Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa
File:                     3cf33701-1ea5-43c6-b291-763d0e06817e.roa (raw, json)
Hash identifier:          OUMWZgtQE/JvnIRGjX+/LP538jgoyEaID+mOYyEdv7E=
Subject key identifier:   FE:69:06:3D:2E:FA:4B:5A:23:44:56:EE:03:5F:44:75:14:55:0E:BD
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       511CF8F6208916BA49E04AACB9B0EE336AD6358E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1c:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:f8:f6:20:89:16:ba:49:e0:4a:ac:b9:b0:ee:33:6a:d6:35:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4bb9335ec4196609f39a9c3f72f84104007b787884c05d73b9dc12b42bdd2c85, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:d9:9c:f4:81:54:83:ef:17:ef:2f:c6:51:
                    b2:66:53:d6:b7:00:f2:92:3e:2b:05:de:74:dd:83:
                    ec:ed:bc:ae:98:b0:7d:dd:a3:7a:7c:9a:0e:c0:a2:
                    a0:24:13:ed:e6:5e:34:08:8a:47:36:7e:0c:e6:85:
                    1c:8e:ea:fa:8a:49:23:f3:ba:aa:2d:44:7b:34:d5:
                    17:cc:82:12:e2:f2:1b:2e:52:1c:9e:74:8b:23:41:
                    4a:52:81:3c:2a:6a:64:49:43:b7:66:40:25:1b:c0:
                    87:43:ad:65:1e:91:f9:47:17:d4:63:aa:21:76:90:
                    ef:b4:e1:08:b8:2a:51:b3:e4:c5:ac:ff:cb:93:12:
                    d5:14:03:c9:e0:ed:07:79:1e:2b:f6:60:8e:66:a7:
                    60:14:65:be:18:47:2c:23:47:b5:7f:fe:87:0f:65:
                    a7:f5:2b:05:62:2f:cc:6d:40:6e:7e:dd:7f:8a:85:
                    a8:63:7f:16:5a:49:80:b9:82:76:e6:3f:32:d0:a8:
                    b7:37:96:c0:50:11:51:72:46:b7:22:c1:52:f7:b2:
                    0a:2b:b0:7b:86:d0:b5:5f:10:3f:97:41:f1:86:ea:
                    89:fa:05:82:6a:f1:c2:17:9e:7e:f1:6c:e1:14:3c:
                    41:3a:0b:ca:a9:87:40:5f:0f:f5:53:12:b5:70:50:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:06:3D:2E:FA:4B:5A:23:44:56:EE:03:5F:44:75:14:55:0E:BD
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3cf33701-1ea5-43c6-b291-763d0e06817e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1c:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:6a:fa:e6:8e:64:c3:9e:e6:bf:61:fa:60:5a:0d:c5:39:
         0f:d0:eb:d5:4a:d1:e1:5b:ed:bb:2a:d7:8b:21:20:d9:b0:bb:
         87:fc:23:d6:5c:cb:2f:e9:31:54:27:cc:f0:04:3b:97:ef:3a:
         3b:b1:4e:9f:87:68:b7:18:43:59:1b:ca:54:93:45:95:a3:fc:
         87:ca:3f:d1:57:6c:04:0a:58:b9:dc:19:87:c3:a4:8b:92:9c:
         ca:69:17:5f:2b:f6:b7:c6:6a:91:cc:a3:16:5e:25:15:c0:6a:
         7f:da:4e:c9:69:36:d8:0c:50:6d:79:da:20:94:a4:16:65:58:
         70:1d:60:ae:34:ff:a3:af:ce:1c:6b:8a:3f:76:e9:ff:9a:a7:
         3b:75:a4:fd:cb:27:31:e5:f9:20:1d:5d:c2:fe:18:37:7c:aa:
         5e:6a:29:ea:c9:e7:ff:9f:a7:24:87:ac:ef:4e:ab:41:d9:d5:
         ec:5c:8d:ed:10:11:b2:8a:3c:2a:1e:ba:ff:0e:65:b8:95:31:
         b3:91:4e:8f:f4:41:58:a5:9d:18:b9:1e:d9:d0:6a:97:d7:d8:
         17:59:8b:12:3f:d2:e5:6c:72:de:eb:89:fa:db:24:ff:8d:f7:
         0c:03:88:66:48:b9:85:3c:ce:0b:1a:79:b6:42:41:0d:c6:99:
         49:86:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----