Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa
File:                     4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa (raw, json)
Hash identifier:          +h2GnlJS3ajWWqsBJTqTyrY3GN7z+pw22totpwhNIgk=
Subject key identifier:   F3:7E:D0:E2:35:40:84:4D:72:DF:41:6D:AF:7B:3C:48:09:00:01:BC
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       376001D40162AD721049BE9D14C5964D9EAD2258
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:a0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:60:01:d4:01:62:ad:72:10:49:be:9d:14:c5:96:4d:9e:ad:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=f2683ed11ee72643b111abe754b7d8da7872b60fc69ce7a3a41b0569afddac64, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:f6:60:e7:43:17:85:d0:c7:84:4a:3c:70:
                    22:6c:d8:59:6c:be:01:e5:0c:02:6c:e3:fc:c5:c3:
                    66:a3:f1:9e:ba:a1:7f:b4:8e:73:0f:5d:69:8a:b1:
                    5c:80:07:76:51:17:89:62:5a:d2:32:c8:34:86:09:
                    82:e5:1d:f0:ae:a1:d8:77:c8:32:11:53:39:e9:e0:
                    d5:27:92:66:d7:dc:b0:63:7d:00:5b:3e:48:4e:fa:
                    2f:1f:ae:62:58:b1:eb:30:12:02:83:6b:34:59:04:
                    6d:ba:e9:14:d5:fa:df:5f:63:5a:f0:1f:b6:b6:ca:
                    ea:70:d8:6f:55:5c:60:93:5e:e7:34:2f:0c:11:03:
                    8d:c1:69:24:62:d7:4c:bc:d1:1e:f2:64:7c:52:3a:
                    43:60:bc:1b:17:d5:68:e1:e0:50:f3:ff:51:47:ec:
                    76:f0:a0:20:01:d8:f4:03:cd:b1:d5:8a:f8:94:48:
                    14:97:71:5f:a3:af:d6:24:86:aa:7c:3e:8e:54:da:
                    5d:2c:90:27:9d:ad:01:5f:99:52:5c:50:eb:9f:b5:
                    cc:fe:e4:b7:5b:88:1d:bb:e5:36:0d:a5:9e:27:86:
                    f3:89:17:be:26:df:7b:9e:04:3f:06:2a:f9:3a:18:
                    9a:5d:20:46:c1:9d:af:a5:d6:ec:c5:2f:13:85:4f:
                    1b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:D0:E2:35:40:84:4D:72:DF:41:6D:AF:7B:3C:48:09:00:01:BC
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e37673a-83c3-4d8a-ad7d-b6f0e02e1891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:a0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:76:1d:2e:c3:98:07:fc:52:d1:c1:1d:81:c9:21:7f:21:ec:
         a2:ca:fc:b6:f6:82:d7:25:43:6b:d1:21:58:e0:36:98:64:ee:
         25:48:d7:d4:cb:a8:8c:3f:0c:3e:a1:29:21:67:eb:02:2f:a4:
         bb:cf:29:db:77:77:d5:fd:df:f3:d0:9f:3c:ac:bd:3a:c4:36:
         21:3a:27:a8:57:79:4a:03:86:f8:30:5d:8b:d1:3a:f6:0b:fe:
         da:fd:3a:2d:c1:90:44:4d:9d:6c:95:e5:af:1a:95:70:a5:62:
         a9:30:de:c2:fe:b2:c1:5d:56:fb:74:83:cb:c5:0b:4b:c7:a0:
         08:54:57:60:fd:86:8e:35:71:f5:84:a2:6e:3a:a6:cf:ce:28:
         0b:12:ca:3b:6e:f2:64:bd:07:cf:fb:a7:0a:07:16:1e:ae:06:
         21:ce:d8:7b:78:9e:15:0f:91:08:7f:c1:26:87:08:ea:48:27:
         df:f8:63:f4:79:96:00:c9:3d:17:17:f4:d3:4b:c5:66:f4:2e:
         0c:14:40:87:8d:e2:b8:d2:f6:ad:c5:e3:a8:f1:3f:79:3c:66:
         71:7c:e3:b6:21:dd:f7:e7:f5:57:df:16:37:6b:ae:47:97:12:
         a2:26:0e:f8:ca:08:6d:54:9a:ef:b9:a5:61:50:83:1f:89:58:
         0b:29:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----