Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa
File:                     3318e39b-6a03-4709-b0ed-1046eb7a6755.roa (raw, json)
Hash identifier:          6ApEu5pVXVa8X3c8e4c268DJHPKCjpmZbcM/g8OeSdo=
Subject key identifier:   E6:57:F9:CF:C0:C8:66:1A:BE:F9:8C:72:BE:87:39:4E:C0:E0:D5:A9
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       40BEA430582FA6A4BDA0081D490570D6D7F0C261
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:40c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:be:a4:30:58:2f:a6:a4:bd:a0:08:1d:49:05:70:d6:d7:f0:c2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=011bc74fb2db87163354fe4821d60e638b70c1189608549faca81511e6b212dd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3a:28:31:28:b1:80:fc:76:4b:54:fa:8d:0e:
                    b3:80:85:01:3e:1c:a8:6b:aa:e7:8e:48:c2:ac:3b:
                    2d:23:91:00:9a:f6:1c:e3:5f:06:f6:6a:38:c2:a1:
                    28:52:62:45:64:a4:f7:c1:df:3e:6f:6a:6f:72:7e:
                    1c:da:92:72:b2:d7:3d:1b:f4:66:bc:bc:b7:3e:37:
                    15:7d:69:7b:c0:ef:4d:f6:43:67:7b:35:50:f3:19:
                    46:b8:63:63:da:3b:b8:3c:da:bf:71:c2:88:2f:b6:
                    e3:e8:d6:05:92:4c:d6:af:93:52:3d:06:26:07:f5:
                    3a:a1:fd:83:4a:5d:28:5e:6d:60:c8:3f:5b:2c:41:
                    ef:5c:28:81:76:72:02:9a:4e:e2:2f:ac:8e:8e:ab:
                    0f:f5:b1:76:d8:29:2d:3a:81:e5:1e:48:6e:64:77:
                    05:48:31:4e:f1:b3:4d:2b:65:f7:92:4b:1c:72:ed:
                    1b:2e:14:d4:96:1d:88:a2:f9:40:4f:af:b5:d9:f0:
                    c8:fe:8b:fe:d5:6c:91:8c:a7:b4:60:2f:bf:2b:af:
                    7d:b8:e6:42:a5:5f:3c:dc:a4:68:ca:db:8d:82:1b:
                    34:c6:5a:9a:ad:a5:86:b2:c4:48:e8:74:ed:d1:ea:
                    37:b0:58:f4:7e:42:9b:da:10:cf:e3:bf:ab:21:ce:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:F9:CF:C0:C8:66:1A:BE:F9:8C:72:BE:87:39:4E:C0:E0:D5:A9
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3318e39b-6a03-4709-b0ed-1046eb7a6755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:40c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:1a:86:33:56:fc:f7:ee:1a:a2:64:72:8a:92:cd:6b:fb:
         9d:e7:4e:3e:31:15:2b:01:b6:7d:d7:14:fc:28:61:9c:fc:8c:
         96:a8:75:c4:86:f4:26:28:bb:00:eb:44:dd:c4:2d:32:ec:82:
         8b:09:94:a5:a0:f5:5a:9f:b8:bc:dc:de:57:9a:41:b8:91:a7:
         53:db:6c:74:a6:68:bc:9d:12:a6:53:dd:7d:30:73:38:c0:4f:
         c9:6b:f9:de:4b:f1:91:43:1a:9b:74:c2:0d:da:73:c3:ee:e4:
         c2:aa:40:9d:61:a5:6f:1b:a8:2a:1a:88:40:16:62:5d:64:d5:
         69:7e:a8:5e:fe:66:3e:9f:d2:c6:da:86:f4:97:e5:b9:d9:3e:
         9c:3d:82:7c:46:33:2f:43:bc:74:16:dd:ab:cf:37:2d:79:9f:
         02:19:17:fd:32:e2:7c:f3:85:e9:f3:e5:00:5b:ab:48:32:04:
         e4:e9:0b:12:81:35:d3:dc:2c:1d:54:7d:71:67:7d:4a:24:69:
         62:d0:79:f6:30:f6:3a:f4:5c:10:0e:33:d7:3a:2e:b7:71:bc:
         06:ca:3d:78:1a:af:ec:ff:22:a3:68:56:cb:49:95:0f:19:66:
         be:4e:de:83:49:d3:b1:4d:ce:c8:2c:61:41:d3:1b:5d:77:86:
         88:9b:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----