9:d0:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:25:0F:A4:2E:DB:2F:20:D2:4F:81:ED:34:57:7A:73:B9:14:29:F0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e3f46d7a-1a65-481b-80ff-a3a9036a5e8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:09:83:38:ae:8f:69:92:e3:b0:7f:e7:ac:a2:6b:58:25:4d:
         0b:0f:78:b8:9a:c0:fe:4d:8e:ad:86:25:45:21:be:df:78:60:
         34:a5:c3:aa:c0:28:c2:56:fd:2b:36:b9:fa:33:0c:7b:10:a1:
         ad:c2:94:41:8f:fc:a6:81:f9:98:59:21:c2:ea:f3:0f:27:cb:
         46:1e:f2:b3:31:8e:25:1e:06:ca:ea:bf:54:39:10:c8:a6:96:
         7a:0b:79:c8:87:b5:47:e5:39:5d:79:d1:9c:c1:9b:ee:7b:6a:
         05:32:2c:73:fe:ce:c5:33:1d:50:7c:7b:c1:17:b4:04:a9:53:
         fc:0a:75:f6:3d:ca:3f:dd:75:8c:f2:a1:c0:af:93:77:63:c2:
         f8:6c:61:d6:49:5d:de:06:52:b8:09:5e:9f:f5:bc:06:c8:0e:
         87:55:20:0c:47:62:a4:cd:5f:fb:2a:46:00:b8:4c:2c:2d:1c:
         1a:06:c5:ce:b2:62:db:45:73:74:65:e8:68:66:49:d5:69:fe:
         c4:3d:98:21:38:3b:a2:63:8b:12:43:a7:30:11:8b:3e:d4:67:
         bf:dc:9b:45:0e:3e:65:8f:e7:c3:8d:3e:9a:27:44:73:1c:0e:
         39:ba:48:87:9d:a8:c5:06:fb:70:57:f8:76:4d:51:a8:a2:17:
         b6:5f:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----