Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa
File:                     a2dfef2f-8338-40af-9ecb-7ab01162740f.roa (raw, json)
Hash identifier:          WeBYbi4MZzQ6bpANyrBAQhezGr2ZuCWGsEkC3OR7zGk=
Subject key identifier:   B9:D4:26:9A:78:9B:CD:CC:DA:C7:AE:1F:2A:F1:24:B9:95:0C:F8:37
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       32423B6A6A7542EB3EA264337681BAC2CF6AB62E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:e000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:42:3b:6a:6a:75:42:eb:3e:a2:64:33:76:81:ba:c2:cf:6a:b6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=919ed845644c09a447bdfe841d460ba48eca6712569156b103990baf12d8cf55, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:71:93:a7:41:1f:9c:d3:ea:37:3c:e9:8c:fd:
                    e6:3c:a8:54:c2:0f:85:9e:21:76:ed:33:92:00:e3:
                    d5:7b:6d:09:10:83:46:26:5f:4e:fe:88:59:38:62:
                    4e:13:e7:0f:43:46:c3:9c:c5:0b:68:62:e6:c0:bf:
                    37:62:b3:fe:0a:ef:67:f2:db:bb:25:c7:3e:89:06:
                    83:35:55:75:ab:95:f9:6f:e0:13:99:15:dd:b4:51:
                    8d:7a:1e:a2:1e:3b:05:d6:3c:bb:be:24:66:d6:68:
                    b3:45:d8:5f:c1:99:12:66:7b:1a:bb:c6:ff:dc:9e:
                    73:57:de:9e:68:d7:2b:0c:f7:e3:5f:e6:63:f0:d4:
                    a5:d9:d9:b0:b7:69:ba:a0:ae:d3:00:6c:f4:c7:41:
                    f4:2c:4b:7d:a3:20:45:64:0a:4d:90:78:59:48:6d:
                    80:6c:c2:70:b7:af:e8:16:c9:72:b4:13:31:d0:99:
                    5a:d9:b5:03:b7:ef:2e:48:bd:90:ff:c3:a3:7a:9f:
                    20:83:48:37:49:6e:02:79:eb:7f:1b:2a:43:af:5d:
                    d0:4f:85:fd:6f:5e:75:0c:d7:47:19:19:cc:fa:bb:
                    e3:55:5f:d3:de:bc:d1:80:6a:f6:60:69:67:8a:34:
                    33:d1:70:e1:a0:88:f1:9b:55:6e:22:31:45:c1:c8:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:26:9A:78:9B:CD:CC:DA:C7:AE:1F:2A:F1:24:B9:95:0C:F8:37
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a2dfef2f-8338-40af-9ecb-7ab01162740f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:1b:ff:36:92:de:9a:e0:a1:e1:f7:f1:ed:d0:9d:52:4a:c5:
         6e:0f:af:3f:8d:9f:e0:15:0f:45:1e:08:13:4e:ea:fd:bc:60:
         97:fc:4d:eb:e7:8f:42:a7:9e:fa:53:09:b0:a8:8b:4b:f1:1b:
         f0:7f:b9:59:ac:9a:3f:c6:56:a2:b6:58:25:d8:59:1d:a8:73:
         38:cf:cf:ba:be:43:bf:15:b4:0e:71:4a:84:68:89:6c:2b:e2:
         d2:39:f2:af:7a:e5:91:13:a1:ae:ba:f7:aa:a5:02:f8:e6:85:
         fe:94:44:aa:37:30:4a:c7:02:e0:53:b7:f5:f5:60:93:6e:59:
         31:01:7d:02:77:b7:6e:ce:ea:f9:b3:44:50:b8:9a:c4:af:c0:
         d8:fb:c5:ab:fa:8f:d1:f0:64:61:c1:c9:61:58:17:f8:8f:26:
         16:f7:2e:1e:a6:4f:3b:ac:fb:e4:ee:69:c7:f2:8c:ea:0f:15:
         ef:36:74:2e:2a:50:a6:e6:4a:40:d5:fa:9d:0b:fd:ea:2b:5e:
         2f:44:10:7b:09:c9:ab:bb:48:a5:a0:07:0c:e8:57:a6:b9:82:
         11:2b:40:c3:bf:f2:cf:61:d7:da:e8:88:c6:f6:70:e3:54:57:
         73:60:b2:2a:71:2b:e1:eb:a0:2a:61:26:e8:89:ea:d0:95:35:
         ec:c2:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----