Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa
File:                     001c821e-ff58-41fe-8cf9-9e4942937836.roa (raw, json)
Hash identifier:          MN1XuUVE+c7NDI3rqUpq8s6Eza6UdjDU8IUHOv44IPQ=
Subject key identifier:   2C:B6:D2:AC:77:D0:2D:41:CB:8E:8F:28:D6:6F:DD:21:84:37:04:C1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       23EEE861A133E699EBA363A91C09E7E148896871
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daa0:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:e8:61:a1:33:e6:99:eb:a3:63:a9:1c:09:e7:e1:48:89:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=d6318440293005f9316605ea54aff461c3a4a80d8586142fcb10b92b619d49a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:c2:27:ff:11:f5:fa:30:3a:e1:12:0c:8f:
                    b8:a7:e9:13:46:2b:c2:c2:f3:a2:2c:2d:a6:de:d7:
                    ef:39:3f:67:45:75:8e:cc:c1:b2:3f:8a:b1:36:ad:
                    13:a5:2c:33:c3:d3:77:8e:18:49:c4:ab:d5:fa:4d:
                    82:2f:93:95:83:9c:58:93:91:17:59:34:b7:9b:1b:
                    43:57:2d:e7:aa:df:90:99:bc:66:d4:1c:e6:23:0e:
                    f2:5c:52:6c:76:f7:f8:10:fe:f5:29:3b:f5:af:8d:
                    6f:4a:35:e9:ba:8b:46:e2:9a:d3:3d:53:10:cf:dd:
                    b8:e8:9a:1e:22:4c:a9:67:c6:70:c7:0b:35:87:fd:
                    19:ba:96:49:35:43:ff:92:a5:5d:86:11:ff:35:20:
                    b4:fd:8a:18:19:d5:60:54:1f:13:c4:a9:98:56:83:
                    5b:17:17:0f:76:8b:e1:a7:76:2c:e2:1e:ab:ad:f8:
                    4e:0c:92:20:40:66:f4:60:1d:16:a1:bc:77:5d:98:
                    37:e1:78:59:76:86:f5:52:55:1e:17:82:68:39:dc:
                    d1:c8:1b:0d:2a:8d:d1:96:ec:85:c3:6d:d7:82:0b:
                    fc:e9:57:0b:d8:7e:4d:ba:0a:c8:cd:04:10:f3:e9:
                    92:47:ce:d0:a7:47:5e:d3:d2:34:e9:61:1c:5d:a9:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B6:D2:AC:77:D0:2D:41:CB:8E:8F:28:D6:6F:DD:21:84:37:04:C1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/001c821e-ff58-41fe-8cf9-9e4942937836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daa0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:4a:2b:04:1f:05:3c:1c:50:4a:f7:5e:00:6a:31:42:95:
         d8:43:c5:9c:33:a2:23:ae:43:6f:05:78:05:45:23:e0:cb:55:
         1f:b7:c9:2b:73:ed:a6:e8:f5:b1:e5:df:25:6c:3d:f2:b3:26:
         68:1a:82:51:a5:61:18:2d:cd:f6:cc:b9:9e:a2:c6:45:c6:db:
         73:96:c7:69:99:54:4c:3f:62:46:f9:ff:66:ff:01:ef:ef:7f:
         1a:0f:dd:4f:65:0d:03:a4:3d:70:2e:50:87:93:a6:68:35:bb:
         1f:5a:38:a4:ca:23:10:3d:a2:b1:0c:68:f5:e7:50:e3:38:50:
         55:41:ff:b0:cc:bc:49:78:70:d7:64:f6:c9:25:b6:25:43:23:
         97:75:54:90:65:65:f1:a1:e4:69:91:51:08:94:e8:58:bf:04:
         07:19:30:48:6c:57:8a:d0:fa:0a:92:24:1c:89:65:fc:64:6a:
         0d:02:76:df:30:ad:26:2a:43:f6:c4:6f:f8:f0:78:67:df:2d:
         79:f7:2e:5c:da:db:fc:cb:54:39:cb:63:3e:87:62:64:f9:95:
         ab:b7:76:f3:b6:41:ac:6d:00:8f:b9:ce:80:b1:19:b3:52:8f:
         38:51:99:70:9c:1f:9a:76:f0:fb:4a:c5:8f:f4:be:4e:f8:a9:
         9f:6e:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----