Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa
File:                     68f22ed7-c8a5-4cae-956a-e93f94070791.roa (raw, json)
Hash identifier:          bnBwBNwLs/cmi1gY9KjcVgIXM91kKQ1Fvtfw6Vdvges=
Subject key identifier:   66:B9:AD:79:21:32:F4:85:AE:1B:C6:11:E7:D5:8D:B0:7A:3A:87:B9
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0C3A9E54A656CB2F6B50C3F1BD3D406855878A33
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf2:e080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:9e:54:a6:56:cb:2f:6b:50:c3:f1:bd:3d:40:68:55:87:8a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1802918656ee9f7579727d4685ecde5c7e86956cbddfa910bf0d26422f722c74, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:00:27:4f:19:89:69:47:07:16:1f:54:58:52:
                    91:31:30:0c:ab:50:21:39:39:3d:d2:d4:a8:83:62:
                    3a:b6:0c:6d:5e:ed:b2:23:7b:2c:95:31:6c:7a:56:
                    b9:a3:50:d1:88:44:51:74:19:9a:47:01:c9:12:8b:
                    a1:36:bb:b3:2d:c3:1f:12:1e:61:ff:4f:e9:66:75:
                    0b:9b:18:70:cf:86:22:f4:91:a7:54:82:22:88:58:
                    db:d7:de:be:3e:0a:3d:d8:0f:51:c7:32:5f:aa:b8:
                    ef:ba:fd:27:31:6f:37:d2:95:1b:7d:8a:e3:20:65:
                    77:51:df:26:f2:70:28:cb:81:3d:d0:0d:e9:ad:ca:
                    2c:48:f1:c6:69:5a:11:72:5e:55:c9:61:16:18:6a:
                    07:82:2c:ea:1e:f1:51:aa:3b:ef:6a:c0:c2:25:6d:
                    2b:76:c1:2e:77:83:79:3f:99:ab:08:54:9e:d6:0b:
                    54:b7:32:59:06:51:7c:25:cc:7e:ca:b2:81:79:55:
                    a0:5f:26:b6:2a:9f:da:dd:2d:33:4d:cf:a5:79:81:
                    39:c4:e3:ff:b1:39:e4:b2:db:7d:d8:ca:dc:e8:e7:
                    24:d9:c7:a2:20:c8:06:42:af:06:8e:c8:1a:4f:3b:
                    6b:bd:4d:35:22:b3:fc:6c:21:13:72:23:ea:b1:33:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B9:AD:79:21:32:F4:85:AE:1B:C6:11:E7:D5:8D:B0:7A:3A:87:B9
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/68f22ed7-c8a5-4cae-956a-e93f94070791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf2:e080::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:d9:a8:2d:31:06:14:d1:25:20:57:05:92:42:c9:33:ce:
         7b:fa:6c:b3:48:cf:a3:4d:d2:6d:4b:c3:be:a8:53:c4:6f:03:
         80:8d:bc:f7:9c:6c:fe:3a:fc:27:22:f2:7a:fb:27:08:e3:fb:
         eb:b6:7d:38:f2:fd:35:2f:e0:b6:5b:90:9f:85:37:f8:e0:06:
         da:a8:1e:e5:5d:5e:bd:de:c5:b3:6a:56:ea:d7:14:4c:e6:50:
         73:87:9d:47:7c:13:56:31:d7:09:02:9b:a2:ad:f3:01:55:9e:
         af:fc:95:4c:68:4c:56:0b:0b:aa:89:14:73:4c:48:29:04:3f:
         a2:cc:37:bf:54:18:a5:07:52:99:af:16:71:4e:0d:7f:9b:cf:
         59:c6:39:f6:ea:af:47:bd:72:1d:e5:d4:c9:29:1a:8c:86:bc:
         b4:c8:1b:f8:f3:f3:6f:2e:f3:da:70:08:b6:9b:d9:ad:90:ea:
         b3:be:3a:22:57:2e:4b:d7:bb:e6:3a:cb:d2:47:2c:bf:0b:04:
         eb:78:8f:60:e1:47:0e:d3:bc:b2:19:89:f6:43:df:6d:2d:73:
         f3:2b:47:56:18:9c:0d:05:d2:30:2f:cf:93:e3:dc:02:6a:8a:
         76:51:41:9a:f1:6e:9d:79:8e:46:5c:ee:5a:b0:2b:8d:0e:66:
         8c:55:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----