Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f941c160-d11e-4fef-b0bd-52e94335f810.roa
File:                     f941c160-d11e-4fef-b0bd-52e94335f810.roa (raw, json)
Hash identifier:          JiYqVqUJewYt0Bvujel4YN2HMPQKrx2HPbC2kBmIO/k=
Subject key identifier:   1F:33:87:A3:AA:DE:E5:FF:4F:FD:B4:8F:40:7A:74:B8:8A:07:B5:84
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       78A87BA6AAF8FFF273B0D0558BA2427E1609E1C4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f941c160-d11e-4fef-b0bd-52e94335f810.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da18:8800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:7b:a6:aa:f8:ff:f2:73:b0:d0:55:8b:a2:42:7e:16:09:e1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=5e7902b7af503da07b43fd85222779c0a44c140f5bc183607e3926327b0db987, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:00:75:d5:ff:5c:55:fc:36:25:ff:fc:5e:
                    7a:f2:89:0c:54:5f:b7:fc:56:64:3d:57:33:23:aa:
                    f5:3f:2d:d3:57:df:82:dc:df:17:9a:10:3e:f1:75:
                    08:06:be:5d:00:f9:54:ad:78:3c:81:4e:47:bb:73:
                    7a:c5:ae:8f:3b:75:ca:bd:3a:f8:47:45:cf:64:a0:
                    3c:b8:31:9b:0c:76:f8:f8:0f:af:1c:15:cc:d4:dd:
                    d7:08:00:b0:12:9d:a2:ec:51:63:a5:00:92:17:72:
                    ac:2a:ce:55:04:69:b9:a9:5e:23:b1:70:1c:fb:8e:
                    cf:0a:f4:34:20:00:11:df:2a:52:0c:e1:e5:8f:fc:
                    3f:c7:77:6f:85:ce:10:a2:8d:31:29:c9:5b:29:a5:
                    e8:a0:02:b2:20:82:09:a6:15:ca:60:17:b1:49:ca:
                    f6:1c:87:37:e1:5e:21:33:00:8a:18:b9:97:ee:de:
                    4e:76:ea:f8:a3:15:e2:a8:e6:c5:b7:ba:16:60:d8:
                    08:41:c5:0f:68:ba:cf:e3:52:98:30:a3:fe:46:66:
                    90:36:b1:54:d1:0a:b7:ad:a8:57:50:e2:f3:a6:6d:
                    14:05:ac:01:db:ca:e4:f7:05:7e:d4:12:fa:14:40:
                    81:20:64:48:39:80:6d:9c:4d:ce:96:54:ed:01:13:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:33:87:A3:AA:DE:E5:FF:4F:FD:B4:8F:40:7A:74:B8:8A:07:B5:84
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f941c160-d11e-4fef-b0bd-52e94335f810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da18:8800::/37

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:ee:52:6d:23:63:29:03:90:2c:bb:76:f3:a4:15:9a:f5:
         0c:59:27:64:11:64:0b:cb:a4:85:5c:8c:83:20:de:92:a6:34:
         38:f3:7c:16:00:f7:94:a3:ea:22:81:7e:02:ee:39:d4:e2:5e:
         fa:cf:21:69:07:90:5b:ff:cf:ba:0e:16:25:51:68:46:8d:9d:
         f1:1e:57:5b:fb:2f:07:6b:28:84:9d:56:05:61:b7:69:08:2d:
         1c:3c:35:57:e5:32:77:8f:78:39:88:af:01:7b:50:f0:c2:1e:
         f0:14:92:b5:d2:f5:df:7e:77:4c:67:30:90:82:d1:6f:6b:13:
         99:ab:ce:21:76:f9:b3:3d:08:0d:7e:ec:2c:be:bb:47:6c:42:
         a3:64:88:2b:fe:cd:f5:1f:c1:8b:19:4c:30:c7:67:00:38:f3:
         48:b0:f5:42:38:4c:37:d9:a7:c5:74:1f:e7:fd:57:a5:d4:97:
         4b:61:1e:cb:c9:63:15:4e:aa:b4:14:c7:43:54:7e:80:31:46:
         5f:62:21:77:1c:47:9d:bd:67:75:7b:64:d1:c5:1c:f3:53:ab:
         af:a5:68:ad:fc:3f:a8:ff:da:d3:b7:29:27:7b:52:90:e2:2a:
         90:88:1c:8c:4b:c5:78:52:c3:38:45:cb:b5:d3:7b:22:fe:02:
         2c:d4:44:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----