Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa
File:                     89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa (raw, json)
Hash identifier:          xbPf2nDcWHT1Ec3jeAGoOUFmSyvRSwTIDkElo4qQ0zc=
Subject key identifier:   3B:96:D3:98:46:51:14:0E:F1:97:2A:5C:F1:DF:A6:9D:E4:8D:9A:E1
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7A22E07B76F76832796ED3502270953A874D32FC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1f:400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:22:e0:7b:76:f7:68:32:79:6e:d3:50:22:70:95:3a:87:4d:32:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=37d7ffbfd69385088f6024f9748f52e5e722a5b028ca3086d4f523ad575bc79c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:8c:28:60:ca:92:eb:6d:49:8b:6c:8e:00:
                    e4:37:44:0d:ba:7a:72:b5:58:8f:01:62:43:4e:7a:
                    8e:fc:0a:d7:a9:a0:4b:b5:67:f1:69:e8:05:13:a3:
                    97:69:ff:9f:cc:2e:ff:94:d4:be:a4:99:cb:b3:3b:
                    2a:b0:51:3f:52:e8:f8:52:67:17:12:fa:d9:b0:ae:
                    4d:cc:3e:13:56:6c:c5:c3:56:02:3c:18:c7:ff:cc:
                    26:44:fe:82:de:6d:cc:39:dc:23:df:4e:9a:c1:de:
                    be:c5:68:34:8c:7b:80:2c:39:7e:eb:c0:c0:1f:84:
                    7f:f1:70:e5:8c:3f:0e:9e:ad:99:ac:f8:58:2a:9a:
                    8e:8c:0c:bd:d0:3c:c6:19:5d:d5:13:19:64:75:93:
                    90:d9:4f:df:29:48:27:93:e9:60:a8:86:8d:f1:54:
                    a5:2d:b3:5b:40:f8:57:9b:02:be:74:4e:64:5e:bf:
                    2d:a4:f9:b0:8b:b1:e0:6d:7c:57:df:20:98:d9:59:
                    c1:06:9f:05:1e:c8:4f:58:25:bc:bb:d5:48:57:25:
                    c2:f3:2b:bd:1b:69:b6:72:2f:53:93:32:f5:41:56:
                    05:8d:58:78:9b:c1:66:1d:b8:b1:60:9d:b2:e2:f1:
                    e9:54:93:f0:c7:28:31:ae:b6:31:d7:5f:a1:dd:84:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:D3:98:46:51:14:0E:F1:97:2A:5C:F1:DF:A6:9D:E4:8D:9A:E1
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/89fc56d6-b0ac-44ad-b01f-93dbcd9213fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1f:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         18:b7:9c:d4:30:dc:9d:56:b3:ff:50:f1:5c:36:77:3b:1e:a4:
         19:64:83:60:5e:6d:93:25:e8:9e:a8:64:a6:78:cf:df:36:9f:
         6f:13:cb:66:b5:65:d6:41:e9:4f:c6:9f:62:e1:5f:c1:0f:46:
         09:8b:60:10:c1:89:b9:ac:93:d6:ed:d6:69:ff:ae:09:fd:9f:
         6a:ae:d7:8e:a6:c9:00:49:35:3b:12:1b:af:3b:85:b0:46:44:
         6c:5a:ca:0a:59:d0:38:a4:1e:65:5d:9f:1f:28:54:d4:d4:40:
         c6:2b:dd:f4:6a:61:d3:60:8a:4b:e9:7f:49:db:a7:01:e6:dd:
         70:67:d2:b0:0b:ed:b0:63:e1:46:0d:3b:84:02:60:84:ff:26:
         f5:54:9a:ba:e8:e2:e2:c1:8c:07:63:b3:e6:50:3a:b1:f9:0e:
         3a:fb:40:04:2e:69:a4:62:70:d3:33:21:85:b6:a2:f1:31:0e:
         a0:e8:f8:b8:33:d9:b1:34:fa:95:bc:7c:f6:cc:00:82:7d:dd:
         1c:7a:fc:95:e2:a9:e8:64:50:f0:6e:38:16:f4:d9:e7:f8:e9:
         68:b0:b8:e4:bc:c0:f6:7f:57:38:2b:ba:52:7d:3e:4d:d0:30:
         91:d5:de:7b:c4:fd:07:2d:35:66:4b:37:eb:4a:75:2b:e4:8e:
         4b:3c:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----