Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa
File:                     10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa (raw, json)
Hash identifier:          8mGoT63T25p86LekBGnGIw0bLe5WLeqwNxiv9bHwNu0=
Subject key identifier:   E3:6F:17:7F:19:C2:AE:D0:C6:20:36:90:D7:12:9A:51:33:C0:39:40
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0C74E042FF68F75CA74A35125B7BED55E9DDF8C2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:74:e0:42:ff:68:f7:5c:a7:4a:35:12:5b:7b:ed:55:e9:dd:f8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=3270d9c519ee056c9ddb63786cd79ee94b862cb3418e20160919875bf888d21e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:c1:9b:78:85:14:92:ac:84:26:20:ba:28:
                    45:b1:da:82:f9:65:53:71:c6:25:11:5b:09:8a:83:
                    28:91:33:f3:e5:7e:ca:8d:43:af:d8:3b:61:44:3a:
                    65:94:b2:52:1a:02:bd:39:35:da:9f:33:ec:56:9c:
                    30:1e:ba:58:40:c0:cd:21:78:69:b3:ba:ae:3f:c3:
                    52:aa:59:d2:4b:6f:9b:0a:d7:b9:de:35:51:fa:9d:
                    6b:f8:52:0f:12:9b:4c:8a:0a:62:f0:4b:c1:43:db:
                    75:97:6a:98:cf:31:62:fa:31:78:0d:41:ee:d4:d7:
                    0e:f8:cc:c0:8a:a9:9f:54:99:d9:9a:77:08:cb:00:
                    73:97:f1:42:99:de:86:f8:59:5d:85:d9:9e:bb:1b:
                    10:fe:ac:7f:ce:c6:9e:6b:2c:98:da:04:8c:1a:84:
                    a9:6b:d5:77:04:49:79:fc:0a:99:5d:dc:e2:50:51:
                    af:ce:ef:04:a8:64:23:1d:78:76:bc:c6:d5:1c:62:
                    71:26:3c:09:dd:18:91:e2:aa:a6:a2:2e:2a:42:e6:
                    af:1a:9b:b6:7b:66:1e:6b:a8:6b:43:cd:e2:68:32:
                    4b:74:9f:a4:36:92:4e:a5:37:0f:0f:81:b2:d2:5b:
                    21:8f:cc:86:58:73:22:e5:7f:09:be:4c:73:0f:cd:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6F:17:7F:19:C2:AE:D0:C6:20:36:90:D7:12:9A:51:33:C0:39:40
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/10683b0b-95dd-4486-a7c6-e2e7d85f328e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:c5:65:00:ab:93:8f:7b:99:b8:1d:b8:65:3f:d9:11:5d:db:
         fd:60:91:43:02:fd:e1:6c:f5:69:57:d6:80:2b:17:8c:c6:9d:
         7d:ce:4a:3e:76:a7:52:58:86:c8:87:e4:ab:58:c0:99:69:48:
         f5:3c:71:b1:84:ab:a5:33:25:ad:be:15:cf:3b:d1:53:21:64:
         47:fb:16:7d:79:4a:a2:9b:bc:cf:eb:93:67:dc:d6:2e:85:56:
         7c:5a:7c:3e:a1:d9:ac:22:9b:c0:47:9c:50:51:29:4c:01:68:
         3b:be:bc:e9:b2:b6:71:cd:33:a5:ad:cf:ef:d4:e2:00:32:bc:
         4b:c7:e4:5b:b4:c3:3b:be:e9:df:c6:a4:dc:30:1b:93:a0:cc:
         b9:ec:5f:ae:cd:6e:7a:69:8d:5f:a3:c0:a2:77:8e:42:18:d1:
         f7:e5:31:cd:ac:09:0b:4c:4c:cd:f7:9d:f7:49:0b:e2:be:27:
         2b:7e:6c:eb:b3:0c:0e:66:ef:1f:ae:ee:24:6e:8c:a0:50:b8:
         ba:92:cd:2e:d3:11:3d:b4:c7:a2:39:3e:a3:3d:85:f5:37:a7:
         c9:34:7d:6e:75:fa:5e:e2:0f:55:ee:77:f5:65:ce:d1:76:7d:
         ed:bd:5b:9b:de:37:10:85:74:2f:fc:4a:14:8a:c8:b3:a6:c8:
         29:94:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----