Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa
File:                     8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa (raw, json)
Hash identifier:          ofvlkEt12Y/GW8MdUr5atlic5VgTAnKMrnIC9JvDX0g=
Subject key identifier:   18:56:E6:E0:E5:85:22:91:47:B7:EF:3E:14:9D:10:00:55:66:3A:E0
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0AC0F3541219B6F07787F0677CBF7318875C4D6F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c0:f3:54:12:19:b6:f0:77:87:f0:67:7c:bf:73:18:87:5c:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ba4172533f537a9d06bdac4f1889656010ec7f22cd7d758ce262c93d7a2bdcd3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:bc:94:b9:4d:42:c8:0f:8b:bc:b4:08:a1:
                    22:32:18:46:8d:19:16:65:7a:8a:b9:2b:61:76:9c:
                    19:5e:fc:45:b0:6b:97:af:77:53:3c:8c:c2:20:fe:
                    64:67:8d:2e:c5:e5:b3:25:6e:84:02:16:e2:bb:33:
                    76:99:83:1f:00:20:26:dc:d0:a9:ef:9c:e9:47:4b:
                    c6:a1:db:97:70:97:de:f0:cd:64:4a:d3:8a:8d:0a:
                    29:64:81:05:47:04:76:bc:a7:8c:e0:6c:1e:ae:fa:
                    4a:9d:d6:5c:5b:21:f1:fb:7d:39:ee:52:91:fd:84:
                    25:f2:99:5b:c9:67:ce:42:9e:40:ce:47:24:f2:ec:
                    50:d7:0d:9d:fc:14:b8:37:86:05:ab:bb:32:09:f6:
                    00:6e:64:60:c9:18:e4:99:3f:ce:49:42:56:24:e3:
                    0e:bf:de:dc:80:26:05:79:de:10:17:0e:c7:6b:6a:
                    d5:1e:37:c6:c4:55:7c:e0:93:4b:ce:ac:5a:33:0b:
                    c3:e4:b9:82:8c:62:22:8b:01:66:d2:71:38:32:fd:
                    d0:a9:5d:e6:a3:90:e3:27:51:e9:d8:c4:42:ce:36:
                    fc:74:84:67:9c:7d:d2:00:e7:31:cd:cc:2b:73:3c:
                    f9:53:38:68:2e:4d:80:0e:f5:97:bb:9c:df:82:03:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:E6:E0:E5:85:22:91:47:B7:EF:3E:14:9D:10:00:55:66:3A:E0
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a48b87f-d623-4ae4-9e79-2c8c2237d374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:48:49:f6:fc:bc:c1:b4:14:04:2d:2e:b4:e1:29:0e:b4:1e:
         d7:80:67:75:51:86:43:57:d5:ee:5f:be:85:03:97:b7:b0:c8:
         94:98:05:53:02:71:0e:a0:ae:7d:99:23:e7:3e:77:c7:0e:a5:
         b9:ad:95:1a:36:12:d8:c5:f0:c7:bc:4b:d5:88:91:88:d4:4d:
         5f:72:f8:27:b8:0e:ac:e4:2d:70:86:75:75:3e:db:51:1b:b8:
         1c:b2:e7:64:2b:c6:97:d2:a4:73:37:15:56:a0:1d:d2:6a:97:
         6f:09:23:25:42:d2:fa:b4:6c:16:70:18:3b:8d:ee:9c:35:6b:
         7a:4c:ec:cf:01:ab:af:3d:bd:0a:c5:7e:da:f4:95:2e:93:6b:
         20:07:82:a9:68:a3:40:99:56:d6:8b:c5:39:d2:c0:1a:29:99:
         b6:2d:9f:25:a8:e9:3e:69:7e:4d:72:cb:df:00:de:82:9a:ff:
         fd:20:6c:18:37:30:f1:6d:99:57:d8:8c:e4:e2:d6:9d:ac:b5:
         93:37:45:2d:6e:1d:b0:61:db:6b:81:e9:80:d7:ff:0e:66:38:
         f8:4e:4e:60:d8:ce:9f:97:fc:62:e1:fe:60:6a:cc:2f:01:cd:
         27:57:bc:59:b0:c0:7b:b7:51:ce:74:45:d1:b1:6f:b1:23:b8:
         d4:c0:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----