Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa
File:                     a47e051c-2b16-4d02-b1e0-ac267a378e13.roa (raw, json)
Hash identifier:          gxjNx/66R0aN5x5auaZi8mYg+hj1QbYyRvVufjIvlJI=
Subject key identifier:   EB:E8:E2:CD:BC:69:D0:5A:4C:38:D5:D4:46:29:AD:FD:AC:7A:CA:12
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3DF911C2344C13FAFC3CBC3D9F2AB3DB0E331A59
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf6:b000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:11:c2:34:4c:13:fa:fc:3c:bc:3d:9f:2a:b3:db:0e:33:1a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=2386de9f207f5ecef0e30d9e0926b33bde47dd4113856ad9046b817a68c7582a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:89:10:34:dc:36:d5:25:92:23:04:41:30:
                    d6:e5:fd:b6:ea:fc:7d:82:30:4c:8a:f4:5b:94:b5:
                    eb:f3:80:d6:20:ef:c1:e1:a3:6c:b1:7c:21:db:47:
                    b0:0b:da:8c:20:d7:3a:12:c7:1a:b0:6c:17:77:37:
                    a8:0b:a5:69:a7:83:d6:7b:f0:50:35:6d:63:fb:83:
                    3a:c3:66:fd:64:53:fa:c2:ab:25:27:0c:ee:a3:d0:
                    3e:9f:b4:36:53:a0:2d:27:d8:7f:b8:20:6c:4d:55:
                    91:00:60:17:17:17:c9:30:dd:37:ae:e0:9f:a7:47:
                    41:a2:90:b8:d8:20:ed:18:dc:b3:56:d6:f4:4f:4a:
                    61:a9:29:6d:4b:5f:14:12:6c:f2:ec:00:74:e1:0d:
                    3e:85:ea:33:a7:6c:14:2a:72:2d:08:db:df:b6:d5:
                    85:c9:af:dd:ec:3f:8f:cf:8c:89:2e:cc:ef:43:77:
                    07:24:b7:39:40:10:1c:55:37:69:0d:6c:44:c0:76:
                    0f:2f:5e:c9:53:0e:87:40:53:6c:b1:dd:3a:5d:a5:
                    e3:ea:d9:fb:c6:e6:5a:26:b6:73:90:07:8f:75:a6:
                    37:0c:7e:79:01:ba:cc:09:72:49:94:8d:92:16:c7:
                    4f:4d:6e:5f:f2:97:7b:a3:b5:f1:b6:00:82:c7:c0:
                    d7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:E2:CD:BC:69:D0:5A:4C:38:D5:D4:46:29:AD:FD:AC:7A:CA:12
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf6:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:21:5d:ac:5d:61:55:b3:09:7c:a8:eb:ad:bd:60:6c:44:1d:
         53:89:67:0d:bc:28:e7:5e:44:45:50:45:84:c7:38:48:f3:c9:
         e0:44:be:0c:b5:8c:15:1b:8d:99:ca:c0:68:8f:41:cc:f4:d6:
         c9:46:99:1d:6a:e7:8f:14:5b:12:d0:6a:2a:60:49:a5:8f:6c:
         4c:0f:0c:ec:78:ec:ee:f0:75:a5:70:3a:e6:84:fc:69:61:d4:
         47:80:d7:f0:cb:5c:4b:80:5d:b2:34:ef:ce:d6:4b:b1:40:20:
         21:de:9c:10:77:c7:da:ff:42:25:8c:60:12:16:ef:b3:0b:19:
         b3:c5:07:2d:a1:c5:6d:4e:9a:cc:90:90:d2:51:f4:cf:e1:f7:
         d9:a2:c9:c3:c4:1b:1b:ab:f9:8d:bf:73:77:c1:12:d8:da:10:
         ad:07:01:2f:e1:37:44:5b:3e:60:50:99:cd:c2:a7:82:a5:3c:
         b5:cb:d7:61:73:8e:8e:d1:74:7c:65:a0:2d:a4:83:68:98:cd:
         4f:0c:d6:db:9b:a9:b6:6b:74:cb:fd:d7:6a:91:52:5c:25:14:
         dc:7b:cf:12:39:b6:37:cf:39:4b:e5:d7:08:b4:f5:5d:bd:c6:
         10:e2:53:63:cc:1b:84:6c:be:ef:1a:f3:e3:bf:f6:4b:63:ce:
         5f:87:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----