Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa
File:                     9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa (raw, json)
Hash identifier:          Tfsfj0Osd8UWbc5CxolEEF5iTw3uwncvFDHoKc43Z6k=
Subject key identifier:   7C:D8:23:91:46:93:F1:E6:2A:5E:87:71:7B:91:2E:46:50:77:E2:2C
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       42E4CD0E5C635BA023752590C73849E856F41F93
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da10:8000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:cd:0e:5c:63:5b:a0:23:75:25:90:c7:38:49:e8:56:f4:1f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8fd7843ffbbdd5721c4edb42c810a5788ad55f9e0382d01d72fd51b6a316b981, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:37:9c:7d:0d:2b:f2:53:13:c2:03:2b:ff:c7:
                    5e:95:fc:9d:0b:ed:05:27:ee:db:dc:cf:71:36:c5:
                    f6:76:62:69:7f:37:cb:ad:de:f7:bf:67:7e:80:10:
                    ea:ea:a0:c8:eb:73:78:0d:97:12:cf:66:6e:73:df:
                    f9:8e:a0:bc:54:87:f8:8f:ef:37:c5:9d:7f:c2:fb:
                    5d:7c:5f:3b:39:e2:5e:32:83:56:21:46:5c:e2:92:
                    39:41:b8:3e:f9:8d:29:1b:b3:12:40:17:ab:0c:c8:
                    8b:6c:1e:ce:c4:41:95:d2:2c:3e:f5:e7:60:bb:e4:
                    74:55:a2:a9:eb:cb:33:f9:ac:fc:ba:5a:bd:75:a5:
                    02:55:3c:8e:8f:28:56:d3:2e:dd:a5:68:a9:12:b1:
                    ea:3a:31:11:3f:f0:b2:a8:bc:56:16:29:f8:66:32:
                    5f:91:d1:9a:13:8f:d0:e5:b3:b2:b7:03:cb:f2:4d:
                    16:86:61:18:d7:3e:13:97:cf:56:c8:a4:2e:cc:7c:
                    d4:22:95:56:8a:26:97:ae:58:d5:a3:fb:da:59:f3:
                    6a:5a:a5:0b:05:38:d9:f7:75:e6:1a:3b:09:c1:5f:
                    68:a5:36:4f:2a:e2:c5:7c:4a:fe:9b:16:9d:4c:27:
                    e1:e1:90:62:dd:83:53:28:76:46:ea:f5:c4:9c:f1:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D8:23:91:46:93:F1:E6:2A:5E:87:71:7B:91:2E:46:50:77:E2:2C
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9dcf5f8f-9941-4c57-93c6-6df3440d00a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da10:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0b:42:75:17:cc:0f:b0:30:9b:d3:f4:21:bd:3b:08:51:96:9b:
         07:d3:67:ce:b9:2d:f3:58:f8:1c:f7:19:e3:9e:2e:de:74:63:
         03:3c:1f:c2:91:97:44:59:6f:36:6f:36:57:d1:15:63:cc:a3:
         b9:99:5f:d6:80:d2:9c:9f:7d:27:43:eb:82:ee:ed:ef:ab:ab:
         32:9c:b3:94:a1:47:1e:7f:94:f7:3f:a0:59:d6:66:f7:05:d9:
         83:7c:dc:f0:01:17:77:52:8c:10:86:b9:89:9e:6f:8b:72:d1:
         c9:57:53:98:85:6a:34:bf:fa:c9:4a:94:58:a9:ad:11:df:4e:
         be:1f:21:1e:31:22:01:84:44:bb:0a:cc:1f:0d:2c:34:02:15:
         d0:32:72:6b:c7:99:7f:82:75:8b:a6:4f:0f:f8:0e:25:ea:2c:
         a5:87:1f:30:2f:01:e5:60:e1:64:b2:7f:52:06:6e:ee:79:ea:
         dd:33:50:10:79:b6:f1:62:b5:52:f3:f9:af:3a:c5:f2:0e:f3:
         57:4c:ba:7b:69:4b:05:67:df:1c:ab:55:13:50:08:9b:ea:1e:
         da:c3:b4:c7:18:da:b9:de:80:79:10:c5:af:ec:15:09:7f:4d:
         91:39:ed:a2:f4:1f:86:eb:60:22:d2:f9:2d:77:2c:9b:32:62:
         f5:6d:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----