Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa
File:                     02d66763-ca3b-4f03-892a-534a85b8d01e.roa (raw, json)
Hash identifier:          nYFytQ7G9tYknwHaDlmhhK1pMsbqiBnbWTitN+jBRjE=
Subject key identifier:   C0:7B:DE:28:12:E6:8D:2B:31:F6:92:6A:57:CE:63:9E:29:93:FB:DF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       37D68E774306DBCA6ACE8D82A4AAB3A2F2DF8AD1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:c840::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d6:8e:77:43:06:db:ca:6a:ce:8d:82:a4:aa:b3:a2:f2:df:8a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=aa66fd210f745c7c3f4c07e42734bac0977c8737421ff4b30840181a95b6e827, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:87:6e:fc:60:2c:bb:00:2a:6f:1b:a0:9a:
                    17:7e:7a:e2:44:50:d7:a2:27:f7:a0:35:bf:65:9d:
                    2e:1a:cb:25:36:56:c7:e2:83:cb:5b:38:75:8e:72:
                    4a:a0:8b:98:9b:cd:73:a5:a3:ee:93:1d:32:eb:cf:
                    93:e6:4a:da:57:ed:b2:f3:80:ec:07:02:29:93:06:
                    ef:1c:6b:c3:31:9e:80:fe:86:ef:40:0d:62:44:a5:
                    ac:25:4b:1a:c9:75:57:8d:0b:b0:40:10:7b:65:eb:
                    09:e5:86:80:1d:5e:c8:41:5a:56:d6:d7:e4:a5:a6:
                    10:b6:92:a8:81:2a:a7:ed:dd:e0:fb:ed:c2:b4:44:
                    ad:19:7d:80:a0:2d:90:18:20:e4:67:9d:39:d5:b1:
                    91:46:8c:73:50:bb:bc:51:c0:f9:9e:0b:82:e3:55:
                    1e:c7:df:a9:bb:dc:fb:2e:71:88:f9:12:d3:6a:18:
                    09:bb:8a:cd:bb:05:b5:18:bf:ca:65:6e:34:f8:99:
                    25:19:31:d4:6c:9e:f6:87:30:04:48:ca:4e:8f:2c:
                    b6:8e:3f:d0:a6:c7:b5:b7:6f:86:d6:aa:d9:76:7f:
                    b6:c0:f7:a5:db:e7:aa:1b:db:22:0b:ae:06:53:21:
                    92:0c:02:5d:ac:0f:5b:ca:79:33:6f:ab:86:2b:6f:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7B:DE:28:12:E6:8D:2B:31:F6:92:6A:57:CE:63:9E:29:93:FB:DF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/02d66763-ca3b-4f03-892a-534a85b8d01e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:c840::/46

    Signature Algorithm: sha256WithRSAEncryption
         a4:4d:40:8b:1f:4d:68:6c:b1:42:97:ab:c5:e4:80:04:1a:61:
         43:0d:e0:1e:98:06:b6:f5:d6:2d:5b:94:d3:1a:a3:1e:07:6c:
         ab:a4:42:51:e6:fc:77:6e:9c:61:e2:11:f3:db:ba:fa:ee:6f:
         13:ad:f6:8d:57:fd:67:bf:56:93:ec:d9:03:2a:93:c8:f3:6b:
         d6:4d:86:5a:be:0f:24:34:f0:f2:15:8c:ac:12:2d:1f:d0:63:
         69:da:c2:f1:47:e5:4c:19:7f:b6:25:c1:87:cb:f0:83:f7:4c:
         be:48:cd:ce:a7:ff:1d:f2:42:ee:42:7b:52:97:76:d3:f0:50:
         62:b8:c0:76:e1:7c:14:8e:38:46:59:59:aa:3f:90:ae:c7:28:
         f7:94:ff:7c:7c:99:8c:3a:bf:d0:ec:a0:9f:ca:87:10:12:01:
         5b:83:d6:50:fa:25:6d:a2:a2:81:74:a1:02:ed:5f:65:ac:2f:
         25:c9:df:b8:c9:e8:c8:b4:a9:2b:3b:6c:cf:ca:cb:d0:32:a4:
         67:44:86:07:8e:dc:c4:d2:6d:71:07:39:f9:c3:37:e8:2c:6a:
         a6:b3:f9:34:1b:a2:d1:c0:cd:10:3f:96:cb:ed:3e:92:5a:bd:
         52:a1:55:c8:37:9e:eb:4e:3b:da:6c:2f:ac:e9:52:31:06:f0:
         d9:52:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----