Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa
File:                     eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa (raw, json)
Hash identifier:          K42WUKdV2Nr0ozWTsFtd0641comZ4su4w0W+GrcWmX8=
Subject key identifier:   72:0F:27:10:7F:0D:88:1E:28:B6:77:AD:48:21:5D:59:DF:55:2A:EB
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7D0E40FA9317CCC41086F0FD7BD4599CE905A6CF
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da36:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0e:40:fa:93:17:cc:c4:10:86:f0:fd:7b:d4:59:9c:e9:05:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9568ac0e88158d742e8f5ab2d841a989596d7ec6c1b97cd8f89ad49afbeaf6c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:a5:83:6c:87:9d:48:4e:99:73:bb:a9:50:
                    82:11:0f:8a:68:99:29:dc:57:6c:12:a3:52:28:56:
                    e8:4b:00:a2:c2:c8:a8:59:b5:00:c2:87:7e:47:7a:
                    22:e1:9c:a3:55:cb:1a:c5:95:76:f0:da:74:71:ab:
                    93:db:88:ce:2f:1c:93:d1:d6:d2:68:9f:64:48:a5:
                    16:ba:c2:c2:07:7a:1b:60:3f:c0:0e:7c:6c:52:73:
                    f1:9d:55:95:98:30:da:3e:8b:7e:81:ad:5a:87:67:
                    7a:f4:2b:ac:84:d4:0b:0b:ee:2e:24:68:e8:39:ab:
                    58:98:7b:3d:7c:e4:11:19:d0:fc:49:e0:5d:96:c5:
                    09:97:67:8a:c2:e1:71:f1:f0:1d:bb:2c:a6:fd:3e:
                    e4:1d:8d:d2:fb:3b:47:0f:1c:55:0a:cb:81:79:d3:
                    74:59:ca:16:1b:df:fa:fb:2b:d0:60:78:fe:12:f1:
                    27:91:f3:d1:6a:c1:91:1b:f6:fb:32:25:fe:23:21:
                    fa:26:85:87:d0:a1:5c:23:1c:29:42:3f:3c:43:40:
                    a6:a7:c9:d3:d3:89:0b:09:f4:a6:d6:2a:11:73:1a:
                    e5:cc:ef:69:3e:16:e3:ef:cf:f7:70:e5:0a:fd:96:
                    26:75:d2:7e:c7:40:7b:94:f8:bd:92:66:8f:cc:6b:
                    31:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:27:10:7F:0D:88:1E:28:B6:77:AD:48:21:5D:59:DF:55:2A:EB
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eec7ad5e-f656-4ebc-8be2-c3a42fd003c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da36:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:56:d5:75:64:ea:e9:e9:8e:0e:3a:6e:87:ed:20:96:e4:
         cf:37:45:7c:68:b5:31:d5:19:74:1e:24:25:31:72:1a:b4:34:
         14:86:d2:8b:47:86:2e:b3:5b:f6:ec:56:19:ce:ba:82:3c:a2:
         4b:65:f1:61:80:0e:64:04:d1:57:aa:03:5d:ed:1d:a5:15:1c:
         58:60:c0:2c:36:72:d5:1a:82:ef:ed:c1:4c:dc:5c:19:ae:7e:
         a9:23:ef:d6:08:80:0f:5c:2f:d5:b1:78:37:1b:92:af:33:6f:
         a4:01:ce:4f:40:bd:42:96:2b:c9:5f:c1:71:51:66:cc:b9:8a:
         c3:57:77:51:48:b1:a6:3d:1a:fe:40:31:8b:c9:15:66:59:c6:
         8a:11:eb:b4:3a:11:06:ad:df:15:5c:30:04:dd:36:1b:96:f3:
         3b:d9:56:eb:a3:3f:b8:ef:1e:e5:11:d2:2d:5e:64:ee:c1:77:
         87:2a:b3:3b:4d:31:1f:f7:49:cd:a2:a0:7f:27:b8:1f:16:bc:
         77:15:2d:1f:46:8a:80:68:0f:35:ad:d0:fb:4c:d9:7b:3f:22:
         b9:b0:67:44:79:5f:91:49:1b:d4:19:0b:02:dc:a2:3b:6a:ca:
         75:ca:9a:e5:e8:41:18:59:00:f0:10:d6:89:2c:c6:6b:97:25:
         76:a8:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----