Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa
File:                     0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa (raw, json)
Hash identifier:          /xBsDjo4CV08vGyIFC82ZkglRM3Y59ECPo6nwBN7Afo=
Subject key identifier:   D6:1F:A0:E9:E2:DC:B0:F7:C8:67:8F:E2:49:27:DB:06:7F:A4:06:6C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       618EA30124A5FACEAA7C55C55C84F78A27E9B603
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa
Signing time:             Thu 30 Jan 2025 00:00:00 +0000
ROA not before:           Thu 30 Jan 2025 00:00:00 +0000
ROA not after:            Thu 06 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:a3:01:24:a5:fa:ce:aa:7c:55:c5:5c:84:f7:8a:27:e9:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 30 00:00:00 2025 GMT
            Not After : Mar  6 23:59:59 2025 GMT
        Subject: serialNumber=79150b239ab29bc437c1d2a4773b12405c00d23816d422f12d1968fa360c5818, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:18:90:80:5e:11:19:2e:aa:28:22:69:e5:
                    b3:83:ed:59:8c:ee:9a:01:39:94:b0:9a:20:3c:5a:
                    e5:14:44:86:ff:ea:d4:0d:a6:80:2c:ce:bc:a5:b0:
                    43:21:54:a2:30:e2:81:f6:c0:b1:cd:e4:fb:2c:8d:
                    99:b9:43:4d:a6:23:02:56:ea:65:b8:3a:34:33:7d:
                    9f:75:2d:dd:65:6d:de:a7:7a:5a:8e:6f:0d:df:2d:
                    21:4e:a4:f2:4f:86:7b:ac:ca:de:c1:d7:09:6d:29:
                    97:18:82:ef:f8:bc:77:ea:96:b5:13:61:2a:1d:11:
                    6b:55:2c:3b:4d:57:c5:fc:98:19:86:a7:7e:e2:9c:
                    5e:92:85:c5:6d:0d:d0:99:2f:ab:f4:9c:ed:25:59:
                    7b:e4:69:c9:91:cb:66:8a:7a:ef:4f:0d:70:1a:d5:
                    13:bc:b1:86:20:c5:31:fd:ce:83:7b:e0:f1:b5:7d:
                    40:da:18:8c:8b:81:61:2e:a7:f1:d3:06:a9:a2:14:
                    b7:ab:41:99:4d:f4:0d:d2:54:3b:48:c1:7a:a7:34:
                    e4:17:c7:87:7c:86:5a:7b:07:26:f0:7c:8e:45:c7:
                    43:37:d7:d9:34:a7:f9:94:03:93:7e:d3:b7:a2:3b:
                    e1:fc:b7:ea:6f:97:47:f4:2a:92:ff:54:15:50:16:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1F:A0:E9:E2:DC:B0:F7:C8:67:8F:E2:49:27:DB:06:7F:A4:06:6C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0ab9cffb-50eb-4196-a4b2-e63a4da14c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:3f:10:41:64:85:a1:da:5f:3b:fa:8e:66:d3:6a:60:8d:4a:
         9a:c5:32:3a:24:3f:b6:bd:11:31:18:74:bb:f8:40:ac:9b:e9:
         e5:64:1a:44:2b:53:98:ec:a0:de:6f:63:1d:27:77:a1:7d:c3:
         f9:2d:f6:cc:aa:19:b4:df:ca:0c:91:14:97:0a:a9:bf:e9:77:
         29:a4:80:56:40:bd:e0:ae:94:2a:3f:96:ca:76:d3:ae:43:d7:
         5a:4f:2d:77:f3:c3:b4:eb:c7:69:04:9a:04:43:42:d2:96:e8:
         ab:1a:8f:a6:b5:7f:5a:cb:37:32:f1:65:d6:a6:d4:c9:23:d9:
         6c:55:f4:c9:23:10:9e:26:0a:28:c4:ee:1e:7e:cb:97:9d:71:
         6e:9e:4e:21:3e:4a:d7:0e:67:dc:d1:a7:e7:ae:3c:72:45:92:
         3c:8f:cd:8b:96:30:94:66:50:d3:28:c8:1a:52:a3:81:a4:8a:
         c7:16:12:38:d5:aa:18:72:01:1f:3c:55:1f:2b:9e:08:40:c6:
         d8:bc:33:67:49:c5:65:9b:b9:b0:6f:cd:b8:72:e3:ad:20:25:
         52:c0:14:4a:19:ce:4a:73:65:d6:96:f4:26:bf:3f:84:fa:5e:
         89:34:81:82:34:3e:34:ae:1a:53:c1:65:fe:cc:be:d9:6a:14:
         98:0f:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----