Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a765aa6-e0dc-4e3a-9c51-bdecadbdb8d2.roa
File:                     8a765aa6-e0dc-4e3a-9c51-bdecadbdb8d2.roa (raw, json)
Hash identifier:          +4Rg7o3wuCslRRic4a2aQPk+5pmv3a0Lefxnlzs+H5g=
Subject key identifier:   34:78:DA:9F:A4:0A:5D:00:EF:75:3F:82:F3:01:C1:BF:33:CD:0A:3F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       16509F390BD629C4D02E114666298FDAED2A63BC
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a765aa6-e0dc-4e3a-9c51-bdecadbdb8d2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:c000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:9f:39:0b:d6:29:c4:d0:2e:11:46:66:29:8f:da:ed:2a:63:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8dee7e849226e94f5ffdb857f7ccda5a8db43fef23254a77fe254f5619107aa2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:99:b3:f3:e0:2a:d9:5a:52:91:a5:5e:6a:
                    5b:80:fc:2e:cf:60:73:23:f0:b3:5f:74:2c:64:d8:
                    f9:93:16:54:da:d2:81:b1:66:1a:ec:03:5b:2e:f2:
                    db:31:26:d6:98:aa:6a:46:e1:f0:38:a1:1c:34:b3:
                    ef:4e:99:c3:d5:19:8e:c5:53:20:d3:55:1a:52:f0:
                    8c:b8:eb:15:5f:97:99:6c:e8:3b:79:19:de:88:26:
                    f6:0b:4d:71:91:d5:e3:aa:bc:0e:ad:68:58:7b:6b:
                    08:25:93:8e:bd:2f:eb:a1:d4:ef:56:75:35:ee:22:
                    fa:5a:6b:e0:f7:2f:3e:6f:98:ae:fc:8b:4c:a9:74:
                    6b:b6:36:c4:4a:24:5e:b3:8e:65:af:43:80:70:83:
                    4f:db:7f:b8:c3:10:b3:ab:e4:cb:dc:b7:15:4b:ab:
                    8c:91:45:1a:c3:95:0e:8d:79:3a:ed:a6:b2:97:e1:
                    5f:0d:6d:f4:f8:9a:62:39:9e:da:57:28:96:51:22:
                    92:89:f6:6e:f1:8a:f4:2d:df:62:17:e4:0b:d0:1a:
                    aa:27:26:16:9d:56:ad:a8:3e:39:8a:60:b1:d7:6b:
                    37:a6:2a:0e:df:c5:d0:d3:b3:7c:fb:48:ef:74:60:
                    f0:7e:2c:f1:f4:d4:d8:f7:91:ec:63:fb:23:90:5b:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:78:DA:9F:A4:0A:5D:00:EF:75:3F:82:F3:01:C1:BF:33:CD:0A:3F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8a765aa6-e0dc-4e3a-9c51-bdecadbdb8d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:5a:54:88:c8:1b:9d:b0:e2:4e:6b:25:bd:85:cc:a0:52:
         54:39:c9:1e:0b:77:44:52:dc:4c:f3:a4:7d:fb:5f:4c:ff:58:
         2f:e7:55:b0:80:22:1e:3d:10:8b:96:2f:db:91:3e:04:10:e1:
         86:e0:0e:d3:6e:b6:d7:e2:8e:4a:24:d2:77:93:7c:af:74:4b:
         c8:a8:26:3b:d9:b8:87:72:d1:5f:12:57:ca:14:ba:1f:36:05:
         10:cd:22:f5:71:87:91:9b:84:58:e5:f1:68:86:54:a3:86:b0:
         f3:5d:4e:ca:ea:0f:1c:9d:be:2b:bb:b2:f0:bd:21:76:3d:cd:
         41:22:c6:6c:4c:25:ae:dc:f3:fe:9a:9e:2d:49:92:cc:db:50:
         9c:57:7c:69:00:fb:b1:b8:b2:d4:c2:3e:a8:d2:c8:05:82:59:
         2b:49:eb:88:47:30:11:68:65:28:25:78:d7:b7:f0:4f:ef:84:
         86:da:a3:ba:e0:fc:64:ea:49:ec:e1:6a:56:0d:b2:d1:71:1a:
         cc:ce:5c:25:7c:79:9d:59:ec:c3:2c:ce:3e:6b:4b:9a:49:ea:
         2f:57:55:bb:fb:01:47:61:97:95:58:10:69:f3:04:e0:3f:ce:
         04:9a:4b:13:0f:4d:0b:75:bc:8f:29:99:df:b8:89:9a:03:02:
         87:b9:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----