Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0af814db-c2b2-4898-91a6-126fc85c2a16.roa
File:                     0af814db-c2b2-4898-91a6-126fc85c2a16.roa (raw, json)
Hash identifier:          ecv/2Eh2HnFxVw8ie+xosfbtutFSoYVecXcw44AhM5A=
Subject key identifier:   25:20:F7:A6:CC:76:70:83:73:D4:7A:04:0B:C9:42:43:10:DF:E6:50
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0B7AF8E3FE6E06D88134297CDA237E1217DDE3C4
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0af814db-c2b2-4898-91a6-126fc85c2a16.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:20c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7a:f8:e3:fe:6e:06:d8:81:34:29:7c:da:23:7e:12:17:dd:e3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=73e729488dcb9faad85c5f10f21750b15d7306fa25e72341525fced03d0ac45f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:d4:1c:df:de:96:1a:f3:69:01:fc:c6:ca:
                    c8:51:bc:f3:7f:a1:3b:03:7b:65:d3:d9:c5:57:e8:
                    39:85:61:57:95:ef:4c:c4:a3:2c:cc:05:bf:bf:ac:
                    96:0a:b2:90:c6:40:cb:6e:b2:ed:0b:d3:c7:a6:1f:
                    66:da:9e:48:ef:93:bf:61:bd:78:d0:ce:fc:ca:51:
                    ec:7e:2c:0a:8a:ed:42:b1:a9:3f:fd:8b:e9:6c:3e:
                    e1:e5:3f:f4:c6:34:f4:ca:7c:c2:18:f9:b7:91:78:
                    ed:f4:9b:cb:16:ed:53:84:57:eb:64:59:6e:eb:fe:
                    c2:f7:c8:d6:28:e8:8e:b8:d8:6e:57:d1:78:85:a0:
                    de:89:80:60:c3:b7:74:0d:e0:90:27:8b:04:84:d2:
                    ed:80:f6:8a:27:a0:9d:7b:45:75:b8:ea:57:d8:40:
                    0b:a6:71:90:cf:38:00:28:83:e2:97:11:7f:3b:60:
                    df:b9:b3:89:e9:78:fd:e7:64:a1:c4:23:fe:68:67:
                    a7:a7:cf:f0:27:8e:8c:9c:43:a7:70:aa:1d:f8:72:
                    d9:83:fd:39:0b:f9:82:a2:e9:8a:d5:01:11:0b:d2:
                    be:bd:df:c4:88:d8:c5:5b:be:74:55:93:a7:4c:b5:
                    78:21:dc:2c:a9:00:3b:04:df:4c:4a:8e:25:7e:5f:
                    4d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:20:F7:A6:CC:76:70:83:73:D4:7A:04:0B:C9:42:43:10:DF:E6:50
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/0af814db-c2b2-4898-91a6-126fc85c2a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:2f:50:48:50:e1:79:4c:bf:da:3b:9a:2a:32:95:0a:9b:
         fb:ed:bc:43:5a:f2:da:c1:17:28:29:6e:22:3a:33:2c:a5:eb:
         5d:07:d6:81:0f:81:22:15:57:78:52:5e:1d:ce:ef:c2:89:b6:
         b8:07:9b:a1:73:29:dc:cb:7f:df:2a:4a:15:f1:62:66:90:5e:
         67:21:9b:65:af:f5:e3:36:1e:8d:70:22:bf:29:43:1b:7f:83:
         58:93:24:23:9d:4a:cb:e2:a8:15:61:e3:fc:e5:d9:84:6a:e8:
         25:87:d4:10:68:8d:50:1e:d2:f1:90:1b:76:49:d3:1f:a7:7b:
         e5:95:5b:d5:ac:27:c6:81:19:b9:f3:fa:01:44:ae:1e:ab:83:
         e3:90:5d:c0:71:a3:d0:5f:b1:8c:98:d2:a5:6f:5d:c5:2b:8d:
         de:01:6d:19:21:55:1f:ba:5a:3f:54:7f:f2:98:66:b4:9c:94:
         4c:30:0b:9c:88:d9:90:4a:4a:42:4d:54:43:a0:63:d1:04:44:
         7d:d0:7a:b8:59:9d:a3:84:51:8d:5d:4c:7c:c1:43:73:ff:b4:
         b6:41:4d:f9:bc:49:85:31:53:dc:c2:76:78:30:19:dc:38:e2:
         0e:d8:58:5b:21:de:db:8e:3d:1a:f4:29:56:2d:57:ff:78:d3:
         eb:4a:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----