Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa
File:                     56aba584-e6fd-42ac-9d3c-f747713e6c50.roa (raw, json)
Hash identifier:          ulAZVUmY/BifwxUgmlgNyH3M/hrf15a3YzjajaZwWEI=
Subject key identifier:   D7:7F:80:BA:9B:49:51:7A:BB:52:C9:93:4E:D8:EC:D8:F5:53:D5:82
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       717123C11681BBD9137F8E4F5CF75FED2F2EC4D8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:c840::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:71:23:c1:16:81:bb:d9:13:7f:8e:4f:5c:f7:5f:ed:2f:2e:c4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=b4f56bd970c611530eb876439d09bc574a69b57f5e5a42c7d33d3aca874b6c0d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:4d:d7:33:3c:4f:1b:96:a1:e4:08:55:19:
                    ed:ba:5c:fd:96:6a:05:d7:66:00:de:38:3f:c6:ee:
                    6b:da:0c:c7:bb:ba:c2:75:61:42:8f:7a:41:ed:62:
                    c7:ba:b7:47:43:c3:70:9c:ff:10:f7:f5:26:bd:2f:
                    b3:9c:fd:3e:13:b6:17:80:61:32:1a:a4:b4:12:14:
                    45:1f:b6:3f:32:0c:00:e0:da:33:93:c5:d9:36:13:
                    66:5e:df:0b:f3:f4:eb:cb:96:9d:ad:19:f5:3b:04:
                    da:6f:29:d3:9b:a4:cd:d1:95:a3:24:04:4b:00:12:
                    99:a5:30:b8:21:35:e3:34:b8:61:fe:f6:a5:ce:e3:
                    e8:b5:76:c6:42:e3:25:b9:9f:e1:77:8b:1a:0d:e8:
                    77:c5:12:21:be:a6:9f:91:a0:6c:db:18:f4:fd:50:
                    1e:eb:1a:c0:84:b5:d9:9f:63:ee:ab:7d:13:c1:26:
                    26:c1:6d:7d:66:3e:ed:17:9c:e5:00:e2:42:9c:dc:
                    12:e2:b2:16:19:60:dc:5f:f3:e1:9d:98:c6:4f:4b:
                    25:8e:4c:9b:cf:1b:fd:9a:d2:65:7f:36:67:bc:fc:
                    5d:d3:06:6c:e7:d5:43:48:7f:e3:d9:f7:89:34:a1:
                    f7:dc:40:d4:25:33:28:62:eb:e4:2e:13:9f:fd:a6:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:80:BA:9B:49:51:7A:BB:52:C9:93:4E:D8:EC:D8:F5:53:D5:82
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/56aba584-e6fd-42ac-9d3c-f747713e6c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:c840::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:40:4c:55:b1:9b:c1:36:67:52:24:0c:c6:3e:31:7c:5a:
         7a:15:c8:78:b0:dd:61:43:8e:c5:6b:b7:f1:10:fb:15:ac:eb:
         ba:61:dd:74:40:00:5a:a3:83:87:09:0a:18:65:4a:9f:00:18:
         3f:86:29:f6:57:93:2a:19:d3:fd:dd:9d:2c:95:4f:88:24:a6:
         28:be:3f:b8:59:dd:03:32:37:21:09:13:3b:8d:c8:a4:96:22:
         a1:a8:26:53:2e:0d:0d:cb:cb:15:84:17:08:4d:77:7c:d3:1f:
         f8:63:86:13:78:8b:9d:da:72:eb:ca:2d:17:82:f2:9a:dd:b7:
         05:df:db:43:83:91:d2:ef:2e:90:81:ea:a7:37:bb:f8:3b:45:
         59:ef:1a:d5:96:d0:4d:09:b9:2d:73:3f:66:d1:9c:bb:a9:25:
         fa:ad:d8:cb:ab:8d:8a:04:84:c2:ad:3c:79:93:14:7e:99:b4:
         35:67:2f:88:29:da:61:ec:ab:8c:19:e2:48:4a:01:fa:fc:63:
         db:05:8d:78:44:d9:5b:64:d7:03:3a:59:8c:02:2d:7e:3f:69:
         75:93:60:a8:12:4a:ad:ce:07:6e:a8:de:43:3f:30:23:6d:5a:
         b7:42:c1:72:c7:a2:fa:b0:2f:39:89:7a:ff:2d:b6:bd:f7:fe:
         0f:21:d9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----