Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86031003-8765-4ab1-842d-ef1af47deb94.roa
File:                     86031003-8765-4ab1-842d-ef1af47deb94.roa (raw, json)
Hash identifier:          z6dlfrnVQxUg5nxggjJv4oolFxUGFJCysob5ydK3av4=
Subject key identifier:   24:C3:5E:7C:0A:B6:21:C7:F4:56:6C:2D:91:0B:E6:E1:08:98:C8:67
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       5D24E1FCCC27F8DEAE247EA815AB10FC3BC234C8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86031003-8765-4ab1-842d-ef1af47deb94.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf4:10c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:24:e1:fc:cc:27:f8:de:ae:24:7e:a8:15:ab:10:fc:3b:c2:34:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=339b95613fd204aeb14e594d77d5216f37d6891338de694958944658ba631f68, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:51:89:46:91:16:19:6e:50:97:fe:9c:1e:
                    14:f4:c8:c8:84:35:b8:bb:d9:fe:a3:4d:63:07:56:
                    ec:2d:9f:d1:68:4f:97:4e:f2:88:be:bc:64:3a:f0:
                    be:fd:10:d1:35:4d:1e:c9:b1:42:99:ef:ef:18:a8:
                    e2:0c:06:c7:2c:7e:34:18:09:d1:0b:fe:8c:e6:cf:
                    57:44:56:e0:bb:dd:c7:a1:2c:96:d1:da:88:51:95:
                    c2:a0:3f:f2:ee:46:16:5a:9b:5e:f4:64:8a:c7:7d:
                    5e:fe:eb:6a:f3:61:87:b0:64:98:88:3a:9d:c2:e6:
                    79:a5:58:82:ee:83:fe:aa:30:ca:ee:21:ee:e1:f1:
                    06:b4:d9:96:d2:b2:4b:43:18:c9:98:5c:9f:0a:4f:
                    cc:37:0b:2a:84:e3:b6:09:0d:51:37:ff:78:79:f7:
                    c4:37:5b:fa:03:ae:6e:d0:32:c7:99:14:06:fa:26:
                    c4:a9:00:15:b0:f9:e1:46:2b:62:0a:cf:d8:6f:59:
                    13:21:0a:06:66:7c:51:33:c9:28:d3:07:64:9f:43:
                    b9:11:00:35:e8:b7:94:53:7c:21:f8:a0:d0:97:5b:
                    ae:7c:a8:a9:09:1e:ef:0e:69:0f:54:21:55:4b:90:
                    da:9d:d2:19:cd:50:99:50:a6:2c:05:5b:1a:6e:d5:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:5E:7C:0A:B6:21:C7:F4:56:6C:2D:91:0B:E6:E1:08:98:C8:67
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/86031003-8765-4ab1-842d-ef1af47deb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf4:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:c7:22:c0:9c:6a:6a:49:aa:01:75:75:62:1c:42:d7:06:db:
         8c:94:af:5d:87:ad:ba:a0:3e:1c:51:90:29:e1:63:bf:f4:8b:
         45:a9:0a:51:78:39:76:21:90:df:89:87:64:6f:c3:af:4b:a2:
         86:03:94:a5:fe:13:68:65:fc:d7:32:93:34:ad:83:e1:bf:88:
         8a:15:f4:1a:23:f1:96:16:23:01:90:5d:95:00:e3:8f:44:ec:
         af:5c:27:49:9b:95:38:6d:ad:55:ad:25:32:bf:77:e0:ee:27:
         53:60:83:e3:9c:5d:6d:81:60:29:71:1c:ab:df:8f:db:dc:e2:
         fd:ad:0c:fd:40:31:30:f4:98:4b:9b:af:de:c0:03:17:5b:96:
         38:9b:60:47:7c:ab:dc:5a:e8:07:30:11:3e:3b:ec:8f:14:90:
         1c:07:ea:bd:02:52:72:c3:78:f7:db:33:87:6f:fd:ae:8f:b4:
         73:d5:bc:af:a3:e8:9d:04:b8:c3:1e:ee:54:91:0f:96:74:78:
         f8:0c:22:2a:e0:93:df:49:a7:d2:58:6a:8a:2f:fb:e2:98:6f:
         b0:c5:a6:1b:68:48:1c:0b:25:a6:bb:1a:9c:ba:06:52:0d:5d:
         be:89:cd:f4:39:a6:2b:ae:f0:04:9c:ae:46:4f:ec:d9:cb:2d:
         4f:66:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----