Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa
File:                     60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa (raw, json)
Hash identifier:          aGybSm1Rrfo2/9qLD+Ufe+migf/FiOFttuXQBxyijss=
Subject key identifier:   BD:67:1A:CB:11:95:00:DF:9B:81:11:F9:7B:F1:FF:78:C3:07:E4:35
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       03EA3EBA3BBDC01D9617D8AAECB98EDAD32620C5
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da12:8000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:3e:ba:3b:bd:c0:1d:96:17:d8:aa:ec:b9:8e:da:d3:26:20:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=227b45e0b905c5ef8567dc0ad8ef1b550a4e59859b59d5ec5d0ef503fedd7bb1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:82:b9:b8:b1:5d:23:11:ff:d1:00:2a:bf:9e:
                    a4:48:87:be:dd:0c:d2:81:9f:c5:10:e9:6e:1b:9a:
                    c4:f7:92:f0:70:e1:95:a4:80:3d:14:51:8f:b6:0a:
                    3d:e6:74:df:34:a6:84:c3:ca:d9:8d:a6:dd:8f:c7:
                    58:a8:f7:ba:54:03:97:3e:1a:1b:7c:5b:57:21:3f:
                    9c:52:30:9a:ca:2d:73:6f:24:c9:50:96:12:b8:58:
                    1c:b7:1e:11:15:e5:ab:8d:79:9d:31:c8:70:ae:a7:
                    a5:9e:2b:55:30:69:f6:14:c0:b3:bb:1c:9f:cf:47:
                    7a:25:6c:a9:39:2a:78:02:b6:92:30:7e:73:65:ad:
                    ac:22:3c:98:db:a0:a7:bf:6f:fe:e8:c0:e4:a0:7e:
                    6c:ce:1d:e0:91:8d:76:fe:6c:15:a7:5b:73:da:1f:
                    eb:d5:70:0c:5d:a7:74:b4:1e:e0:fe:d0:35:8f:1a:
                    1b:31:05:e7:4d:5a:ed:04:7e:28:79:79:da:a8:2b:
                    13:a7:fc:3a:7f:a8:36:fb:4e:6d:16:a0:aa:5c:41:
                    53:4d:95:e0:61:a0:94:42:55:9c:fd:1e:c8:63:56:
                    c2:a7:85:a4:32:5b:68:df:f2:77:85:80:6e:ae:f9:
                    36:ef:7c:21:c2:f0:61:94:2b:09:3f:23:45:25:b8:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:67:1A:CB:11:95:00:DF:9B:81:11:F9:7B:F1:FF:78:C3:07:E4:35
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/60ccb5af-c796-4a3f-a0b1-d5091b4a2423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da12:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:c3:5d:f3:97:b1:e5:d7:66:cc:cb:4e:85:ad:79:01:cd:
         81:51:7a:d7:e5:9d:b4:cd:27:bf:0f:05:dd:dc:dc:31:55:c5:
         50:b2:f6:8b:ca:d2:38:79:5c:ea:73:96:e5:d0:78:77:aa:aa:
         af:63:2e:8f:4d:da:e2:88:0e:f9:46:b0:00:86:aa:20:3d:c2:
         8d:ba:1f:5f:a1:7b:14:e2:c6:65:1f:fe:76:bb:f7:35:94:c0:
         59:4d:5b:6b:5d:f2:18:81:39:5e:8c:5c:42:d4:34:19:f7:d2:
         e6:65:b2:95:68:5b:58:ea:fe:e2:e8:84:6d:90:5e:1c:78:9e:
         03:36:70:dd:2d:8e:4f:a1:3b:c3:29:65:4e:18:ab:e9:cf:2e:
         81:f8:73:e8:ea:ff:20:9c:df:07:d7:a5:dd:0b:9a:8a:b9:d3:
         ff:1c:e6:5e:ab:bf:36:aa:93:f2:59:84:d0:45:b8:c2:8c:7f:
         48:c5:60:cc:33:96:49:ef:ad:20:48:b5:c1:8a:1e:d3:96:ea:
         84:95:63:81:3e:a6:83:54:28:15:7b:0c:97:65:39:a8:45:66:
         3f:f6:da:77:96:86:b1:be:40:80:22:f4:60:cd:1e:d3:77:9b:
         14:5a:26:04:20:f6:c4:17:4e:7f:3c:bb:c0:1b:ad:a3:ea:17:
         a4:69:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----