Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa
File:                     fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa (raw, json)
Hash identifier:          1djxgnt2WlgBrP5Am2I/Gz9jRHnt9NtF5vQs43918j4=
Subject key identifier:   69:DC:10:18:8F:57:00:7C:B0:4A:5E:14:95:92:FE:A3:D5:02:DF:F7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3101DC31AEFE1A23B172D8DC7272C08431D869E2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:f000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:01:dc:31:ae:fe:1a:23:b1:72:d8:dc:72:72:c0:84:31:d8:69:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=6567a0369c12b4547888e83e895d9d60df20d413ba67b3d0e6dfa05de6e5bd5b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:29:37:1b:d9:f3:55:59:02:63:2d:2e:f2:
                    f4:9c:69:e8:1b:69:a9:b7:f1:d3:12:2e:25:5f:47:
                    4f:ff:8d:77:b3:ce:ad:1a:05:22:22:98:3f:c5:b4:
                    67:08:05:48:8b:80:1e:44:b9:27:38:00:61:ff:d6:
                    e8:5d:cf:da:e9:1a:86:41:b2:ee:9f:bd:9f:00:c8:
                    91:15:ce:a2:8f:f8:d8:86:78:cd:1b:c2:54:4c:41:
                    d2:0b:b5:3a:a4:0e:8b:93:4e:83:53:e2:c4:d3:d7:
                    d9:87:3b:e1:61:ae:41:cc:9b:b6:6e:5b:d7:60:b0:
                    a8:57:76:0f:bf:6f:cb:b6:64:51:85:9d:92:de:3d:
                    99:89:fb:40:9c:a2:a0:bc:62:a8:7b:75:a6:c0:fd:
                    83:a0:90:9d:e6:61:f1:ab:0c:ce:d1:4d:a1:ed:a0:
                    9b:77:87:5d:ee:d1:6a:7a:1a:56:aa:2d:ec:55:b2:
                    36:5f:0a:fd:29:7b:a3:e8:db:3e:02:e5:5b:22:b5:
                    5c:17:bf:d1:b5:ac:e3:ec:58:6a:65:f9:1a:30:2f:
                    75:bc:79:b7:b0:e4:c9:7b:da:aa:c0:bd:fb:3b:5f:
                    00:65:ad:94:b1:79:0d:57:94:ff:f0:40:2e:15:32:
                    70:a9:a2:07:0a:f9:3d:0a:66:6d:22:61:ad:53:b7:
                    02:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DC:10:18:8F:57:00:7C:B0:4A:5E:14:95:92:FE:A3:D5:02:DF:F7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/fef3abf6-f2e0-44e8-a7b3-1c87c9c1d26f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:eb:9d:ff:09:bb:64:bd:36:23:73:9b:b3:ac:d6:23:5c:
         84:68:1b:ba:10:ee:18:c7:c8:81:f7:86:7c:48:f3:09:ea:29:
         7d:07:57:e9:ec:c0:e4:79:13:75:34:86:f5:78:99:79:53:72:
         ec:e5:3b:b2:33:94:d1:23:fe:a2:53:f5:66:13:3a:44:21:e8:
         29:0e:8b:08:82:b5:38:ad:15:87:44:ca:c6:a4:29:21:ae:b4:
         bd:6d:ee:d4:2b:be:1e:b9:5b:a6:c8:55:6c:df:91:44:93:9e:
         5d:eb:59:3b:fc:5b:48:e3:12:1d:5a:a7:74:b0:64:58:62:9b:
         e2:34:5a:4f:84:41:50:b2:77:c0:81:69:bd:c9:1d:c2:fa:b9:
         e0:06:3e:a0:82:aa:f6:65:4e:77:f6:f1:40:75:ae:3d:8c:3a:
         d3:c2:26:d4:11:b9:e2:c0:67:50:f9:a9:a2:bb:39:3b:d8:e9:
         f1:b4:1e:36:9c:2a:6a:ee:33:30:c6:c2:6d:c3:78:46:cf:68:
         03:cc:bd:40:6a:5d:a4:bd:a2:db:19:48:28:3b:1f:b2:28:fe:
         cb:a4:9b:d5:c5:39:33:78:18:2a:5f:52:f8:be:d3:9d:6e:eb:
         94:a0:54:12:40:cf:ce:87:3e:60:26:bb:3d:1c:dd:f0:de:99:
         f2:c6:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----