Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
File:                     32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa (raw, json)
Hash identifier:          r83EnuGyfBPpPtbNGvPZ8TjAEozw4lnC1ChUQT5ogds=
Subject key identifier:   0C:EE:BD:43:ED:AB:66:F1:CF:67:73:45:73:A8:AD:68:5A:E9:37:73
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       20298CF7ECF3CCE57628B8EAD5B568291F739E6D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:29:8c:f7:ec:f3:cc:e5:76:28:b8:ea:d5:b5:68:29:1f:73:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9e0f4993555fa359fcdf0d6be5b5c7fd16204aab73a3ec397c592e963a4630d4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:91:7e:c3:ee:66:98:4b:2e:b4:01:84:8b:
                    62:68:77:c8:e6:3e:48:c8:cb:44:71:19:4c:d3:fc:
                    a4:2b:eb:1d:a8:7c:88:f1:07:e2:44:90:91:70:5b:
                    58:f3:5e:84:e3:ae:63:09:b2:88:23:62:c1:2d:d5:
                    06:37:a8:70:88:2e:99:b3:70:76:09:25:50:a0:02:
                    0b:b5:cc:58:fc:15:3c:44:2a:28:53:d0:9f:30:40:
                    c0:1e:bb:a1:18:37:57:16:ec:4f:96:5a:52:c7:b1:
                    e8:e9:a3:6e:91:98:be:f8:b4:31:e2:22:06:f2:bc:
                    d2:4c:c8:7a:dd:fd:b5:cb:f2:7e:5f:62:b2:64:64:
                    6e:0f:5e:a2:53:31:14:69:e4:6e:4f:84:dd:8f:e2:
                    3f:2e:40:8e:be:4a:c5:37:92:88:38:2e:12:0f:85:
                    c7:12:8f:87:a2:eb:ff:8f:84:08:dc:30:9e:d1:65:
                    57:d1:b6:da:9d:e7:69:80:ef:a0:c0:77:ed:e2:61:
                    e6:fa:0a:29:2d:74:3c:e9:77:67:57:25:3c:a9:83:
                    30:aa:e7:f9:16:ca:fd:f6:b4:bf:4d:96:1d:36:a8:
                    91:01:0d:47:de:15:d1:5d:42:5a:8f:a8:55:3d:45:
                    26:79:80:55:ed:a9:ef:47:42:a8:c1:3e:d3:44:fb:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:BD:43:ED:AB:66:F1:CF:67:73:45:73:A8:AD:68:5A:E9:37:73
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/32ec7e70-fe89-4ce7-af86-a7f5b19f50c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:06:aa:ad:b4:29:99:4d:4e:9d:23:74:e1:a1:a7:19:8d:ec:
         93:2a:f9:55:68:0f:5e:b1:8c:c5:c6:db:46:9a:40:2d:1c:ca:
         a3:94:d2:db:1b:01:8c:21:0d:45:6a:ad:a7:7b:d6:fb:31:17:
         b0:ca:e4:12:aa:52:0f:a4:24:58:97:c9:73:47:c1:33:64:2c:
         18:69:1e:af:ab:7b:e4:3f:6f:0d:11:7d:36:f6:4c:6a:8a:57:
         4c:cc:ef:6e:99:a3:33:69:e0:07:90:52:87:7a:53:00:a0:82:
         75:04:69:5d:5d:5b:5e:9c:e0:2a:61:2e:eb:42:33:ea:3a:f7:
         c9:2f:9f:2f:f9:0b:dc:c5:c2:3e:02:fc:96:5a:bd:4b:dc:11:
         97:f5:3c:67:19:95:be:e5:96:e7:42:b0:e3:2d:26:d6:04:40:
         4f:b8:fa:da:05:13:5e:cb:7c:96:00:13:1a:c8:12:c7:1e:d2:
         d3:28:62:8e:d0:85:5f:16:bc:31:e4:fd:00:10:00:ac:16:75:
         f3:b5:e4:a5:31:42:f4:36:81:dd:92:1a:2c:59:af:c7:b1:9d:
         f9:5d:b5:e6:9d:0f:30:43:cc:34:99:85:35:69:29:ab:dd:95:
         7e:12:f0:77:44:28:7d:aa:e4:74:ba:e7:b1:8e:23:fa:33:50:
         0d:98:8b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----