Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e729fd1-bc07-46ee-aab0-170a1cdfa5eb.roa
File:                     4e729fd1-bc07-46ee-aab0-170a1cdfa5eb.roa (raw, json)
Hash identifier:          LgsF19BdJqf/pRoezjlBMR93JOKwZ8rMX0RHC089YW0=
Subject key identifier:   69:25:D5:90:2D:53:5E:7D:CB:BC:26:7B:6D:67:01:0D:EB:21:55:B0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4B8919C5AEC9A647E6F410121CE6F78B45DA4B7D
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e729fd1-bc07-46ee-aab0-170a1cdfa5eb.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:48c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:89:19:c5:ae:c9:a6:47:e6:f4:10:12:1c:e6:f7:8b:45:da:4b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=28ef96cb432e505aeca30f297eb3ca555ea34c9ea1080b8b73c2c57b7bf5dd4e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:df:f4:23:eb:02:c3:44:c8:70:d9:c4:7a:
                    21:f1:34:82:30:c6:d7:06:02:26:51:aa:69:29:61:
                    67:a2:5f:d0:5a:b5:b5:5c:bd:ca:b0:eb:8b:9d:ee:
                    46:bf:e6:3d:92:b2:c7:76:46:70:1c:d9:ac:e1:74:
                    2e:73:2b:28:b5:15:b8:c5:3f:75:84:97:96:ab:51:
                    54:10:6f:92:49:d5:17:d7:2e:6a:52:26:1a:06:12:
                    aa:6c:37:52:57:22:06:f1:bb:c4:f6:c3:7a:52:f3:
                    09:05:17:14:49:6e:5a:ee:a0:4c:5e:7f:c5:c1:ee:
                    fe:16:c8:34:69:c6:68:f5:08:07:bd:1a:14:ce:5f:
                    32:0c:95:26:77:b4:89:9a:47:76:09:76:12:69:5f:
                    3d:28:bd:9c:35:18:10:99:c3:64:e5:e3:36:57:a4:
                    a2:25:09:34:06:6e:92:e3:70:cd:9c:bd:8e:36:db:
                    aa:c1:b3:54:83:56:74:fe:65:bf:55:e3:0c:87:4b:
                    45:35:86:17:77:23:14:4d:52:b2:f5:8f:f2:62:a3:
                    9d:eb:fa:6a:21:c3:37:6c:6e:fc:b8:e1:47:27:71:
                    bb:02:21:f4:42:ee:14:a8:50:90:02:2b:84:29:45:
                    d2:67:a9:b4:7f:10:fc:de:23:86:02:b4:1b:6d:ea:
                    77:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:25:D5:90:2D:53:5E:7D:CB:BC:26:7B:6D:67:01:0D:EB:21:55:B0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e729fd1-bc07-46ee-aab0-170a1cdfa5eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:48c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:01:36:7e:78:97:49:df:44:7e:70:4a:2f:f8:30:67:97:
         20:07:cf:ad:10:44:e4:8a:6a:72:6c:92:d1:63:db:6c:15:d8:
         fd:53:8b:02:e9:9a:a1:2f:a7:b9:15:8c:0f:e2:57:ea:ad:57:
         15:ed:3a:2c:a8:fa:eb:b5:66:76:95:99:8e:d0:51:39:a8:e7:
         84:0f:eb:e0:31:81:49:e6:63:79:d2:1a:5c:87:ca:9f:7d:c1:
         8b:92:69:f7:61:f5:ef:49:ba:61:a0:f0:3e:5b:ad:b0:00:d8:
         3f:63:21:52:b6:51:d1:38:5d:83:11:79:a0:2e:c0:a4:01:70:
         09:c1:16:f1:91:0d:7f:08:0a:fa:83:80:09:57:e2:cc:5d:05:
         a3:07:31:ff:5f:b8:0f:e7:06:13:d7:b3:41:25:ce:b9:5d:4d:
         3f:88:18:c0:45:3e:d8:f1:40:16:ad:b2:12:35:e1:61:8e:d9:
         5f:86:91:47:6f:cd:3e:fe:33:20:6d:df:ba:9f:30:a1:ed:f5:
         9b:6c:f6:45:82:d7:d3:d9:36:8e:5d:61:44:b4:56:a8:16:84:
         77:9f:b4:74:92:43:b9:ee:ea:a9:1a:06:8d:12:7d:85:52:ad:
         2a:f1:e8:0a:ae:a7:21:60:4a:a9:e9:f7:d5:6b:d5:8e:ef:f4:
         3c:58:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----