Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa
File:                     d845b183-711b-4c94-b81c-1732651903fe.roa (raw, json)
Hash identifier:          lJecnvyDplT4jRx89lZP70KnDZp6qfklyN7N+pgn0OM=
Subject key identifier:   BD:7E:60:C7:7E:B1:7B:B8:6B:64:F1:69:76:BF:F4:44:42:C9:74:44
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       36D716C4CEED6516616ACFA88C59493EF6DF63BA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa
Signing time:             Wed 26 Mar 2025 00:00:21 +0000
ROA not before:           Wed 26 Mar 2025 00:00:21 +0000
ROA not after:            Wed 30 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf8:4800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d7:16:c4:ce:ed:65:16:61:6a:cf:a8:8c:59:49:3e:f6:df:63:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000
        Validity
            Not Before: Mar 26 00:00:21 2025 GMT
            Not After : Apr 30 23:59:59 2025 GMT
        Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:04:17:1a:5f:b8:c5:73:d7:9c:9a:b8:32:
                    0b:d6:19:9d:97:85:78:80:58:8e:5f:9a:1a:35:61:
                    18:d4:b4:a9:e4:44:24:14:18:2a:8e:97:76:97:de:
                    1b:5e:ec:60:73:31:b4:8d:c4:d5:5a:74:4f:c0:0f:
                    17:54:18:3e:1f:54:0b:9c:a8:2e:28:39:9c:d2:e1:
                    55:6e:3c:40:e7:c7:e1:8c:33:62:74:98:9c:d8:89:
                    66:c6:cf:ea:33:20:79:82:53:c3:67:cb:05:b1:9f:
                    c2:13:f3:e7:9b:39:68:f5:d3:b0:34:5c:c3:bd:86:
                    6e:e1:6b:33:cd:01:c1:dd:bb:bb:43:0c:27:c8:f1:
                    b7:87:92:a8:bb:b6:9d:d0:9c:cd:6e:54:54:df:e7:
                    d9:fd:ea:d7:e6:f9:52:3e:e3:25:16:3e:2e:01:56:
                    a2:4f:f3:bc:f8:f2:5f:76:15:2a:01:63:07:cf:f6:
                    d5:94:04:a4:7f:ab:3e:12:b8:c4:f2:66:38:7b:ed:
                    28:e5:1f:3c:a0:b0:e5:19:4a:52:5a:57:42:8d:f6:
                    fe:d5:3b:78:21:9d:5c:e0:1e:69:73:a8:4c:ce:37:
                    10:97:96:be:b7:5f:98:29:b2:d8:06:45:66:45:28:
                    ef:7e:7a:95:e7:9b:07:00:49:90:4c:16:16:d0:72:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7E:60:C7:7E:B1:7B:B8:6B:64:F1:69:76:BF:F4:44:42:C9:74:44
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d845b183-711b-4c94-b81c-1732651903fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf8:4800::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:2a:d3:37:78:96:44:4c:11:ae:21:84:2a:70:5a:b4:2a:1a:
         19:c4:cb:5e:89:0a:22:8d:f2:9e:e2:b2:33:c2:39:72:4b:7d:
         e3:7b:14:0e:24:1f:d4:46:da:1e:3e:a3:a6:0e:99:34:88:97:
         e4:b0:6d:55:c6:57:71:11:c6:c4:cc:0c:13:3e:a4:64:d2:f3:
         26:c3:fc:bc:e3:f1:85:44:fd:0f:50:3e:b6:37:30:f0:45:c6:
         d5:4e:40:d7:3f:d0:77:72:71:85:3c:f2:a7:1b:dc:58:c8:80:
         a6:29:91:48:2d:3c:27:e9:18:ec:24:82:b1:3a:4c:34:e6:1e:
         d1:6d:bb:c8:06:dc:4f:9a:69:2b:30:ec:1e:a9:dc:95:5b:aa:
         c9:7d:f4:a0:a6:4d:35:32:82:0b:ff:57:03:5d:e8:68:f1:d5:
         ed:25:b3:d5:d7:d2:e0:db:15:bc:61:5b:95:5b:f0:1c:74:6f:
         73:fc:24:47:48:c4:38:d6:07:c9:1a:31:48:8f:bd:73:9a:dc:
         7f:31:6b:ef:f8:a1:1e:fe:9b:50:3f:ac:3c:2d:5b:6b:81:3b:
         31:52:17:34:6a:46:23:71:a8:6f:aa:30:12:97:6b:7f:86:e6:
         c7:10:23:c1:e4:ab:64:af:e3:7b:67:06:2a:09:03:a2:cd:14:
         e9:50:6e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----