Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa
File:                     2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa (raw, json)
Hash identifier:          +j4klJ9hBEq0N6UVRx+hPy/CN2SdRe39qphYbeRRR30=
Subject key identifier:   6D:18:F9:78:5C:8B:76:89:65:A3:BD:EE:5B:46:C6:B4:D5:D0:E0:98
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1FEF0095E230B6FA4C2E5B7EF0A5E32DD7AFD1A7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da11:800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ef:00:95:e2:30:b6:fa:4c:2e:5b:7e:f0:a5:e3:2d:d7:af:d1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=63ff474109077f45680143966e1c67e8ed4c9566f201ce7ebf88e790b51aa818, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:8a:d1:24:93:77:45:98:39:fe:8b:b5:2e:
                    34:d1:fc:90:39:27:c0:ea:0d:67:3c:5d:ac:dc:7c:
                    8f:a8:a5:12:c2:96:9c:45:b8:93:c5:f8:76:4b:20:
                    7e:4f:7d:d0:d7:5a:f4:64:6a:7e:4b:68:87:04:bf:
                    17:4d:ab:51:f4:29:67:04:54:96:82:aa:96:c9:35:
                    a7:6b:0b:28:44:0f:ad:65:be:d3:45:01:bc:98:1d:
                    18:ee:d3:6f:6b:39:91:af:d8:07:52:62:ee:73:3d:
                    be:9d:ec:80:b4:b4:ce:78:04:de:fa:a0:11:ef:25:
                    b1:4f:28:b6:a1:a0:39:5e:a4:f5:8c:aa:a5:c2:bb:
                    7c:39:c8:bd:c9:c1:5d:9a:d1:ed:4b:f1:b7:9b:09:
                    75:96:db:19:3a:06:55:e0:78:d6:20:8a:2c:83:16:
                    e2:f7:3d:b8:aa:a6:1a:78:36:7b:86:95:a5:71:02:
                    8a:71:8d:c4:c0:81:8b:7c:ae:de:82:fc:c4:df:c5:
                    c8:cd:a0:a8:32:70:1d:6c:c9:40:73:5d:59:cb:48:
                    f9:1d:03:cf:d1:b2:f8:77:1f:14:17:00:84:e7:fe:
                    03:98:5f:27:0f:dc:9a:63:2c:32:28:f1:24:e7:8d:
                    34:42:02:54:79:49:9f:9e:92:5e:75:fa:15:aa:69:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:F9:78:5C:8B:76:89:65:A3:BD:EE:5B:46:C6:B4:D5:D0:E0:98
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2218644f-bc11-492d-b9a9-8d18d5bebd6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da11:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         90:0e:9a:c3:38:af:39:5c:4f:a2:00:0e:7b:bf:8f:af:df:13:
         09:9a:9d:b6:46:96:4f:66:61:52:d3:63:3b:ac:93:04:08:1b:
         62:35:b2:6f:2b:d8:a8:ff:8c:ea:0c:f4:ec:74:30:45:9e:9d:
         83:d1:f5:83:85:5b:6c:b6:1e:5c:ac:b9:1f:cf:4e:9b:ff:30:
         27:46:06:88:95:37:64:92:75:11:a8:74:37:60:d3:71:43:a8:
         91:25:0b:57:c2:83:0b:c5:70:7b:7c:f8:1f:5d:f5:5e:d2:b6:
         9c:5d:40:c7:3d:6b:f0:5e:9a:50:2e:b2:2a:40:c6:e4:d7:89:
         b7:86:73:ed:42:4d:bc:ef:ee:33:4f:08:2e:9a:ff:0b:1e:92:
         3e:f5:4b:31:d3:e0:5d:10:26:26:bf:1b:ff:24:f5:67:f8:c1:
         43:1a:d2:35:d1:75:66:77:05:ab:2a:60:8d:5c:68:5a:47:40:
         40:34:8f:fb:9a:46:e1:33:5c:b8:7e:a4:61:70:d6:8a:bb:0e:
         8a:f3:79:81:1d:61:01:a5:54:8a:7e:30:0d:4a:a0:33:96:72:
         90:62:81:58:c6:a9:cf:8e:33:d3:f9:0c:91:15:f2:89:da:01:
         17:51:2f:8e:84:e7:cb:83:95:17:c3:fb:76:d7:58:c8:75:34:
         e3:da:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----