Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa
File:                     036dddcb-4f0b-406f-9899-f83b4c0da917.roa (raw, json)
Hash identifier:          IKnMa0kqUaCBqOhnZJ2LKvQyFBuojISw6oR6vAdk4Go=
Subject key identifier:   FF:30:87:BE:83:C6:D9:3A:08:5C:7D:3A:43:17:78:6F:B3:E5:95:5D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       146683B19C67312F500D0420502A77F6576AFBEB
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:7080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:66:83:b1:9c:67:31:2f:50:0d:04:20:50:2a:77:f6:57:6a:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=71cbc8e8378bdb697465c57a8ccad87629b3dda217d9a77bd1dce72e19588b69, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:98:62:b1:f2:9c:20:32:27:33:3e:f9:10:9b:
                    5b:8d:35:cf:fe:c7:70:e7:13:14:8b:32:8c:56:08:
                    d5:b9:8c:49:f5:4a:19:38:4e:e1:34:7c:3e:bf:fc:
                    c5:74:32:38:13:e2:29:5f:e1:4d:f3:89:2a:21:37:
                    e4:cd:53:3d:be:30:14:62:85:23:7c:7f:bc:b2:c1:
                    af:74:9d:97:91:08:3d:7d:c6:5b:ee:04:51:53:b6:
                    6c:d3:cc:fe:b1:c2:f6:31:56:c9:a6:13:8b:1f:a7:
                    ee:06:bb:a8:6f:7d:7c:8d:80:01:a8:2b:de:1f:fb:
                    1e:32:e2:8a:61:8b:62:a7:97:ca:98:cb:5d:cf:05:
                    01:ca:78:11:a1:80:f4:ad:8c:af:b1:5f:73:6c:9c:
                    30:9b:69:04:34:8c:23:11:32:36:9b:ca:04:57:ec:
                    01:04:c0:a5:a8:c7:0d:b1:ec:23:f5:2a:ab:b1:71:
                    eb:49:f4:9b:a4:70:1d:2a:5c:cc:2f:cc:d6:80:db:
                    4b:62:2c:ca:6f:32:6e:04:2c:70:80:a7:92:66:a1:
                    65:e1:e9:dd:a7:83:d9:71:36:7b:5f:76:11:a8:1d:
                    e5:c5:6d:41:b9:6c:ec:0e:cd:8d:e2:ec:69:b5:6f:
                    67:47:53:05:27:f9:69:85:ab:d8:77:0e:75:b8:87:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:30:87:BE:83:C6:D9:3A:08:5C:7D:3A:43:17:78:6F:B3:E5:95:5D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/036dddcb-4f0b-406f-9899-f83b4c0da917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:7080::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:36:1c:a1:10:2d:4a:8b:d0:30:c7:db:1b:ad:53:68:4e:
         d8:4c:58:59:b3:e6:0d:e1:fc:d9:90:10:78:af:7e:cc:9e:45:
         7e:12:95:ac:73:b0:e1:f4:b1:7e:5f:ef:bf:3a:ae:9e:ba:21:
         b8:dc:b8:73:cc:29:5e:b0:b3:2d:90:d6:c3:a3:39:39:79:8f:
         0a:7a:e3:7e:c1:47:bf:0a:f2:29:2e:f2:54:56:68:69:ef:c6:
         5c:1d:39:3d:6e:22:de:62:b0:ef:16:42:58:ee:58:81:c4:17:
         21:bd:70:f6:76:c8:15:db:bc:7c:9f:d2:ca:57:eb:54:62:65:
         1a:79:1e:49:72:d9:44:9c:c9:a1:25:71:f7:67:08:34:c8:c4:
         12:0b:72:1e:8b:6d:88:ba:79:9d:42:83:4a:60:26:2a:51:99:
         52:8e:22:5c:ac:3e:9e:ef:1d:5f:1a:2e:d1:91:59:5a:9e:ae:
         8a:0c:34:ec:e1:5a:01:24:e1:4e:43:26:1c:54:3d:1d:a0:e1:
         11:a8:c6:c6:c1:17:3b:f6:ed:70:dd:e1:2d:00:59:32:32:e2:
         96:d2:73:30:eb:7b:74:7f:6f:a9:c1:01:33:8e:f1:a3:62:e7:
         51:35:a2:aa:06:30:c8:4b:e7:99:a1:1e:2c:fc:7d:ff:1e:b7:
         e1:4b:86:43
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUFGaDsZxnMS9QDQQgUCp39ldq++swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNANzFjYmM4ZTgzNzhiZGI2OTc0NjVj
NTdhOGNjYWQ4NzYyOWIzZGRhMjE3ZDlhNzdiZDFkY2U3MmUxOTU4OGI2OTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8phisfKcIDInMz75EJtbjTXP/sdw
5xMUizKMVgjVuYxJ9UoZOE7hNHw+v/zFdDI4E+IpX+FN84kqITfkzVM9vjAUYoUj
fH+8ssGvdJ2XkQg9fcZb7gRRU7Zs08z+scL2MVbJphOLH6fuBruob318jYABqCve
H/seMuKKYYtip5fKmMtdzwUByngRoYD0rYyvsV9zbJwwm2kENIwjETI2m8oEV+wB
BMClqMcNsewj9SqrsXHrSfSbpHAdKlzML8zWgNtLYizKbzJuBCxwgKeSZqFl4end
p4PZcTZ7X3YRqB3lxW1BuWzsDs2N4uxptW9nR1MFJ/lphavYdw51uIcyWwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFP8wh76Dxtk6CFx9OkMXeG+z5ZVdMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzAzNmRkZGNiLTRmMGItNDA2Zi05ODk5LWY4M2I0YzBkYTkxNy5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaYXCAMA0GCSqGSIb3DQEBCwUAA4IBAQB7bTYcoRAtSovQMMfb
G61TaE7YTFhZs+YN4fzZkBB4r37MnkV+EpWsc7Dh9LF+X++/Oq6euiG43LhzzCle
sLMtkNbDozk5eY8KeuN+wUe/CvIpLvJUVmhp78ZcHTk9biLeYrDvFkJY7liBxBch
vXD2dsgV27x8n9LKV+tUYmUaeR5JctlEnMmhJXH3Zwg0yMQSC3Iei22IunmdQoNK
YCYqUZlSjiJcrD6e7x1fGi7RkVlanq6KDDTs4VoBJOFOQyYcVD0doOERqMbGwRc7
9u1w3eEtAFkyMuKW0nMw63t0f2+pwQEzjvGjYudRNaKqBjDIS+eZoR4s/H3/Hrfh
S4ZD
-----END CERTIFICATE-----