Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa
File:                     5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa (raw, json)
Hash identifier:          zJE6sbNslPbeEh/MQpYUenwQF6hoDF4s6UhXVXgNA+Q=
Subject key identifier:   AE:B6:6B:36:D3:26:87:79:20:C6:FC:3D:A8:D5:97:CC:7C:79:FA:C9
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2E422E4F95052E74AAF4074232811E801EBD408A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:9000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:42:2e:4f:95:05:2e:74:aa:f4:07:42:32:81:1e:80:1e:bd:40:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=6f8a4c277827ba449b6e046ff3f3faca823de30326fa6396d316c34dec1232ec, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:1f:83:87:1d:d0:7c:4c:85:78:1b:67:bd:
                    3e:68:88:be:d6:dd:0f:a6:4e:0f:7c:48:db:d4:b4:
                    f2:c9:03:29:3e:9d:27:5a:4f:2b:af:cd:a2:77:50:
                    d8:31:58:a1:b7:84:64:27:2e:05:6c:c0:b5:63:a0:
                    a4:ff:03:a5:ef:43:76:5d:31:a5:5f:f4:d6:8a:f3:
                    d7:ea:03:3b:b7:c4:a9:93:9f:96:c0:93:3b:a2:ed:
                    19:3d:6f:0e:d8:f5:e8:02:3c:ee:69:22:6b:59:66:
                    0c:f3:9f:b8:c3:df:24:3e:3e:71:d6:06:4a:84:68:
                    62:7d:32:e9:55:f8:4d:37:d4:c8:a0:84:f9:1d:f9:
                    bb:65:ee:fc:10:87:b5:3d:9a:ce:1d:d8:66:e6:64:
                    4d:72:59:91:c0:c5:90:f9:9d:76:18:06:17:f2:e5:
                    ba:76:91:2d:07:29:8b:e1:a1:ac:d7:ce:12:83:dc:
                    0e:94:d8:23:43:07:0b:18:9e:0b:2b:a0:b6:5c:59:
                    bf:b6:8a:0c:ee:24:f7:58:18:49:59:49:d3:87:a6:
                    1a:b9:38:30:5e:de:71:cf:cc:94:65:25:28:8d:81:
                    fb:cd:99:bc:39:d4:40:7e:77:a7:5b:dd:6f:d3:29:
                    c1:81:db:cb:46:8f:a4:61:43:40:9a:67:2b:a0:e7:
                    77:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:6B:36:D3:26:87:79:20:C6:FC:3D:A8:D5:97:CC:7C:79:FA:C9
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5b36d747-c3be-40bb-8ae0-a344a4ee6f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:e0:5c:53:97:fe:9e:04:f5:34:8e:2f:17:e9:3a:cd:95:3f:
         10:5b:80:70:a9:da:65:d0:59:2d:83:61:86:d9:7d:b7:68:04:
         47:7d:68:b7:b3:6f:21:8d:3f:b1:a4:63:c1:24:c6:c7:e0:39:
         6e:46:91:56:cd:ab:87:77:f7:59:56:04:8b:71:87:ce:f9:4f:
         41:e2:d0:0d:b3:f0:94:ae:ce:17:4b:2b:f0:7d:43:a4:96:25:
         43:b8:89:65:ca:af:42:a6:9e:4c:a5:3b:27:d6:58:5a:c7:22:
         56:34:7e:9f:67:8c:67:10:9a:9b:08:b5:50:6f:ed:87:85:c1:
         02:2c:3e:19:77:0b:1e:42:16:4d:d1:f5:c0:a0:2f:4f:c1:d8:
         fa:a3:ca:d0:3a:19:be:b4:66:b5:77:f6:6c:ee:2b:18:42:75:
         6c:ff:a3:34:08:1e:88:ed:ff:8f:55:1e:8a:7a:14:5b:49:95:
         cf:08:46:46:4a:45:a1:76:ce:6d:3d:cd:41:8a:d6:28:f8:d6:
         f3:a6:7a:dc:58:c7:07:ce:01:28:94:dc:dd:ff:b3:58:70:49:
         26:4a:63:9d:a1:08:dc:99:1c:4e:ef:98:c5:0c:cd:18:ca:1b:
         05:6c:51:4c:e5:c4:bf:8d:2f:01:49:ad:3a:fb:cb:c9:a1:a5:
         08:49:4d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----