Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
File:                     93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa (raw, json)
Hash identifier:          nIqs53bkul0Y/x97QTObJNWSfmfgCXRRsPtVFTRBiG4=
Subject key identifier:   0A:CA:15:82:9D:34:F0:50:EE:7C:7C:7B:FA:17:8A:F6:3B:9D:39:68
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1E2043398C74CBE05443CDD32EAB9100C796F2F8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf7:2800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:20:43:39:8c:74:cb:e0:54:43:cd:d3:2e:ab:91:00:c7:96:f2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=a163b100d251cd5747f12b83a95e5aaacf23551f68d44f6dd91f6a505d2c8747, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:c6:37:e5:f0:08:7b:49:90:b3:67:a0:4f:
                    ba:f8:5a:19:8a:7b:a5:32:a4:e0:00:73:13:11:87:
                    62:e9:16:4e:61:77:7b:29:df:df:72:0c:07:7b:3b:
                    d8:3e:b5:fb:57:06:4d:0e:2a:2a:b7:17:70:81:90:
                    70:1d:b2:c5:3a:42:1d:1d:3f:5e:68:c0:7d:a0:e6:
                    66:90:71:2d:2e:b9:55:b5:26:04:87:ed:aa:85:05:
                    da:3b:16:b4:ab:17:15:c1:34:35:06:29:fb:7b:31:
                    7a:3c:f6:29:35:0e:60:93:b8:29:bb:5c:85:fb:7d:
                    5c:b0:3b:bb:fb:d8:f0:92:1b:ad:f4:e3:d0:b4:b3:
                    a5:5f:e5:0f:dd:99:84:28:53:ff:7a:f2:30:f2:64:
                    ff:e3:fc:8b:37:e1:38:df:1f:34:80:6b:69:6a:39:
                    a2:39:95:45:ee:12:1d:e2:b3:a0:73:58:58:c0:c0:
                    ee:b0:a8:87:e3:9a:d9:bb:45:64:38:57:3c:92:ca:
                    b6:bc:55:70:bb:96:a5:e9:54:f7:0b:49:57:bf:19:
                    83:db:ca:dd:cc:20:91:a6:b5:e5:9a:00:6a:39:ae:
                    a8:be:10:6e:15:ad:cd:d2:a7:3e:5c:ef:c3:00:35:
                    ea:8a:78:9e:46:bb:d0:8f:ac:ec:25:bf:62:29:7c:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CA:15:82:9D:34:F0:50:EE:7C:7C:7B:FA:17:8A:F6:3B:9D:39:68
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/93d0db3c-2ec7-42b8-a93c-b598adfc00c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf7:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:77:69:5d:ce:22:5d:3c:0f:1c:ce:48:c7:42:99:4d:cd:1a:
         a5:a6:1a:ce:63:1f:17:91:e0:1f:e4:dc:e1:8f:14:fc:e7:91:
         32:96:65:90:3e:7b:70:4b:34:0a:da:6e:f7:5b:f2:81:00:e7:
         83:8a:aa:73:47:3c:3f:f0:3d:72:86:af:6f:1e:fd:3a:78:ca:
         2b:9c:9b:09:67:e9:08:2b:e9:31:3a:a8:34:37:32:85:7f:b3:
         ce:a8:df:2b:56:84:ac:63:cd:7b:95:21:3d:f5:38:e6:f6:30:
         71:b7:50:81:1c:37:2d:fd:ca:2e:81:c9:c3:52:0f:6d:3e:7a:
         57:a1:41:17:70:92:b4:d5:02:f7:0a:64:ed:78:94:8e:c5:a5:
         b2:3e:10:82:f8:b2:e9:df:f1:d3:23:cc:24:3d:bf:58:94:e7:
         4b:45:c2:0b:d4:e3:48:94:1e:91:61:b1:02:09:72:0e:c7:21:
         5c:57:3a:f0:0c:ce:ee:a1:73:bb:5c:1f:40:7b:fe:f9:c0:27:
         e1:1d:c7:fc:ab:80:e4:d4:7f:78:d3:39:33:2d:02:38:27:28:
         5d:df:be:3d:f1:f9:7c:b1:97:78:fa:e7:ce:a7:ab:6f:ac:87:
         45:f5:1b:75:8d:4b:63:b9:cb:48:07:04:9b:c7:db:ea:48:0c:
         44:5a:d0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----