Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa
File:                     a0024570-5975-46f5-95db-849fb927818f.roa (raw, json)
Hash identifier:          9CeG4e7IAA9951i0lbDtcEeSlPJaCHJL5LdtvA0Dd6A=
Subject key identifier:   35:98:4D:5C:FF:37:ED:C4:72:A2:EF:B4:EE:DB:94:A0:B2:A4:D2:A8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       4E5C8B83F62FACDCBBA756F36EF788C340492926
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:c040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5c:8b:83:f6:2f:ac:dc:bb:a7:56:f3:6e:f7:88:c3:40:49:29:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=bda9dee6b8a264a5a30d9d65ff1015f730e8a69ec63a2130768773dcc2fb3a9f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:6d:80:fe:77:3c:a4:fe:f8:81:95:02:37:
                    c9:e2:18:a7:2d:f7:3a:d0:6f:a8:65:11:b7:b8:a7:
                    6a:cf:e3:af:a9:1f:4b:a8:f6:e0:cf:ef:09:55:e0:
                    d8:23:10:56:9e:ea:9f:6d:0e:7e:e9:d4:f1:f9:53:
                    38:91:c6:e9:1a:26:e1:ef:c2:9d:3e:0d:70:e8:a7:
                    4b:ad:04:36:60:c3:27:60:d3:0e:96:a9:77:ac:36:
                    e3:38:f1:e5:55:b8:2c:ce:fb:03:48:b8:cb:8c:01:
                    72:c5:21:ad:8b:d4:cb:7b:5b:e4:9b:b3:f8:ba:df:
                    2c:50:8a:f9:57:07:20:54:f0:4e:30:82:7a:be:38:
                    56:ee:e0:23:c8:88:c0:b8:9e:c1:b2:a7:fd:c5:4b:
                    9e:83:29:e5:d9:37:bf:a6:10:33:65:67:26:56:b6:
                    bf:9f:b1:ff:e0:53:25:48:d8:c1:15:d8:22:d3:53:
                    c5:70:8f:64:7b:ba:db:8e:ff:16:c0:82:64:2a:35:
                    85:81:b3:b4:62:92:1d:21:4d:f4:57:c7:c0:98:c6:
                    58:e4:5c:e0:55:56:ff:01:0e:c8:34:f8:f9:26:6c:
                    99:6d:b2:e5:24:7e:7e:f5:fd:d6:70:e6:13:33:48:
                    13:75:e8:e1:68:4e:ca:19:aa:79:a7:26:c5:4c:c2:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:98:4D:5C:FF:37:ED:C4:72:A2:EF:B4:EE:DB:94:A0:B2:A4:D2:A8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a0024570-5975-46f5-95db-849fb927818f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:c040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:55:f6:eb:5a:97:43:39:fd:4d:41:7c:cf:b4:56:48:5d:
         42:3e:92:43:13:c0:1e:bb:66:21:60:9e:8c:c9:9d:25:f0:b8:
         ed:db:49:e8:69:21:a3:3d:dc:00:34:6b:ac:eb:d1:a8:4a:ad:
         80:de:88:10:08:54:6b:e1:23:98:1a:6a:4f:c7:25:0d:7f:ba:
         34:db:d3:c5:53:ae:e0:ea:2c:79:80:42:55:8a:b4:dd:39:fd:
         55:77:83:23:80:dc:3b:f2:da:43:13:c9:c7:9a:68:df:20:cd:
         79:22:37:52:f9:2f:71:cc:25:81:4d:28:63:47:e4:41:89:08:
         60:6e:59:29:10:da:f5:89:60:04:59:ec:aa:a5:4d:6d:a8:6d:
         94:1c:81:e9:40:16:45:02:3f:ee:d8:44:f9:c5:b6:5a:92:fb:
         a2:a2:23:1c:f1:2e:4d:33:2c:49:ec:c9:6c:49:4e:b1:66:54:
         60:6d:71:0a:4c:5a:96:62:f0:70:4d:52:d7:86:7e:a3:17:58:
         03:b7:96:04:d6:d6:52:c3:2d:15:d1:f8:bd:53:c2:a1:d1:da:
         58:d2:91:af:ef:ad:8e:6a:4b:9a:4f:34:f9:8e:44:f6:f0:db:
         db:d9:04:9a:13:b3:61:00:f6:27:f9:b3:74:18:2d:a7:f0:12:
         0b:e1:ff:dc
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUTlyLg/YvrNy7p1bzbveIw0BJKSYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAYmRhOWRlZTZiOGEyNjRhNWEzMGQ5
ZDY1ZmYxMDE1ZjczMGU4YTY5ZWM2M2EyMTMwNzY4NzczZGNjMmZiM2E5ZjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxttgP53PKT++IGVAjfJ4hinLfc6
0G+oZRG3uKdqz+OvqR9LqPbgz+8JVeDYIxBWnuqfbQ5+6dTx+VM4kcbpGibh78Kd
Pg1w6KdLrQQ2YMMnYNMOlql3rDbjOPHlVbgszvsDSLjLjAFyxSGti9TLe1vkm7P4
ut8sUIr5VwcgVPBOMIJ6vjhW7uAjyIjAuJ7Bsqf9xUuegynl2Te/phAzZWcmVra/
n7H/4FMlSNjBFdgi01PFcI9ke7rbjv8WwIJkKjWFgbO0YpIdIU30V8fAmMZY5Fzg
VVb/AQ7INPj5JmyZbbLlJH5+9f3WcOYTM0gTdejhaE7KGap5pybFTMJzHwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFDWYTVz/N+3EcqLvtO7blKCypNKoMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2EwMDI0NTcwLTU5NzUtNDZmNS05NWRiLTg0OWZiOTI3ODE4Zi5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaOMBAMA0GCSqGSIb3DQEBCwUAA4IBAQCmOFX261qXQzn9TUF8
z7RWSF1CPpJDE8Aeu2YhYJ6MyZ0l8Ljt20noaSGjPdwANGus69GoSq2A3ogQCFRr
4SOYGmpPxyUNf7o029PFU67g6ix5gEJVirTdOf1Vd4MjgNw78tpDE8nHmmjfIM15
IjdS+S9xzCWBTShjR+RBiQhgblkpENr1iWAEWeyqpU1tqG2UHIHpQBZFAj/u2ET5
xbZakvuioiMc8S5NMyxJ7MlsSU6xZlRgbXEKTFqWYvBwTVLXhn6jF1gDt5YE1tZS
wy0V0fi9U8Kh0dpY0pGv762OakuaTzT5jkT28Nvb2QSaE7NhAPYn+bN0GC2n8BIL
4f/c
-----END CERTIFICATE-----