Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87ba4a57-b2b9-43cc-9a6f-a0d705c2a0d4.roa
File:                     87ba4a57-b2b9-43cc-9a6f-a0d705c2a0d4.roa (raw, json)
Hash identifier:          xI7n3hZmpyvJhUePS7Fo6aHpsH0GtOtQw5F6LcpZgws=
Subject key identifier:   1F:8C:30:24:11:56:9B:9D:AC:C0:C1:1E:33:FD:8F:AB:62:85:77:4B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       24BC1D81772540E1CD0F18981A94FD4CBD6F1C24
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87ba4a57-b2b9-43cc-9a6f-a0d705c2a0d4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da70:6000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bc:1d:81:77:25:40:e1:cd:0f:18:98:1a:94:fd:4c:bd:6f:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a49980367d412d49e82c8ea44d035b91162cb1314061aaf4603e6c2da4d47340, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:37:5d:ba:8f:7e:50:07:30:c9:29:ba:95:
                    37:9b:50:06:4b:f1:52:b5:ef:42:22:35:ac:29:fe:
                    e7:4b:68:ca:4b:9c:b4:0d:26:e7:b8:2a:71:33:87:
                    61:3f:54:a9:c7:37:5f:b9:c4:d5:d5:e9:54:d1:9d:
                    65:62:96:9c:87:2c:79:4c:90:c3:c1:4c:b8:e2:ae:
                    ae:8c:ae:8b:80:4d:f7:3d:4d:3e:26:8a:db:cf:8c:
                    e0:0f:94:58:bb:11:ac:8e:6a:79:a6:a9:99:2b:cf:
                    32:b7:01:a2:5c:e6:f1:1b:9b:88:d4:af:99:d6:15:
                    a5:68:04:fb:98:2b:1d:6b:c0:85:36:e0:d1:e0:0f:
                    3d:01:a3:5f:dd:54:e1:7a:09:22:b3:17:c4:48:9c:
                    d8:a2:5b:4e:41:8f:4a:54:e4:0e:12:d2:6e:ac:71:
                    f5:bd:16:b2:74:26:cc:92:0d:1c:f3:af:fe:28:58:
                    d2:28:ac:07:60:7e:a7:af:1e:60:24:b8:ca:b2:8e:
                    ec:e1:fd:46:16:b4:07:cd:3a:72:6c:b3:b7:9c:75:
                    49:23:b5:78:c3:89:bf:e1:2d:53:ee:1d:fb:05:c8:
                    dd:dd:1e:02:1f:d4:2e:72:04:f6:b0:2c:1b:3b:cf:
                    f0:6f:fb:c8:23:87:b3:5c:d0:e5:02:fc:7a:26:51:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8C:30:24:11:56:9B:9D:AC:C0:C1:1E:33:FD:8F:AB:62:85:77:4B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/87ba4a57-b2b9-43cc-9a6f-a0d705c2a0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da70:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:f8:ad:26:c0:6c:29:f7:30:3d:df:08:16:2f:8f:e5:a3:
         7d:d8:e0:f4:45:45:b8:bc:20:38:c9:8a:13:28:e4:fe:00:5d:
         ff:d8:e8:a8:10:02:b2:d0:23:8b:21:9c:95:45:ed:13:f5:5f:
         f0:aa:68:63:f5:2a:da:93:59:44:d7:aa:7c:ea:8b:f5:ef:6c:
         f3:ff:79:7a:fc:7a:9e:1c:14:7f:41:fc:e1:fd:1e:d2:03:fe:
         28:d0:5e:48:da:75:13:4a:d8:c4:aa:14:51:93:bf:1c:bd:7c:
         75:b6:57:7d:52:89:18:af:f2:10:58:6c:b4:83:57:ac:2a:5c:
         4a:18:40:5e:e2:61:8f:f5:c5:72:b1:ba:56:a8:76:f3:e2:cc:
         1b:b1:a1:aa:13:d5:98:45:d0:95:c5:da:20:ce:c3:8e:00:33:
         c7:d7:90:de:45:8c:4f:6f:fa:bd:92:23:76:b5:ee:3d:72:e3:
         d0:44:dd:b2:ee:9c:c3:00:43:7d:4d:9f:d8:04:3a:8e:79:a8:
         9c:e2:06:8c:9d:ad:ac:c5:64:e0:21:a4:90:99:ea:3c:b0:dc:
         d1:42:8b:b9:ed:dd:2b:4c:aa:43:ab:16:80:54:4f:7e:b8:7b:
         83:16:8b:a5:2d:d9:a3:02:aa:91:53:d8:4d:a3:01:0d:3e:e4:
         ac:1a:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----