Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa
File:                     1b56d794-06a2-4803-b98b-e9a84d35ff73.roa (raw, json)
Hash identifier:          C+Zx2im5t5kAzDyX4YEb30cDJWuxmh6Mf+S2h9Tf4ms=
Subject key identifier:   5E:98:58:58:87:EB:22:B6:37:C5:F3:35:2D:95:3D:9C:81:58:A5:4F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       54A11B87952E8125E7ED02568D63956DA021244C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:8840::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:a1:1b:87:95:2e:81:25:e7:ed:02:56:8d:63:95:6d:a0:21:24:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e666c937289da2c2a058ee8d4cf634075dc1739daef74cff23538bb11c987b55, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:73:2e:55:9a:fb:8b:62:c0:75:80:a9:bb:
                    db:ed:e3:23:ad:97:f0:ec:74:9a:0a:be:3d:c7:98:
                    60:67:6c:14:5f:66:1d:ff:45:45:0c:5d:76:95:aa:
                    d7:b2:a8:7e:6e:87:62:ed:7a:36:fe:d1:f0:13:34:
                    cf:5c:fe:ad:a9:26:4b:78:11:82:0f:0a:45:75:7a:
                    9d:65:e7:dc:f3:f5:b2:a4:0d:ab:5d:ef:17:75:2d:
                    38:99:7e:d2:7b:c5:ef:e6:24:64:e1:7a:a9:ef:b7:
                    b5:56:74:16:35:c8:8b:3b:8f:4e:2e:f4:6b:1e:1e:
                    6a:bf:b8:93:8f:5f:2e:8e:1a:d0:d0:29:03:d9:35:
                    85:c6:e5:f2:5e:e3:8d:9a:20:61:fc:ff:71:1c:c7:
                    2a:15:44:2e:b4:4f:ea:b3:ff:0e:8d:81:cf:61:ef:
                    5e:36:8a:fd:26:92:c0:c9:e2:a1:f4:5c:73:52:d5:
                    c3:11:4b:56:7d:b8:09:cd:06:46:65:2a:74:c7:4e:
                    bc:a9:37:c9:8c:87:de:62:4b:d6:53:42:13:1a:90:
                    38:97:1d:45:31:a7:58:cc:7d:cc:02:21:60:f5:de:
                    b3:60:a8:0d:7a:af:2b:5b:25:6e:63:a2:0b:51:7b:
                    fe:76:4c:50:f0:7e:77:4f:bc:49:d1:8c:69:76:19:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:98:58:58:87:EB:22:B6:37:C5:F3:35:2D:95:3D:9C:81:58:A5:4F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:8840::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:f9:18:24:5c:cb:44:ed:b5:dc:85:8e:62:cc:c6:a4:07:90:
         7e:5b:f5:b4:81:ff:0c:e7:69:8f:48:d6:16:5b:4a:bd:17:c8:
         e3:53:9d:9d:19:3f:9f:b3:5d:cf:56:c2:d4:9f:5c:60:a2:32:
         5d:b7:35:41:6c:93:7a:09:93:ce:f0:8c:43:5d:58:b0:e3:14:
         31:aa:ed:04:5d:55:17:6d:f2:ee:ee:f3:40:24:69:3e:3b:fb:
         7b:d0:25:09:af:b5:39:d3:6a:de:41:86:98:7b:37:46:e6:98:
         49:cd:72:5c:2c:bf:c9:39:aa:8d:3e:2c:73:a2:42:96:a2:4e:
         6a:c9:9d:aa:cc:6c:d2:c8:1c:a4:d7:09:e7:3b:7b:85:01:9c:
         27:41:44:f4:68:85:ef:6a:0b:6d:0c:c4:6f:c3:a9:b7:90:74:
         a5:c2:59:64:3f:7c:cf:25:95:50:41:26:98:aa:09:75:45:82:
         06:54:bf:29:d3:71:23:f7:a8:30:bf:eb:9d:10:95:b6:71:28:
         f8:6a:83:00:dc:1d:ca:6d:87:44:87:7f:b4:be:a1:4e:01:05:
         b7:5c:95:66:1c:ef:9d:51:35:7a:90:d0:fb:15:e4:fc:79:49:
         c3:08:4c:39:fb:9c:a5:b4:20:88:86:2c:ff:28:3f:46:af:33:
         6c:a7:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----