Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c10d3b9-c357-4dde-9e35-8b451ebe7bad.roa
File:                     4c10d3b9-c357-4dde-9e35-8b451ebe7bad.roa (raw, json)
Hash identifier:          hKe7ZxRswDGWgG/L24WhKH1HNEUQ1qBNROJDpj9dCdQ=
Subject key identifier:   71:42:93:5E:BB:A3:6D:94:D2:BD:D3:41:B9:51:09:43:46:B3:51:BD
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3EF00CA648E96ED9837A8B91772EB1BBE5606504
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c10d3b9-c357-4dde-9e35-8b451ebe7bad.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:0c:a6:48:e9:6e:d9:83:7a:8b:91:77:2e:b1:bb:e5:60:65:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=4e0c878e74465da8d2bfb2a4d9e685c4aeaed8a3d5de093da0390b06caad8196, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:02:2f:44:28:5d:7a:f1:f6:b4:25:ed:e0:
                    49:12:10:28:9a:cb:08:1e:f6:cc:93:85:45:af:10:
                    e5:79:b6:ad:a3:bc:e3:22:cd:de:cb:0d:15:cc:02:
                    a9:26:7b:06:49:cb:cf:e2:3f:d6:f8:85:da:31:ac:
                    b0:cd:70:f1:03:f1:44:15:08:3e:2f:94:ed:f7:6b:
                    9d:b4:e3:bc:1c:16:06:e5:47:41:9d:04:9a:d7:e2:
                    e2:b9:28:bd:f3:4a:34:64:c8:ed:02:af:7f:5c:fb:
                    a7:48:9e:c6:47:48:c5:62:52:92:2d:ad:97:77:8a:
                    06:01:17:24:5d:29:32:a6:85:26:eb:b0:80:3c:a5:
                    83:39:30:91:c8:97:11:a3:3d:d7:4a:ac:c3:e9:29:
                    80:81:20:68:79:8f:fb:d2:94:58:45:7b:a1:59:7a:
                    0a:04:b4:85:20:08:6b:84:6d:89:3c:38:27:39:0d:
                    25:d3:ce:32:95:91:66:e7:5f:8f:2d:fc:e2:df:32:
                    0c:b7:7d:b0:54:0f:01:70:63:1a:f8:49:db:22:85:
                    89:8d:18:82:96:6f:f6:08:2c:1d:2c:13:48:af:3d:
                    d2:20:9a:3b:42:04:09:e5:23:49:98:9a:0d:fd:c1:
                    c7:97:49:bb:b4:4f:bf:dd:a8:a3:0b:e9:5d:e3:96:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:93:5E:BB:A3:6D:94:D2:BD:D3:41:B9:51:09:43:46:B3:51:BD
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4c10d3b9-c357-4dde-9e35-8b451ebe7bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:2d:a7:3b:6b:d3:28:10:3c:0a:b7:f7:c5:0c:9d:7f:0f:24:
         81:f9:f8:4b:0a:27:df:b1:af:ac:11:3e:5e:df:30:93:5f:da:
         95:9a:02:78:75:30:74:1b:9e:51:a9:3e:c3:f5:08:c2:a2:ba:
         92:b5:f4:18:59:ec:9d:63:9a:aa:bb:80:f6:d4:92:2f:43:53:
         4a:ae:f9:f0:bb:46:e0:67:97:79:8c:2e:12:b9:dd:66:00:11:
         62:25:cd:a7:ad:27:2a:85:62:d5:38:0a:10:2f:34:0c:b8:05:
         a6:d6:0a:44:9d:05:c9:54:99:d0:5d:b8:ae:c4:39:9f:3a:80:
         5c:df:cc:d8:a6:81:e7:f3:2f:92:a6:80:3e:54:fe:90:eb:27:
         da:39:4d:3a:01:55:a1:72:61:90:1e:b3:b1:4c:5e:e5:6d:fe:
         6c:55:d2:58:d1:bb:cf:c9:7b:e2:26:8f:b7:e7:d0:98:0c:b6:
         f2:8c:77:e4:1f:ee:94:c5:0d:f2:de:d8:89:6d:53:4d:f7:89:
         45:00:1a:4b:37:60:be:e5:5a:39:07:bf:6d:f0:61:c0:5b:c6:
         30:ae:ee:be:50:b1:76:89:e1:93:dc:2f:31:95:9b:fe:0d:62:
         1b:a1:80:f5:ab:62:40:40:ca:c4:f6:24:cb:2d:f3:54:d4:e5:
         37:bd:ce:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----