Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa
File:                     2bdabc97-6399-477a-86ce-84cce7a29944.roa (raw, json)
Hash identifier:          RRC9+2f2Nas6ufLuio31c9JR7nP6hEh4fW6Km0uC2kE=
Subject key identifier:   1B:0A:DE:6E:D0:92:84:B5:BF:B1:D7:47:76:73:C0:9B:1F:AF:D0:03
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0A2DA250612F622D6D166CDFB2641CEAB943073F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:60c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:a2:50:61:2f:62:2d:6d:16:6c:df:b2:64:1c:ea:b9:43:07:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=23510749d11521744b1eea149780c1ee8e369b26f9149ed73fd8b9430582a757, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:2a:54:21:91:bf:15:86:18:2f:e4:0f:29:
                    0e:c5:05:ea:71:04:d4:a6:45:76:b1:1e:e8:29:00:
                    11:52:00:90:9e:d1:ba:43:74:a9:bf:be:c4:8d:79:
                    88:2e:81:01:14:2b:57:8d:39:0a:e3:9a:d9:b4:0b:
                    77:12:18:92:96:b6:f6:44:9f:73:a2:48:4e:d9:fd:
                    dd:9f:f0:1d:d2:68:e4:40:45:63:6e:b3:c1:cf:52:
                    d5:2c:ab:2a:f6:a5:81:f0:3e:30:e5:d9:f2:4a:80:
                    ba:1b:f1:af:43:1b:2d:a3:e2:97:91:c2:33:c5:63:
                    86:18:20:4f:1a:1d:8c:e4:62:98:6f:40:ac:fd:f2:
                    8d:63:db:45:34:b9:d0:dd:69:46:dc:db:fc:43:ee:
                    fc:50:e2:5d:58:cd:89:e1:41:9c:d1:8b:68:1d:8c:
                    3e:b5:37:73:4c:42:a1:26:4e:c0:2b:dc:87:81:ef:
                    61:79:d3:17:52:25:d0:63:2f:59:c3:6f:9a:1d:6a:
                    07:65:13:d7:77:e0:2f:dc:29:70:3b:d3:41:c7:52:
                    ef:53:98:97:7a:4e:80:2a:81:e2:9e:79:49:b8:a9:
                    6e:43:49:6b:a6:72:1d:e3:4b:8e:62:62:ad:22:c0:
                    7c:7c:7f:8c:14:06:af:fe:16:27:d4:4b:04:d3:d7:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:DE:6E:D0:92:84:B5:BF:B1:D7:47:76:73:C0:9B:1F:AF:D0:03
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/2bdabc97-6399-477a-86ce-84cce7a29944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:60c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:86:cd:a4:ae:dd:f9:e1:1a:c2:18:46:4d:b1:b7:43:ce:d7:
         15:c2:f1:0c:24:92:34:00:12:45:e1:87:45:86:d0:f4:aa:3b:
         f7:83:40:fb:fa:23:55:0e:ac:fc:ab:9b:2b:e9:ac:07:e6:6b:
         0a:57:fe:8d:17:b3:48:dc:87:6b:59:61:61:d2:54:fd:eb:28:
         45:3f:28:46:a0:50:bf:5f:78:3a:d2:f6:84:7e:d9:42:67:32:
         52:ff:39:2d:4b:29:eb:92:28:ee:78:3c:79:58:65:5b:79:e0:
         29:83:20:9b:f4:04:36:27:78:7d:f4:1f:58:ca:bd:a1:f8:a3:
         5f:3f:3b:45:32:10:4f:8b:88:dd:9a:3f:b0:9e:20:f1:25:f7:
         cc:29:c3:1b:b9:3d:bf:ef:6c:51:48:df:f8:67:0f:b9:82:a8:
         3e:df:fd:f4:0c:99:c8:15:6d:89:eb:96:a6:3d:e9:fe:b0:8e:
         9c:e2:93:8f:05:4b:1c:f4:25:ac:d5:55:14:0b:b7:79:80:fc:
         78:81:5b:56:10:93:25:65:66:1c:fc:e9:23:0b:04:62:9b:5d:
         ee:4c:a4:55:0e:5d:36:28:06:c2:f8:cb:f8:60:0a:e0:06:31:
         02:a5:ac:c7:63:1f:b3:f4:7f:c3:fb:c0:41:7c:7e:65:64:1d:
         11:63:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----