Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa
File:                     511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa (raw, json)
Hash identifier:          RqtOkUx82G/Oua3KCMOxMfAKGaxphmVQfgwWUgyyW+M=
Subject key identifier:   E3:E3:10:46:ED:AF:72:4C:72:57:08:E6:75:90:1A:20:C3:E5:25:51
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2CC07C6DE4993F5DB788D6DF26AC450D77E4C909
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa
Signing time:             Sat 25 Jan 2025 00:00:00 +0000
ROA not before:           Sat 25 Jan 2025 00:00:00 +0000
ROA not after:            Sat 01 Mar 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab8:f000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c0:7c:6d:e4:99:3f:5d:b7:88:d6:df:26:ac:45:0d:77:e4:c9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 25 00:00:00 2025 GMT
            Not After : Mar  1 23:59:59 2025 GMT
        Subject: serialNumber=e1ba63f754a1eb03dab300f6ba9400cc68163c03fb338adbf2b376ea403a8fbc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:bf:8b:b4:f5:6c:9a:ab:8c:ba:71:19:3e:
                    cd:b0:ce:9d:76:8f:04:7a:5e:46:c1:6e:4b:8e:ee:
                    82:8c:40:5f:25:4e:e7:af:c4:ad:9f:b8:f9:ee:85:
                    5a:2b:e3:0c:3c:51:80:52:de:12:17:c4:a0:93:65:
                    ad:e4:48:aa:f4:81:08:d3:07:61:fe:76:e9:b7:d9:
                    86:c8:5f:22:f7:91:7c:fc:c1:cd:13:23:a8:11:9b:
                    24:89:18:1c:15:f4:a1:d5:02:b6:ac:34:f8:02:d2:
                    f1:0f:e9:3e:e8:70:65:cb:c8:d4:9e:b4:53:36:37:
                    af:cc:38:fd:79:34:98:fc:d7:d6:c4:7e:81:57:1a:
                    51:1b:a7:84:42:8d:3c:56:4d:4b:17:f9:a5:30:5b:
                    63:da:94:77:0e:3e:7a:f9:2b:7a:57:82:1d:b6:52:
                    4f:78:ad:f2:55:13:f3:ee:dc:54:eb:e5:5f:30:cb:
                    9b:3b:ad:91:d9:a6:5e:91:23:f4:03:5f:aa:0b:f1:
                    00:c4:b9:52:2e:87:0a:81:ac:5d:8e:1e:cc:e5:a8:
                    ea:69:2c:05:4f:54:e8:9f:a8:b8:2a:81:51:4a:55:
                    f1:e2:12:42:90:55:ac:78:3c:ce:a3:98:6c:c8:4f:
                    b0:30:b5:74:bd:f0:a1:f2:2a:c9:a9:0a:67:81:a5:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E3:10:46:ED:AF:72:4C:72:57:08:E6:75:90:1A:20:C3:E5:25:51
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/511816f9-23c3-41fb-9d50-2a2f4d666c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab8:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:a5:ee:b4:ad:14:5d:bb:2a:d5:65:d7:25:41:1a:a3:83:
         a8:ce:3f:67:75:fa:d7:a0:23:99:76:e5:03:d1:a1:0f:76:85:
         36:7e:d6:2a:aa:31:f8:54:e0:49:c6:2f:f5:34:ad:db:03:93:
         79:4d:6d:3a:46:d7:26:64:ad:99:22:54:17:6d:9b:93:d9:7b:
         5e:7a:d6:ef:ed:6c:f0:fb:b7:fe:ca:1f:a1:9b:84:6e:be:3f:
         30:88:d7:b6:4a:b0:ea:f9:a8:9b:de:9c:aa:ce:c3:c3:ba:9d:
         49:96:8c:21:7c:c0:75:c6:0f:b0:ba:6e:8e:2f:e9:50:70:79:
         0a:a2:e8:7e:54:da:86:1e:2c:ef:3c:af:3b:d3:99:9a:45:bd:
         41:b2:55:b7:54:84:34:fe:bd:0b:28:17:1a:53:c8:3d:25:20:
         7d:93:96:f4:94:cb:11:5d:fa:e4:15:7d:3e:99:af:07:2d:27:
         d5:94:4a:c9:8a:ce:79:0f:ea:9f:40:a3:86:cd:ff:51:2b:9a:
         0f:4c:bf:8a:ae:d8:f4:24:bb:91:c3:4c:9d:fd:ba:6e:55:df:
         79:3d:fc:f9:2a:e7:72:5a:d9:3f:18:5b:0d:72:25:0c:d6:cf:
         9b:24:ae:2f:f8:61:4d:d5:6e:ef:f1:e2:eb:a3:97:71:a9:28:
         f0:4e:2f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----