Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa
File:                     4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa (raw, json)
Hash identifier:          k15uzZXuSp1eUOfYfggxFabAr5/gm/yqJNS4yKmghqs=
Subject key identifier:   03:8F:41:15:74:37:82:59:32:27:06:FC:28:69:25:E3:6F:84:08:8C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7F873337036BC086E787615D35FA2B89842FD1E5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:80a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:87:33:37:03:6b:c0:86:e7:87:61:5d:35:fa:2b:89:84:2f:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=17ac94ba0e25f937a389432f97ec2a57d0064900ea657b6fdf32efe11d5194a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:20:fd:d2:b3:c8:19:5f:0b:be:db:86:1f:28:
                    8b:4d:48:c6:39:ae:f4:b1:69:ea:ea:39:27:85:f8:
                    a1:73:24:8c:ef:83:f7:87:de:33:20:1e:ad:c1:53:
                    a5:30:48:65:4a:bc:7e:f2:8e:85:b6:18:a8:26:4b:
                    ba:cf:cd:03:47:98:28:3d:21:53:ca:a2:f6:ad:26:
                    e2:54:f9:95:88:52:5f:94:13:ca:40:dc:3c:dd:8b:
                    54:ad:65:d6:82:3f:2d:1e:33:b3:b0:0e:69:50:a2:
                    f8:eb:a8:75:fa:47:25:d4:da:a3:2d:c0:21:76:3d:
                    78:b9:32:f3:69:7a:34:65:3c:3e:10:44:7b:41:8c:
                    8a:a9:1c:49:f3:fd:f8:fa:ed:55:0f:aa:3f:4e:ad:
                    63:1c:ae:5f:4f:c9:73:89:91:f4:67:a2:08:f9:37:
                    69:0e:65:9c:1f:32:d8:21:c9:ab:3a:9e:7d:79:46:
                    b8:1b:75:00:77:2a:5f:bd:c1:cf:c0:67:a1:e8:fa:
                    f4:09:88:6e:6c:00:e9:2e:b6:06:f2:4b:47:13:d5:
                    f8:04:6d:b4:2a:dc:c5:23:0f:e6:76:11:22:3b:cb:
                    16:d0:87:2a:0e:92:99:48:27:59:38:60:33:15:58:
                    60:29:f0:39:a3:da:50:a5:b5:fd:d5:5c:18:22:1b:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:41:15:74:37:82:59:32:27:06:FC:28:69:25:E3:6F:84:08:8C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4b95e3b4-3049-4ea0-a39c-7522cc0bea0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:7a:46:dd:f2:27:73:0c:ec:c3:f5:f5:a6:fe:8c:5a:0f:
         c9:58:aa:3a:52:aa:6e:74:e8:d6:55:a7:4c:98:b6:cb:88:59:
         3d:23:7a:e6:7a:f4:77:3b:06:3e:b3:8b:92:9d:7e:38:c2:ed:
         be:53:08:ba:14:e0:95:b4:a3:02:0f:61:f4:6e:f0:85:15:1d:
         4f:c0:d9:85:f8:a5:b4:74:0f:ab:57:15:0f:25:c5:59:33:30:
         1c:5b:0e:50:cf:dd:27:79:c4:a0:10:c2:30:33:94:ff:ff:2e:
         90:80:7a:44:e6:29:8b:96:c8:0c:ee:3b:e6:2b:42:19:8e:c7:
         69:26:e3:d2:ba:27:c5:4a:78:fe:f4:92:65:fb:cd:5a:ee:09:
         68:72:92:64:33:31:8a:08:e5:cc:75:45:06:22:5f:c1:2f:e7:
         10:46:9f:2c:08:ea:f3:fc:d4:8c:45:19:cb:c8:0e:7d:92:70:
         be:04:33:ad:7d:dd:00:17:9e:31:34:dc:5d:66:34:8e:7e:8d:
         30:57:5d:67:b7:de:15:79:ef:38:01:80:dc:33:27:95:eb:c2:
         e3:dc:f6:6e:41:7a:9c:39:07:24:a6:53:a6:2d:b3:0c:77:75:
         75:2e:ec:de:8f:07:64:38:36:3b:d5:c9:dc:c7:6d:40:f6:36:
         4b:b7:76:5b
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUf4czNwNrwIbnh2FdNforiYQv0eUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMTdhYzk0YmEwZTI1ZjkzN2EzODk0
MzJmOTdlYzJhNTdkMDA2NDkwMGVhNjU3YjZmZGYzMmVmZTExZDUxOTRhODEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SD90rPIGV8LvtuGHyiLTUjGOa70
sWnq6jknhfihcySM74P3h94zIB6twVOlMEhlSrx+8o6FthioJku6z80DR5goPSFT
yqL2rSbiVPmViFJflBPKQNw83YtUrWXWgj8tHjOzsA5pUKL466h1+kcl1NqjLcAh
dj14uTLzaXo0ZTw+EER7QYyKqRxJ8/34+u1VD6o/Tq1jHK5fT8lziZH0Z6II+Tdp
DmWcHzLYIcmrOp59eUa4G3UAdypfvcHPwGeh6Pr0CYhubADpLrYG8ktHE9X4BG20
KtzFIw/mdhEiO8sW0IcqDpKZSCdZOGAzFVhgKfA5o9pQpbX91VwYIhu6jQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFAOPQRV0N4JZMicG/ChpJeNvhAiMMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
LzRiOTVlM2I0LTMwNDktNGVhMC1hMzljLTc1MjJjYzBiZWEwZC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaAICgMA0GCSqGSIb3DQEBCwUAA4IBAQAuyXpG3fIncwzsw/X1
pv6MWg/JWKo6UqpudOjWVadMmLbLiFk9I3rmevR3OwY+s4uSnX44wu2+Uwi6FOCV
tKMCD2H0bvCFFR1PwNmF+KW0dA+rVxUPJcVZMzAcWw5Qz90necSgEMIwM5T//y6Q
gHpE5imLlsgM7jvmK0IZjsdpJuPSuifFSnj+9JJl+81a7glocpJkMzGKCOXMdUUG
Il/BL+cQRp8sCOrz/NSMRRnLyA59knC+BDOtfd0AF54xNNxdZjSOfo0wV11nt94V
ee84AYDcMyeV68Lj3PZuQXqcOQckplOmLbMMd3V1LuzejwdkODY71cncx21A9jZL
t3Zb
-----END CERTIFICATE-----