Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa
File:                     52ed4ede-452e-4252-99d4-ab87dca3e810.roa (raw, json)
Hash identifier:          wOxIOMji4RuoLC1WU6k5WkKmR/NhqyKRQlePJS6RY6k=
Subject key identifier:   FD:0C:7F:63:08:CC:43:33:52:43:5F:66:E0:D6:34:58:4C:00:AC:67
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3F896E1E2BD8867FD894291C87CA7120A91556B9
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafe:a000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:89:6e:1e:2b:d8:86:7f:d8:94:29:1c:87:ca:71:20:a9:15:56:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=2d9601063210c6843387b5b1b85c4e40011195423a937659578971929f8b24fa, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:e1:ef:31:37:d2:27:8c:76:ea:6d:44:f2:
                    db:8f:f2:25:6d:01:3c:34:c2:51:a0:ab:f1:72:ec:
                    ff:6f:92:53:39:37:5e:19:49:22:b8:c8:a5:04:d5:
                    1a:d6:97:db:3b:85:db:45:7c:a6:8a:30:bd:81:a5:
                    2e:10:e8:74:1b:d2:7b:82:ba:d2:00:65:e4:4c:c2:
                    5a:4a:17:a5:7b:0d:8e:86:9a:a1:53:79:73:dc:49:
                    9a:e6:0f:e9:3e:d7:61:88:36:4b:22:01:8f:e0:a3:
                    73:63:7c:0b:96:ec:28:7f:46:e4:ed:bb:a9:58:e9:
                    3f:36:4f:ce:42:59:4d:16:e6:b6:cc:00:ef:92:95:
                    c7:d4:85:bb:16:70:86:7a:df:15:1e:cc:43:a3:79:
                    ce:42:3a:af:d2:15:6f:91:ca:fe:7f:5a:0c:41:7a:
                    c8:32:77:92:8c:86:c6:89:93:08:0a:a2:71:d4:76:
                    34:81:dc:78:d4:de:94:9c:15:af:07:d4:e7:a5:7b:
                    04:56:3d:55:0e:65:e9:9b:ef:79:4e:74:15:a9:13:
                    cf:75:30:1f:75:e6:68:de:c1:a2:ea:f9:ce:f8:e4:
                    a8:72:43:3b:60:94:b0:41:14:4a:80:d5:f5:b8:64:
                    ee:e9:63:dc:de:11:eb:8c:cf:4b:95:57:3c:92:ef:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0C:7F:63:08:CC:43:33:52:43:5F:66:E0:D6:34:58:4C:00:AC:67
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/52ed4ede-452e-4252-99d4-ab87dca3e810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafe:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:f9:24:0b:4d:9a:ae:2e:a5:7b:a7:0a:8f:74:cf:c7:a3:36:
         b6:1b:79:ab:a0:2d:b0:b2:17:3d:48:12:4a:d7:5e:aa:e7:2d:
         9c:e6:72:5c:2e:88:2e:07:25:52:50:64:90:65:5b:63:4e:88:
         0e:04:98:84:ad:4d:0f:ad:50:57:61:86:7f:7d:74:db:ac:9e:
         c8:b6:5a:c6:99:4b:b3:b8:93:60:9a:0a:69:32:7a:98:e7:51:
         0e:7a:b1:bc:08:d7:9f:c5:3a:ae:12:62:db:82:24:d4:b1:e4:
         ad:f8:cd:ea:14:eb:61:0b:e6:f3:ba:dc:61:aa:b6:b5:de:92:
         50:2c:71:d8:90:f3:f5:2c:aa:25:da:93:83:07:0a:a0:03:8e:
         99:e0:02:ae:b8:29:69:1a:93:90:c7:c2:bf:77:43:b9:c6:e3:
         78:d5:1f:2d:6a:6f:53:02:d7:1e:f6:17:96:43:51:ba:ae:03:
         94:86:f6:f4:7b:db:9c:04:70:8c:c9:e2:af:c0:5b:d4:d5:4c:
         63:c5:70:98:69:cb:92:af:9a:98:ca:03:21:2d:85:bd:9c:8a:
         fe:24:87:1c:2d:17:1b:0f:26:d5:98:11:76:a5:83:11:74:fe:
         c8:ae:49:07:50:b9:a9:43:4a:21:3c:23:ff:7c:ce:36:2a:05:
         ef:07:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----