Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1756340a-c724-4239-971e-4c8675b3c857.roa
File:                     1756340a-c724-4239-971e-4c8675b3c857.roa (raw, json)
Hash identifier:          xJwrTN5FwdfRtTCCA730QRh+pm2puofc9KZwVSYOtWk=
Subject key identifier:   1E:6D:2C:6D:3F:BA:B7:D2:E2:CF:49:79:E6:A8:03:F1:47:C3:03:30
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0ED6C6354ACB125AFA1C699CEE8213FBCA7F5DB1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1756340a-c724-4239-971e-4c8675b3c857.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:2880::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d6:c6:35:4a:cb:12:5a:fa:1c:69:9c:ee:82:13:fb:ca:7f:5d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=da4cee5d75cc457a5331f3fab10578bcfb1f7352f859f3bd507af9b3defe883e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:e0:11:5b:8b:b9:81:1d:59:79:ff:3a:6c:
                    79:71:b1:3f:03:6f:0f:5c:3d:af:f8:5c:6b:59:c4:
                    f9:d8:0a:51:12:96:dd:99:9c:dd:80:97:84:2f:c8:
                    f8:45:aa:40:14:05:9c:4b:e7:01:6e:93:4a:ff:bf:
                    c2:13:e2:51:94:79:c2:49:ca:2e:10:bb:d1:31:a6:
                    53:5b:b5:9b:8c:eb:9a:f1:fd:23:57:e9:67:21:4d:
                    24:40:76:91:51:b5:ff:00:75:6b:99:d8:f8:56:fc:
                    7d:19:33:61:e3:57:21:a8:d2:fc:39:80:9c:2f:98:
                    14:74:78:1b:16:68:fb:d5:f5:35:4d:4a:d3:4b:fb:
                    a5:db:22:c3:a7:c6:3d:8e:10:c7:ae:96:3c:9b:58:
                    db:fd:32:0f:43:18:2e:47:20:74:9c:75:d2:f1:a6:
                    31:f1:d0:5a:d8:a6:d9:b8:bf:82:17:43:5a:bf:94:
                    d0:df:99:a0:82:52:5d:99:c0:19:00:b0:3f:1f:44:
                    aa:47:26:93:b3:a7:02:75:76:09:9e:0e:fb:d7:47:
                    62:28:75:6d:ef:76:16:82:00:d5:56:42:e6:7a:b6:
                    67:a4:0d:91:f1:3d:3e:55:14:73:25:2c:21:5d:1b:
                    14:d7:c2:5d:cb:b7:20:cb:3f:04:0f:eb:e3:6c:fe:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:2C:6D:3F:BA:B7:D2:E2:CF:49:79:E6:A8:03:F1:47:C3:03:30
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1756340a-c724-4239-971e-4c8675b3c857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:2880::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:44:98:05:ce:95:97:ff:a5:05:bf:0d:de:d4:5a:55:8d:6c:
         0a:91:21:e9:80:0f:31:22:7a:35:88:5e:3b:76:6a:7b:56:5a:
         3a:b5:b4:f8:56:b3:1a:72:90:83:cd:10:53:8f:5b:64:a7:a4:
         41:26:bc:0e:e3:bc:ec:de:4a:f6:13:18:5e:b2:94:44:ce:f4:
         88:6a:bc:c8:31:98:48:4c:81:f2:53:2f:98:ee:0b:bd:3d:4d:
         8e:07:b9:4c:eb:07:b7:59:5c:35:71:8d:da:e7:1b:9e:8a:50:
         a9:7f:0b:3d:00:16:01:a6:52:3b:47:b2:5d:14:50:8f:fd:6b:
         c6:8b:96:6a:2c:4f:fc:bd:67:37:44:79:3d:9c:17:e2:77:c5:
         e1:30:57:e7:a2:c5:b9:82:43:d5:ea:b9:a2:11:df:73:60:2b:
         4f:c6:33:79:6e:34:79:d3:36:a5:f0:7e:ed:30:cd:39:28:7b:
         14:13:66:97:68:13:c1:c3:89:1c:74:89:3c:ab:db:66:80:60:
         58:6a:ed:71:02:58:3a:35:86:cb:d6:04:72:6b:da:10:40:41:
         6c:f5:79:6d:3b:b3:89:c6:00:2c:a6:f1:30:0b:8a:b5:2a:44:
         4f:d7:88:13:76:d3:db:7b:7f:f2:9f:bd:80:87:17:30:01:9b:
         c8:24:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----