Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa
File:                     6a37e2e0-7837-401c-a03e-a8f996e737fe.roa (raw, json)
Hash identifier:          s/yjtx8TpigIBmcBeteI9WElcnfTl2SHZbTqt1JYpRw=
Subject key identifier:   7C:3D:1C:4B:10:5B:84:58:B9:7A:31:DD:E6:EB:00:35:20:D0:19:61
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       63F8F496B36818D859D673F4AA4B27A2A2B7AB45
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:c0c0::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f8:f4:96:b3:68:18:d8:59:d6:73:f4:aa:4b:27:a2:a2:b7:ab:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=cd9d0d1aff59d49f4a98ec058d336e5e3898921bf8dbfea06415f72690314777, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:21:fe:5a:d5:54:1d:49:16:8b:18:6d:b7:
                    50:b9:06:30:d7:52:88:ba:67:cf:54:b0:c4:c3:95:
                    7f:e3:ef:0f:2a:f9:a8:d2:d4:7c:2a:bc:41:4d:91:
                    d5:29:26:14:59:62:30:3a:ff:96:00:6a:41:9a:7c:
                    4e:e1:12:d8:f1:7d:8e:3f:4c:d9:27:a1:65:7f:61:
                    e1:1f:2f:2d:b4:03:9f:dd:a1:9c:ab:f2:3b:47:fd:
                    a4:77:34:27:8a:85:bc:d6:30:59:27:24:5f:b0:77:
                    c3:52:b8:5b:7e:c5:91:5e:3b:b0:69:a5:8a:3e:4d:
                    72:05:65:34:57:c1:4c:10:4a:ce:ac:84:01:07:df:
                    df:96:66:9e:10:bb:f6:3c:1b:ec:a6:ef:af:c8:b3:
                    a7:a6:34:55:27:62:d2:e7:8f:8d:3f:76:07:54:ec:
                    1e:10:54:86:e2:2d:fb:f9:85:50:e6:1b:cd:47:75:
                    b8:3d:de:7f:05:2a:e9:fc:5c:9e:ed:8a:14:6e:c0:
                    08:d4:34:79:db:3c:ff:aa:63:71:fd:a9:6d:96:f0:
                    87:59:19:ee:10:77:89:7b:fe:9a:1a:4b:fe:23:be:
                    9c:7c:67:8b:77:ad:4f:56:58:cd:8d:86:cc:1d:47:
                    1c:c9:e9:e6:56:de:7d:b7:1d:f1:e5:7e:a6:51:ab:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3D:1C:4B:10:5B:84:58:B9:7A:31:DD:E6:EB:00:35:20:D0:19:61
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/6a37e2e0-7837-401c-a03e-a8f996e737fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:c0c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         bd:bf:46:cd:28:68:b9:3f:df:d7:43:14:81:dd:d7:fb:32:bd:
         7e:17:3f:f1:a2:9f:30:4f:23:6a:9a:4b:f9:c3:67:43:9b:f6:
         e4:57:d7:bc:34:f0:d2:d5:bc:d6:b0:52:fb:39:22:c6:e5:c9:
         9d:20:10:cf:7b:c9:4e:15:69:21:ea:d9:a3:8a:8c:71:81:6c:
         c9:75:16:99:87:82:5a:93:7c:e1:40:7e:83:49:3e:47:d2:bb:
         eb:22:3b:5e:10:db:65:07:c0:6d:65:8c:a5:b8:4c:3e:8a:5c:
         ed:65:56:32:8f:ea:96:b6:06:59:4d:30:1d:dd:6f:cc:15:25:
         45:f6:1e:70:64:f3:ee:d5:a1:fb:27:3d:74:00:09:2f:8c:4a:
         b3:3b:56:aa:e9:07:7b:f0:d7:bb:92:05:7c:29:d6:9b:be:d4:
         21:39:ab:6a:5d:99:8b:53:20:6a:01:2e:19:27:3a:e6:59:63:
         d9:7e:bd:1f:ee:cf:57:8a:72:00:dc:ac:ff:05:80:b3:9b:c9:
         ca:9c:7e:2d:0f:f4:ee:d4:f9:cc:96:21:3e:14:29:3b:f8:53:
         41:d0:08:cf:4b:69:8d:42:c4:ef:c4:50:b8:2a:ef:34:25:6f:
         b3:db:76:5f:41:35:f0:d1:bb:b2:f8:0e:78:a6:26:e0:01:3d:
         48:a8:c8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----