Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa
File:                     7169bc70-b9db-4e83-beac-24cc0c5a1537.roa (raw, json)
Hash identifier:          JYxlcHgof12pSAu9dJFX48B7uT3qhEBrCzxvQS7Yn9M=
Subject key identifier:   57:66:23:E4:8E:29:D9:78:EC:53:33:FA:38:1C:A6:E3:85:B7:EB:35
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3E60DF551006A909F46DA45D04BA4F6C0AF6D43C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da36:8000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:60:df:55:10:06:a9:09:f4:6d:a4:5d:04:ba:4f:6c:0a:f6:d4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9f7c45d017e1aefd609d7de967e49a043fa990fb47359e3d7a6c7110bf68292a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:0c:a5:74:7f:1a:03:e9:b5:eb:e2:d2:70:
                    5f:01:75:72:38:db:f8:a2:b1:b8:d9:50:ed:30:56:
                    c4:58:5f:9b:5e:ca:57:18:19:59:e9:cf:7d:fc:69:
                    b8:60:13:36:16:5b:46:15:f1:94:50:91:e6:55:be:
                    d5:5c:24:f9:25:50:45:89:34:bf:ef:2d:87:66:a5:
                    7f:4d:53:a3:6a:39:72:b9:2a:6f:06:37:99:41:bd:
                    81:3d:c3:25:68:5a:a0:8c:88:65:44:cb:bf:de:d4:
                    67:4b:53:e0:b0:75:f4:9e:2c:0a:11:f0:20:99:f4:
                    b8:3f:b7:49:6f:0a:0f:13:ff:da:43:21:08:8b:25:
                    3b:4d:25:5f:18:66:66:3c:7a:6f:2d:13:c9:73:a0:
                    5c:de:48:79:90:db:2f:80:4f:6c:a7:17:08:2c:6f:
                    07:8d:14:93:b2:f7:05:45:f6:23:4d:8d:de:35:6c:
                    4b:73:fa:37:a2:3f:73:19:a7:61:ae:8e:4d:8e:54:
                    77:5f:7e:db:e2:ee:f7:85:dd:e5:6b:61:47:74:63:
                    b6:3f:cf:7c:6e:37:f6:af:8d:8e:e3:62:fc:65:b9:
                    c5:63:e6:07:d3:44:61:df:96:25:8c:21:7d:73:91:
                    9f:6f:b1:25:7c:60:51:96:bd:8b:c5:f1:58:4a:1b:
                    13:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:66:23:E4:8E:29:D9:78:EC:53:33:FA:38:1C:A6:E3:85:B7:EB:35
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7169bc70-b9db-4e83-beac-24cc0c5a1537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da36:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:de:61:6c:9f:21:1a:02:d8:13:10:20:8a:e9:b9:b9:de:7e:
         01:8d:53:f7:55:89:46:3c:8c:0e:11:02:79:f8:6b:bb:0e:33:
         df:13:c2:6f:93:a6:9d:d2:65:d7:ce:7a:f2:2c:8f:59:d5:4b:
         e6:e0:8d:4e:94:51:11:8a:c2:c7:06:a8:0d:64:1d:9c:f8:ea:
         50:5b:4b:20:1a:ad:9f:e9:b5:89:a1:5e:89:41:e3:cb:24:31:
         07:8f:41:32:7c:4f:c3:a6:c8:1a:d3:3b:24:40:7a:36:e9:7d:
         4a:10:64:3d:45:3e:3f:1d:65:5c:1e:b5:d7:93:f8:d5:db:13:
         d2:b9:fd:ed:f4:a1:26:bc:a9:b4:7e:13:66:4e:78:32:5c:da:
         b1:5c:e6:78:33:93:0f:20:de:f5:bf:25:f1:ee:ee:63:12:bd:
         e0:53:51:8f:33:41:fc:8d:52:c8:6e:af:dd:99:f7:6c:32:51:
         a6:67:9c:f0:6f:94:51:68:44:1e:5d:e6:90:0c:d7:13:ea:3b:
         06:c7:3c:75:0c:64:73:78:06:c1:04:06:86:ca:01:7a:cd:f6:
         c0:bb:25:1e:3e:77:6c:e2:9e:56:94:17:f8:16:e5:e6:31:17:
         e4:dd:84:2a:38:38:e2:bd:b8:62:0a:c4:62:98:21:25:da:e3:
         b3:b0:b6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----