Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7aeb9b-4fc4-44e8-aa35-b92698a6c334.roa
File:                     ff7aeb9b-4fc4-44e8-aa35-b92698a6c334.roa (raw, json)
Hash identifier:          ZXsVn4uhHjC3MzmJEn5pseZdBpn1026lwBQfrRSEKmI=
Subject key identifier:   73:CC:5D:2E:8B:DB:20:0C:70:92:C7:79:F4:35:2E:8B:45:3B:59:51
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3DC7F538BC203334DE5ADC224379701D390F5A3D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7aeb9b-4fc4-44e8-aa35-b92698a6c334.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:28c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c7:f5:38:bc:20:33:34:de:5a:dc:22:43:79:70:1d:39:0f:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=633d747e34ff14f8f3dd46b921ce13dd323354202744b99d40736f48f1f8b9bc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:19:aa:ea:ab:16:69:36:ff:ac:e8:92:63:3b:
                    2c:54:51:cb:cc:21:7b:30:ef:8e:7c:17:bd:25:a1:
                    64:1b:17:c8:b4:12:85:59:6a:35:c2:f8:dd:93:5a:
                    4a:3b:e1:47:f5:82:d8:9e:8e:d2:52:c2:72:07:dc:
                    b8:c5:57:8a:62:13:80:95:59:e2:43:8f:05:f7:da:
                    2a:71:6d:09:e5:fc:3c:04:3f:9c:b1:ba:52:09:97:
                    d0:27:89:d6:3b:d6:64:83:ba:3c:6c:69:f8:87:6c:
                    f3:04:40:53:9f:75:53:23:a8:b8:51:b4:99:e4:f7:
                    68:8d:d8:26:17:6e:84:92:65:1e:96:85:86:03:5e:
                    c1:a1:76:83:3e:e3:e3:d1:c8:48:79:81:1a:3e:0c:
                    22:20:e9:0d:8d:29:e6:15:dd:4a:bb:8d:6e:2c:8a:
                    e0:8d:08:ce:20:b8:c9:79:8a:0f:62:c5:50:74:d9:
                    6b:2f:6a:5d:7b:77:40:2c:41:36:0b:b8:79:8d:a7:
                    e4:fb:ed:eb:b6:f5:02:d6:d9:0e:4b:ed:d4:60:21:
                    7e:59:68:92:11:80:13:8b:f7:66:4f:8c:9b:81:77:
                    05:44:57:9b:e1:31:b3:5d:0a:81:25:d8:e3:93:a8:
                    5f:f2:24:f1:3a:da:c9:ee:a8:8c:08:c7:29:05:3e:
                    e7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CC:5D:2E:8B:DB:20:0C:70:92:C7:79:F4:35:2E:8B:45:3B:59:51
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ff7aeb9b-4fc4-44e8-aa35-b92698a6c334.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:28c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:f1:9e:0e:5f:01:23:be:dd:60:e9:26:51:03:3c:26:e1:c4:
         95:63:02:85:43:f8:97:84:57:a7:55:18:c6:d3:35:ed:45:03:
         cf:f4:9c:2f:20:b9:fd:30:b8:26:a4:30:87:e1:e2:9a:52:72:
         15:c8:5a:2c:2a:aa:fa:76:41:e0:49:90:7c:77:e7:c4:a1:e3:
         48:a7:b3:33:fb:2b:ab:99:9d:ac:a5:31:9d:fb:b2:ee:1b:f3:
         a5:cf:62:99:7b:60:39:a5:ab:47:fa:20:79:b7:fc:9d:2d:d3:
         5b:6f:be:b7:f7:c5:14:39:c9:48:d6:7c:f4:73:aa:89:1c:34:
         b1:0b:bf:7d:21:83:82:67:43:f6:fa:bb:37:3e:63:cb:41:76:
         bd:0f:d5:81:aa:4c:81:30:33:9a:8f:93:32:bb:7d:ec:fb:13:
         ec:a4:4d:6b:83:70:f2:f3:c3:90:a9:36:2a:23:f7:d0:60:b9:
         71:61:ec:a1:34:0f:15:3c:e8:c7:70:82:dd:8b:09:0f:3a:2d:
         8a:36:72:13:9c:40:54:78:a3:60:6f:a5:a5:aa:59:80:b2:1c:
         1d:38:e4:09:9a:42:9a:57:39:10:93:2d:df:a7:62:9a:68:2a:
         61:45:d6:3b:b0:b1:00:17:f7:86:63:72:67:fb:db:65:33:cf:
         1f:2b:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----