Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa
File:                     7e6aad24-fc90-4e21-97ec-c3ba61440554.roa (raw, json)
Hash identifier:          5HHrgAGI1YFzDqZJhfcKsQ5OmE5//R4HIyPND9i/UCk=
Subject key identifier:   C2:14:52:BB:1A:AA:8B:48:E5:C6:DC:76:3B:41:30:51:A6:62:63:EF
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       20906669F37213003171CA9572AA341465F2C178
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafe:2800::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:90:66:69:f3:72:13:00:31:71:ca:95:72:aa:34:14:65:f2:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=ca09b054275d9ecd45dd519949486605fc6197f85ddd93ea7d87ac5cabaf1112, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:d3:2a:16:40:c4:d4:3d:40:49:0d:97:d1:
                    81:3e:b4:c5:f1:e6:b9:1e:99:ad:4e:6e:a4:b8:34:
                    a6:db:57:c3:5d:b9:59:b1:b8:9a:95:b1:14:0a:82:
                    c4:9e:a8:e2:6b:d1:2f:69:bf:01:24:d6:7d:45:95:
                    a2:b9:8e:47:1d:84:ce:38:36:23:60:82:10:86:13:
                    43:da:b2:7e:b7:46:54:5f:02:8a:e8:b4:67:61:b1:
                    bc:b0:86:00:d8:23:48:07:1c:ba:9f:7b:58:95:17:
                    5d:0d:61:ec:da:e3:c6:68:cf:67:b0:57:ae:8a:11:
                    8f:56:9a:47:d2:b2:b8:61:31:87:72:e9:f4:f9:24:
                    50:74:76:23:ca:76:b5:90:c9:c9:ed:ce:44:80:e1:
                    d1:84:6f:ae:0c:cd:44:54:90:52:02:60:d2:73:5d:
                    51:da:e8:35:06:24:e0:a8:45:14:e2:d0:ac:1c:b1:
                    a0:40:f1:d2:c6:5f:ee:c9:35:56:d2:df:2c:5b:01:
                    78:6c:df:68:de:dc:d0:77:34:11:0a:18:13:a2:be:
                    07:e0:13:00:7b:ec:e0:14:d1:c1:93:40:fa:f9:de:
                    2a:50:8f:1c:06:b1:70:4e:61:3f:33:75:5b:13:5e:
                    9a:2d:22:c9:47:e3:12:23:d4:3b:24:84:55:e2:a7:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:14:52:BB:1A:AA:8B:48:E5:C6:DC:76:3B:41:30:51:A6:62:63:EF
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7e6aad24-fc90-4e21-97ec-c3ba61440554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafe:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:68:b4:d6:12:a4:d0:bf:0f:bb:bb:ea:e3:0a:f0:05:43:36:
         53:b2:5b:b8:64:39:3d:bf:15:bf:75:ef:19:5d:06:aa:4e:fc:
         e2:65:bb:30:23:ec:be:93:58:90:c1:b2:eb:33:eb:f7:3b:28:
         48:c0:c5:ad:b4:04:fe:16:40:8a:db:88:8d:41:f0:cf:47:04:
         12:f9:b3:8c:7c:a7:10:2b:04:33:09:e4:0d:d9:f3:f1:2a:63:
         6b:96:94:9e:85:be:f6:6b:99:6a:29:78:b6:19:70:7c:6c:25:
         82:96:34:7a:e7:45:1f:79:f5:62:98:98:70:3c:c7:d8:e7:f3:
         45:0a:0a:8e:31:54:22:28:f4:7a:97:cd:73:39:7c:c8:f5:ff:
         8f:4d:db:2a:4c:b9:f0:b2:18:48:7b:f3:e7:65:f7:b3:fc:5a:
         47:43:e1:26:94:86:1b:e5:60:e0:2e:32:81:4f:57:41:0a:c8:
         c6:99:2d:38:8f:d9:a0:5d:00:00:d0:8d:e8:4b:5c:e1:dd:41:
         d0:62:10:83:af:95:03:83:1b:f2:44:f4:b9:d0:d8:c7:9a:1c:
         f7:12:53:69:d5:c8:a9:7a:31:b2:d3:9f:31:38:f0:37:7c:0c:
         9e:b6:ea:c7:3b:3c:87:5f:10:4e:30:59:dc:c8:02:74:5c:87:
         b0:f4:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----