Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa
File:                     3050c822-214a-42c8-80c6-ab24f49ef5df.roa (raw, json)
Hash identifier:          dU5zaqhJxvO/568nxFsO0oRuBpKyXbP2ZMto8QBKIig=
Subject key identifier:   01:3C:1D:A8:D8:2E:0D:4B:A5:7E:55:4D:33:A3:DC:7A:09:62:F9:C4
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       61EDAD44E6B7466EC3689B394442D6F6AA5E7D9A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:c040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ed:ad:44:e6:b7:46:6e:c3:68:9b:39:44:42:d6:f6:aa:5e:7d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6c8b02f3dcd317e8ea72cb832169914b40d7b5596189d53ef5a741bc4322aa8d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:52:35:5d:37:1e:91:88:0b:be:da:ec:ad:
                    07:66:68:42:d4:24:90:f2:a9:38:c3:5e:e8:e5:ad:
                    17:2d:6e:cd:cf:80:cd:39:f3:c4:d2:66:01:46:2f:
                    d5:3c:b2:4f:35:4a:67:ca:a5:9c:71:e5:01:c0:65:
                    45:1f:b3:d3:21:3b:f7:40:7e:77:f2:60:25:26:76:
                    d5:85:df:08:c0:4a:f6:2c:e3:cc:13:f8:23:fc:d0:
                    8a:63:e4:b1:af:ec:6a:35:15:ec:e1:77:62:d0:e8:
                    99:57:51:47:27:a3:74:9d:ed:7c:79:1f:37:70:38:
                    56:43:3a:f0:74:2e:0d:7b:5f:ee:bd:7d:19:91:39:
                    89:4d:3e:6c:fc:01:eb:29:16:e1:a9:fd:52:4e:86:
                    d8:02:14:14:2e:04:37:7a:f4:4d:74:63:75:aa:85:
                    a3:f5:97:3e:b3:e1:3c:1a:ce:b4:2e:51:28:d8:02:
                    b5:35:43:62:24:e5:86:c9:8d:96:eb:97:c4:1d:8a:
                    83:76:f7:6f:51:79:c7:a2:d9:7f:6e:13:f1:fd:c5:
                    99:85:28:07:15:3e:84:cf:f9:00:86:aa:49:41:58:
                    88:4d:43:5f:aa:0a:86:28:5f:77:07:5c:78:51:42:
                    ea:d8:98:f6:a6:36:0a:5d:8e:3b:14:ef:21:cd:47:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3C:1D:A8:D8:2E:0D:4B:A5:7E:55:4D:33:A3:DC:7A:09:62:F9:C4
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3050c822-214a-42c8-80c6-ab24f49ef5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:be:eb:47:20:36:54:95:2c:a4:13:a9:2c:bf:58:ca:83:
         5c:1e:39:e3:d7:95:f5:4f:40:fd:30:b8:8d:2f:da:ba:cd:cf:
         14:cd:b4:87:45:5a:62:b8:4b:88:73:45:48:59:82:a6:08:84:
         9e:78:45:8e:3d:aa:42:f1:04:0e:2f:96:09:62:4f:a2:94:c4:
         f2:94:80:0f:ca:62:8e:42:8e:53:35:af:6b:9f:11:d3:32:99:
         52:ab:cc:ac:f8:ce:09:29:13:05:bf:c5:73:f0:8c:5b:1c:6c:
         6f:73:c5:cb:bf:3f:4f:ff:0d:22:f9:b0:17:3e:6b:db:21:5d:
         2f:b1:ee:08:ea:ea:80:1f:73:94:c6:11:c8:87:1a:99:14:6a:
         6a:07:71:62:42:12:d9:14:30:84:a9:c1:e7:92:ca:f8:dc:6d:
         ba:53:c0:81:ba:c3:a4:8e:60:15:37:56:ec:fa:2a:08:1b:ea:
         04:dd:f1:66:32:d0:ec:b2:0d:a6:b3:32:fe:d5:8d:4f:8b:c3:
         3f:10:7a:45:6d:93:fb:9c:74:95:51:1a:f0:50:5f:d0:1b:bb:
         30:23:01:c9:4b:78:95:57:84:ee:bf:0f:fc:17:91:11:30:24:
         9f:c1:a6:b3:93:5c:6a:3d:05:98:3f:60:70:84:c0:f7:01:81:
         38:44:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----