Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa
File:                     1da204b5-0e3f-4900-a99d-d43a795ecf89.roa (raw, json)
Hash identifier:          LPeXKJXjjGsoDY3TR1q/0Yv/6uMMsVAd8XwID8eTIwI=
Subject key identifier:   8A:26:13:1E:63:E3:A2:08:C6:36:20:F6:FE:43:ED:BC:C8:17:73:01
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       30D8775DD290D99C1F053CCB65A1DF12FC727EF1
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1c:8400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d8:77:5d:d2:90:d9:9c:1f:05:3c:cb:65:a1:df:12:fc:72:7e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e0815ae95af5f86013dc2019f612b9beca17302e24ac4f6824e4c107d1175e8f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:8e:b5:45:b4:4a:a2:4d:b9:b1:49:45:c2:
                    b9:7c:b9:b0:10:70:cb:98:98:3a:d1:a2:33:0e:aa:
                    92:76:e0:04:a9:54:ea:0e:19:9a:79:b4:f5:54:64:
                    33:4f:73:79:b6:5f:7a:e4:37:b1:78:40:3a:0e:e1:
                    be:8e:8d:78:ba:02:60:1a:b8:29:da:c0:05:9f:99:
                    73:60:88:ab:16:c3:74:0e:88:41:be:7b:e2:bc:9e:
                    cf:07:b7:a0:dd:2e:ef:8b:e1:ca:e7:b1:82:78:f5:
                    12:18:e4:f8:31:00:28:d6:89:9b:77:1d:a5:aa:56:
                    8c:f2:f0:f6:f4:76:32:b9:ee:88:7b:89:f1:1a:65:
                    ce:a1:cc:44:1d:76:73:16:b1:2e:71:77:8f:82:c7:
                    31:b7:10:dc:98:b6:d5:ca:d4:08:b6:41:1b:10:87:
                    d1:1d:a9:7a:1a:a6:3e:d4:51:8d:36:db:1b:7d:e1:
                    6e:2d:c1:2a:54:3e:d6:03:11:ad:71:a3:0a:e8:3f:
                    24:bf:96:4a:b0:23:0f:da:04:19:6d:2a:e2:81:8f:
                    8e:68:c5:d5:e2:2e:58:77:78:e2:fe:96:05:15:49:
                    20:50:25:0d:75:38:13:a6:f8:f1:50:0b:21:72:62:
                    a0:2e:f7:da:16:ea:1f:ad:3b:1a:fc:cc:f8:92:44:
                    89:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:26:13:1E:63:E3:A2:08:C6:36:20:F6:FE:43:ED:BC:C8:17:73:01
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1da204b5-0e3f-4900-a99d-d43a795ecf89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1c:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a3:6d:31:6e:70:cc:b7:af:04:03:f7:d4:ee:2d:d0:83:74:01:
         ab:f8:11:7e:a4:aa:9f:23:d2:1d:bb:1b:ba:c6:e5:be:75:97:
         82:26:71:c6:ba:de:be:69:41:d8:6b:79:f6:63:3f:28:2c:ac:
         94:26:15:d6:37:ff:1c:26:ff:08:55:c6:ed:fa:aa:49:1a:72:
         9f:a9:f4:7b:22:1f:ed:dd:80:3e:5d:99:66:2c:4a:93:b3:c0:
         25:fc:71:67:a8:90:ba:b3:9b:1e:47:6d:af:57:0d:8d:a1:92:
         24:46:2a:32:7e:0a:c3:64:45:ff:07:ab:ac:f4:6a:fd:f8:c1:
         a9:10:eb:9c:29:b5:72:df:53:13:4f:ce:2a:0a:3f:1f:05:88:
         cd:c9:44:e6:f8:59:54:22:33:f1:46:67:90:13:17:02:83:d9:
         da:30:10:0d:fe:ae:d9:fd:9a:3d:58:d8:8a:19:d9:50:5d:bb:
         b8:11:65:3f:df:de:14:fb:48:3d:90:45:86:f0:45:3c:45:66:
         4f:35:8a:74:61:14:a8:11:88:b0:f1:f8:9b:cd:88:04:17:7a:
         f9:69:a5:ba:06:ce:fa:a0:9c:43:eb:ab:17:99:c3:ce:a0:8c:
         3b:b6:76:ab:13:d2:5b:7c:36:2e:0a:fb:38:bb:2e:05:be:61:
         ca:54:cc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----