Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
File:                     acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa (raw, json)
Hash identifier:          jBZgX3uKuQhEbjE3d0C0ruEMFS50SYMj2apxYuv7fWo=
Subject key identifier:   D5:D3:0F:79:7A:9B:1E:D8:18:F7:02:F3:5D:D6:68:B7:1F:98:60:65
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7CD11C0B3E31294995491CCBA448A97D175D3742
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:1c:0b:3e:31:29:49:95:49:1c:cb:a4:48:a9:7d:17:5d:37:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=84410ed6503165210e2d0e7f48d242ef243229964d4d5b4d6ab899e80282741e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0e:de:3e:a0:f4:57:f7:48:03:03:4b:dc:49:
                    71:07:db:de:09:ce:64:97:75:6e:70:82:84:d6:f5:
                    54:5f:ee:2a:1e:ff:7d:af:f4:5d:92:5f:46:69:19:
                    5f:73:ac:03:0a:7f:df:03:6d:d5:4d:56:64:d3:98:
                    e5:6e:20:0a:40:a7:e7:b7:5c:b0:5a:79:44:44:c8:
                    8c:7e:98:f1:c8:f5:04:a5:c5:2f:d5:2f:7c:a4:00:
                    f9:a4:43:66:5e:d9:ed:73:67:15:fe:71:e9:38:a7:
                    32:0c:23:96:6e:95:c4:81:a5:6a:2f:c7:da:f8:e6:
                    c3:e4:a0:eb:38:d2:0c:1b:0e:53:48:21:97:de:99:
                    01:58:60:00:75:0b:f2:ba:f2:21:a4:11:85:5e:4e:
                    22:88:70:55:7a:fe:b4:15:b2:8f:9b:d8:c3:8e:97:
                    35:82:ea:82:d2:bb:63:f8:d6:d9:f3:25:3f:ec:5c:
                    90:27:b6:82:f8:5d:e5:a0:b2:37:bd:e8:9e:40:48:
                    4f:cb:37:75:64:a5:fc:b7:85:ce:27:f4:5b:70:1a:
                    08:14:c9:f7:81:61:9e:66:16:84:56:7b:5b:cf:47:
                    b3:df:1d:25:f6:0b:a6:ec:96:6d:f5:19:e3:67:c0:
                    9a:de:57:09:37:39:01:c3:a9:61:59:6d:f2:dd:5d:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:0F:79:7A:9B:1E:D8:18:F7:02:F3:5D:D6:68:B7:1F:98:60:65
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/acdbbeff-0998-49b2-8b5c-2bb111fc21ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:bd:e8:9f:95:84:f5:59:a7:13:d8:72:f7:aa:62:ad:ca:
         bc:56:c4:ae:8c:24:c0:90:f0:88:71:8e:92:42:7b:17:36:10:
         c1:56:37:4a:60:6b:fc:99:5d:f8:16:13:b7:b7:07:17:99:a1:
         4d:b0:85:d1:bd:a8:5b:3c:61:fd:6c:34:5d:df:bb:11:30:65:
         45:2f:5c:c4:10:fd:9c:84:d4:b0:34:1f:a1:49:35:46:eb:64:
         8c:28:08:25:14:f5:22:e2:42:7a:ae:ca:df:22:62:cb:40:3c:
         f3:a7:11:34:0f:8d:12:0d:e3:c2:c7:52:98:8a:58:0d:92:c7:
         db:25:8c:d7:0f:e2:43:c2:ac:4a:2b:4e:55:25:68:2b:5e:eb:
         57:09:34:51:23:26:66:c9:28:d2:4a:56:71:24:d3:43:08:85:
         a4:31:53:a0:fb:41:23:fc:1f:59:12:cc:ef:05:8c:23:cd:7d:
         4a:04:9f:e8:c1:8b:25:8a:ad:d1:5e:f5:bf:4c:7e:96:8a:c7:
         58:4a:40:a7:a5:72:67:a9:41:da:c4:b7:90:9c:c9:a3:75:f0:
         e5:7d:1e:d3:53:e9:3b:d0:c0:0b:65:41:cf:63:d3:f0:69:d7:
         62:4a:30:78:59:1a:68:7d:18:70:fc:40:69:a7:fd:27:0e:32:
         ea:a9:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----