Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa
File:                     7e11bacb-927f-4615-8522-aca792db506c.roa (raw, json)
Hash identifier:          vhvB+PyESb+TzPu6cSjlNGjS73RoJ2sXGS1XXbTz+js=
Subject key identifier:   8F:1C:F3:03:45:CC:6C:63:E5:3A:F0:53:91:0C:EF:68:BC:FD:B0:B5
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6C297376BD841F2AF33F5B3DB1CC25867F459C88
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:9040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:29:73:76:bd:84:1f:2a:f3:3f:5b:3d:b1:cc:25:86:7f:45:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=c4ba76679c260ab391992492bba937890a729334ca3752b5a896bdb02baed766, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:59:2e:d9:1f:ef:c2:17:92:6e:c1:88:0c:
                    2e:f5:3c:45:c4:fc:ad:38:38:de:55:b9:49:10:65:
                    83:35:70:b7:f6:0f:1b:04:69:4a:b9:13:a7:a6:0e:
                    81:6c:6f:c7:1a:00:86:59:41:06:f4:94:6e:53:e0:
                    e0:0c:eb:3d:9c:45:a6:f4:0d:bb:ac:30:95:31:71:
                    3a:b1:8c:d7:8c:ca:67:d2:a8:56:62:06:5e:20:d8:
                    1a:7e:e7:07:0b:18:f8:d3:e7:d7:71:8d:09:a5:e0:
                    d2:ce:95:6a:34:66:ef:73:26:0f:45:3f:e6:74:7c:
                    22:56:11:de:95:46:e5:63:38:f2:0f:ec:e6:74:3f:
                    72:33:41:d0:d9:d2:26:2c:9b:e0:ee:e0:43:51:2c:
                    41:68:17:b0:66:bc:19:4f:77:00:c0:08:6d:2a:e6:
                    a2:bb:61:6e:9d:ef:5e:5d:0c:e1:47:08:18:24:54:
                    9b:64:2c:b9:c1:81:c2:0c:af:93:ff:40:34:57:7a:
                    4a:96:95:a1:de:80:28:40:dc:0c:72:e0:fb:12:88:
                    31:45:48:5d:d7:77:7b:66:06:b2:68:2b:00:34:56:
                    e3:ef:06:88:d9:8d:74:34:2c:47:3a:b7:b9:4e:fc:
                    5b:ca:83:c4:23:00:8e:e4:e6:23:7e:d5:ee:4e:c5:
                    ba:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1C:F3:03:45:CC:6C:63:E5:3A:F0:53:91:0C:EF:68:BC:FD:B0:B5
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e11bacb-927f-4615-8522-aca792db506c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:f3:3a:38:71:2c:c3:c9:64:e9:f1:eb:d1:b9:d8:de:52:
         3a:57:d7:78:de:a4:4f:8d:fb:bf:d6:89:ba:f2:e3:c6:14:61:
         5d:58:a6:a5:f2:ef:79:57:c3:73:4f:95:48:0f:4e:98:4e:34:
         63:a5:43:8d:ce:b0:03:7d:e8:6d:74:cb:fa:20:ae:7e:11:46:
         89:b2:11:d0:6a:d5:80:20:fb:a0:7f:61:c4:6a:e0:b0:cc:87:
         30:67:ec:1a:3a:ec:fc:aa:64:c9:ae:ef:d7:9c:27:30:ec:e1:
         c3:4c:19:f3:58:3d:d6:18:f6:b7:cc:d3:29:d0:95:e1:4e:f2:
         a4:b7:75:c3:be:a6:f9:f3:f8:bd:47:51:a2:a3:16:a9:82:78:
         8d:96:1a:cd:bc:2c:bb:fc:19:24:6e:6c:08:82:51:27:43:bd:
         77:cf:43:b9:80:9f:cc:dc:52:d5:b7:fe:2b:2e:46:c6:ce:c2:
         a2:f0:e4:a6:37:fa:e7:e2:a1:a4:c5:f0:9a:5c:45:2d:18:d4:
         c7:bf:35:d1:b7:b0:ed:59:aa:43:8a:96:0c:a1:fd:0d:7f:98:
         ef:01:85:5f:6a:ac:7d:e6:61:4f:9e:79:1d:97:22:8c:5b:71:
         a6:b3:23:3d:42:cb:3e:bf:51:40:ab:9f:d2:79:d9:38:d5:f3:
         21:59:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----