Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa
File:                     15c3811b-84bd-4035-bb5d-4cf7f705100a.roa (raw, json)
Hash identifier:          lSbM/jMl15GWuuDfR3rQIRI94Mi7TZYwjGCTlhRMpfU=
Subject key identifier:   D7:35:D5:E9:57:50:0F:5D:46:80:FB:91:A6:77:35:6C:49:EB:96:9D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       464B4579167D7E4C8534D9EC0539E6DDDEA1A26E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:90c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4b:45:79:16:7d:7e:4c:85:34:d9:ec:05:39:e6:dd:de:a1:a2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e219b0ff46930658996267923e7b58acf44117d773b48a089c43cb80c393a15c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:37:06:2b:1f:c5:60:4b:c3:8f:f0:e8:1c:
                    65:c2:dd:c4:ca:bf:2a:52:9d:ea:9b:e1:ef:f1:d5:
                    ba:7b:80:85:ee:01:9c:8b:38:67:71:94:36:5c:7a:
                    cb:5e:a5:9c:47:fd:0a:e1:42:5f:4e:9d:ec:40:20:
                    42:da:d6:aa:95:04:08:bc:1f:8b:62:85:b6:c0:c6:
                    b3:ff:e7:45:18:59:ef:aa:23:dd:fa:7a:77:6d:4f:
                    5c:f2:a2:a1:7e:8b:07:b6:dd:c1:08:1a:08:9a:b8:
                    73:ab:96:20:b4:7d:9e:c0:4b:76:e4:48:cf:26:a4:
                    fc:09:12:56:d1:66:28:59:95:99:af:5a:d4:0a:b4:
                    43:37:d7:5c:e7:20:85:a5:e1:1c:17:ce:de:df:b2:
                    8b:fd:ce:de:4e:41:25:38:92:bc:ce:df:cd:13:c0:
                    38:4a:21:02:a0:46:2e:94:7a:57:88:02:1b:21:65:
                    ce:e6:c9:c2:15:52:df:23:d9:08:e3:3b:87:a7:e1:
                    36:35:9a:c9:87:cd:b9:ad:aa:cf:c5:a6:4c:54:bd:
                    82:1a:9a:bc:fc:e1:9b:60:6c:8f:72:db:8c:d3:8e:
                    ba:5d:27:71:f6:c5:2d:90:14:a8:cd:73:43:c3:1f:
                    69:44:9c:7d:01:b3:5a:c4:8d:a6:a3:e1:ed:65:bd:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:D5:E9:57:50:0F:5D:46:80:FB:91:A6:77:35:6C:49:EB:96:9D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/15c3811b-84bd-4035-bb5d-4cf7f705100a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:90c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:ad:97:e7:72:5e:c6:b0:73:53:f1:6c:45:df:30:bc:fe:1f:
         8c:b4:82:8b:4f:1e:58:be:7f:4f:89:af:dc:3d:6f:cc:ca:13:
         3f:92:25:0f:60:1d:ff:33:8e:9a:1e:c8:59:e5:8c:ae:dc:2f:
         06:9a:9c:a5:2e:45:b4:a5:94:70:61:a8:85:b7:f4:70:63:09:
         5e:b4:cb:52:7c:02:4a:8b:d5:cc:05:bd:b1:2c:05:40:f8:4f:
         74:c2:65:24:dc:a4:46:48:85:16:c2:a8:d3:43:13:18:14:07:
         63:93:b0:68:0a:6e:49:f8:22:d1:60:4f:fc:aa:47:ff:d3:00:
         1e:a2:a5:39:35:db:5d:3c:aa:3d:f7:63:a4:b5:bd:96:e1:27:
         f6:ea:e5:73:3e:56:0d:8d:e8:e6:cd:75:e3:fc:b5:d1:32:95:
         a1:01:74:7f:e0:2f:32:ad:4e:40:c6:65:09:6e:fd:d7:7f:38:
         59:45:c5:28:2b:63:36:0b:5a:e8:60:5e:bc:9a:a1:61:d5:c2:
         fe:a0:b0:2c:2f:14:ba:dc:e6:7f:15:f5:1a:28:e9:67:2b:d5:
         a1:86:f7:09:2f:d0:c8:11:5f:36:80:8f:62:4e:13:b5:e6:e1:
         13:c4:4b:85:4d:10:ac:f8:44:34:82:8e:b1:53:ff:6d:9b:fc:
         34:63:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----