Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa
File:                     4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa (raw, json)
Hash identifier:          cyi2cH6QA24b/LmuF2vdPUHT076zAOY4t44emwzwAxA=
Subject key identifier:   BB:8B:D2:19:50:80:75:36:8F:32:6C:4A:47:F2:A0:88:EF:8B:16:16
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EC5FE4BFBBBD4454784B9744D2C78D9A1628E96
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafa:e000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c5:fe:4b:fb:bb:d4:45:47:84:b9:74:4d:2c:78:d9:a1:62:8e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=796673b3f62643f367c1469481d365db8c91c11455a4248d79a30defd13c7255, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:cd:97:c3:a0:5d:79:c2:f7:ac:ff:4b:c2:
                    f8:28:9d:1e:14:28:ee:60:44:ba:16:c8:3f:1e:4c:
                    92:4e:2d:60:a3:57:97:ba:4d:1e:eb:20:49:a0:82:
                    e4:98:c9:f5:35:94:57:13:45:93:5f:08:cf:e8:34:
                    bd:91:6e:ad:f8:53:0a:1e:c6:98:86:96:0b:ea:4e:
                    12:02:07:49:3b:2c:b6:ca:ff:e2:06:f4:7b:2b:c9:
                    e1:e1:92:50:cc:90:5c:ba:66:4e:b0:64:be:9d:90:
                    b3:f0:be:82:c5:bf:00:23:66:27:c8:b8:42:a4:9c:
                    1e:4b:ab:5c:e2:2c:7f:73:c2:7a:40:9a:f2:56:3f:
                    1b:32:1f:36:f3:cd:7b:81:9d:67:7f:85:6b:b6:bd:
                    f6:47:e3:d3:ac:c3:0d:5a:2e:77:b0:6f:fe:eb:c5:
                    31:0b:95:c1:cd:7a:90:fc:b1:a2:86:c0:7b:23:b1:
                    b9:fa:7b:2a:99:aa:f8:d8:55:7a:6f:e0:2c:77:a0:
                    99:ee:c4:a9:d0:f4:84:fc:8a:e0:2a:03:45:5b:1d:
                    9a:ed:cf:43:22:54:9d:d4:27:e5:6f:a4:9a:8d:9c:
                    f7:7f:7d:8d:ab:c5:da:6e:09:e8:ad:6a:ba:1c:92:
                    14:4d:5e:fe:10:c7:fc:7c:00:55:df:4c:38:de:d6:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:D2:19:50:80:75:36:8F:32:6C:4A:47:F2:A0:88:EF:8B:16:16
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b7bec8b-6d6a-4f05-8261-e06d9f3d2db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafa:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:54:cb:cd:fc:e0:ff:d9:10:e3:2f:56:46:cb:68:b8:b4:
         7e:34:d7:28:9a:c6:4a:71:3e:27:ee:a7:24:52:29:06:65:7c:
         2a:04:12:c8:4b:ab:d9:e2:e4:0a:be:20:08:f6:20:c0:ff:b7:
         2c:7a:4f:1c:7b:e5:90:65:48:56:4c:47:3f:26:e9:84:f3:c3:
         cd:78:9a:97:56:a3:ef:a1:53:38:ae:46:b3:fe:af:7b:e7:10:
         91:ad:82:96:e9:f1:09:dd:07:a2:e6:ed:58:69:2d:16:c9:0b:
         bf:1a:76:e3:c2:11:57:e2:82:41:12:a3:23:a1:16:b7:d8:e7:
         2e:3f:a1:40:50:2a:63:a7:c1:91:1c:4b:58:bc:95:be:91:d0:
         ba:00:4d:b4:30:70:42:d6:58:7d:30:3b:8e:42:30:71:46:d0:
         95:03:11:f2:5e:b6:da:5f:07:17:34:df:93:13:8b:97:fb:14:
         15:a5:70:16:2f:3b:e0:7b:c0:fe:bb:ee:19:d5:b2:6c:38:1a:
         95:2c:20:0f:40:71:32:4b:53:7d:17:f1:05:7f:9a:3a:db:73:
         58:28:dd:b5:6b:8a:f1:dc:cf:24:35:47:9c:0a:d5:3c:77:61:
         d8:29:f0:af:06:46:9b:95:57:1f:8a:1d:3c:40:33:96:b8:5c:
         93:5b:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----