Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa
File:                     23ecebb0-098e-41b3-815b-beadfef6484a.roa (raw, json)
Hash identifier:          SLcSJRtsNVPTzTt/fEZ3kC1fgUkBWelWUAxOfII9NF8=
Subject key identifier:   A1:41:55:CE:09:AA:22:24:B9:C7:E8:D9:DD:86:F0:6A:24:AF:0F:EE
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0E948FCB55BCE9E87FF77E40B908363569AF5E59
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:94:8f:cb:55:bc:e9:e8:7f:f7:7e:40:b9:08:36:35:69:af:5e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=cac7bcf7e05a762dd8607cc1e61e0a3fdce7fcad2c52d2406d47d23840ec8827, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:77:9a:62:d7:b4:b8:9b:51:0c:c9:3e:2f:
                    88:35:7d:73:42:6a:a6:a3:83:3e:12:15:62:13:19:
                    e8:60:bc:dc:f1:bb:44:5f:b7:c4:4e:57:73:3d:25:
                    55:ef:cd:c6:94:05:36:d8:02:55:19:fe:ed:dc:c9:
                    d9:a7:52:3a:7b:09:07:45:64:87:55:4a:97:66:9b:
                    56:53:5b:3f:90:cc:59:7f:4c:40:40:5b:df:14:8d:
                    ba:6e:7f:b7:a3:eb:86:79:a9:8d:c1:0d:fd:7d:ac:
                    5a:dd:fd:81:f2:70:f2:94:19:1b:5e:9e:50:75:1b:
                    f8:67:47:af:c7:02:ee:19:be:cf:0c:92:83:78:5a:
                    7a:55:c5:0f:24:7d:4e:90:80:91:2c:b4:73:4b:15:
                    59:5e:c1:45:33:2b:92:d1:cb:a3:c6:32:d0:f4:08:
                    50:6e:cb:5c:d2:f9:bd:22:23:bb:72:2d:86:69:48:
                    58:1d:e5:63:f7:aa:6d:69:f0:08:f5:cf:f0:8e:9f:
                    8c:fb:07:02:9b:75:2e:a3:a6:9e:80:55:f8:59:63:
                    64:c2:03:8c:17:2a:09:dd:2a:3b:61:ee:08:05:a8:
                    65:17:d2:eb:87:47:7a:30:75:b9:94:84:d2:28:f9:
                    39:1e:50:1a:fb:b6:4c:c2:45:85:30:09:f5:51:15:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:41:55:CE:09:AA:22:24:B9:C7:E8:D9:DD:86:F0:6A:24:AF:0F:EE
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/23ecebb0-098e-41b3-815b-beadfef6484a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:80:3e:43:f8:7c:c8:9b:4a:a3:60:98:f8:7c:e0:87:29:53:
         a1:58:f3:52:96:54:0d:22:25:b5:12:a2:3c:6f:be:f6:c2:e6:
         68:a9:4f:e4:d9:2a:09:a0:d1:c9:7b:72:6a:f2:9b:3e:dd:5f:
         59:e0:55:f0:68:da:fd:8c:f0:de:4c:a1:53:7a:dd:c1:11:e6:
         59:14:19:34:e0:04:f4:85:62:4e:3a:92:1b:99:ce:d2:93:75:
         03:ed:c7:a7:ca:5a:99:64:60:73:34:dd:26:72:fa:b1:3b:33:
         28:b4:70:8b:99:40:6b:f0:7d:82:a0:8a:8a:9c:2e:43:98:de:
         27:ea:55:52:6a:97:9b:e7:55:1f:5c:0b:a0:d1:12:29:eb:4a:
         80:12:bb:77:6e:71:a6:96:7e:12:aa:d0:79:b4:1d:77:10:7b:
         ec:c5:9d:10:7f:91:9e:64:53:a4:57:4d:8a:27:04:fc:ad:4d:
         1b:46:6f:d1:31:f5:ad:1b:da:3d:9f:85:e8:0f:e9:94:e6:03:
         46:9a:08:2a:75:a9:2c:a4:69:65:c7:c4:f5:12:f6:93:c6:67:
         7e:79:da:fd:58:13:ff:fa:d2:80:9b:50:54:23:32:47:af:44:
         08:d5:eb:da:e0:f5:77:f3:9b:62:2d:b0:c8:78:51:32:fd:ea:
         20:8d:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----