Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa
File:                     b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa (raw, json)
Hash identifier:          kbJMSLnt+JYNkwKZkxDpHq48ZBd8oVQldODDUog2diQ=
Subject key identifier:   80:0A:86:F4:A5:05:F3:E1:2E:B7:F4:0F:7B:37:9C:4F:82:8D:5C:37
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7EB31FF3F0B7A9C54D92CF85448BFC2FCCF97F0A
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:8880::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:1f:f3:f0:b7:a9:c5:4d:92:cf:85:44:8b:fc:2f:cc:f9:7f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=213ab8db3c6e67b2b83fecfb2e24c0a7529bce3b19cef55b77615cf0e783581d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:ea:ac:b1:76:58:04:03:ee:ce:e3:b3:62:
                    5f:9f:31:0a:da:0d:28:e4:2b:93:a7:7a:08:56:02:
                    fe:e7:a7:00:76:a7:81:4f:ff:15:f8:2c:0e:20:a4:
                    39:18:03:5e:84:39:1d:22:63:db:b5:f5:45:0f:de:
                    e1:fb:94:13:de:81:cd:e4:bd:9a:5b:f9:da:4f:15:
                    5a:0e:e9:84:f3:37:af:be:a4:14:23:8c:28:f2:3e:
                    16:99:b3:0d:83:6f:5f:91:e7:90:de:b9:10:41:32:
                    bf:06:d0:fe:80:3e:95:4e:2e:2c:23:36:7e:26:dc:
                    eb:c5:85:b9:33:43:da:38:e7:28:8f:0a:8c:89:99:
                    b6:0f:a2:7d:1f:53:69:2b:36:d0:5c:1c:c7:4e:ae:
                    cd:e1:17:09:3c:0a:c0:ab:19:fa:f5:bd:bd:60:94:
                    42:2a:3e:43:b8:48:d3:70:a3:3a:75:a1:be:88:78:
                    30:ce:4d:ee:18:97:58:85:9f:8c:ce:f4:5b:d1:99:
                    94:ad:3a:e8:f5:b4:74:90:28:a4:8b:1b:1a:55:50:
                    d1:a3:fd:bb:f2:a0:ab:7e:84:72:25:78:34:03:5a:
                    85:3f:4d:02:c2:52:de:1a:a5:34:b1:87:47:df:1f:
                    04:31:12:e9:ce:d7:f6:9a:1d:3f:f0:8e:47:f0:b5:
                    fa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0A:86:F4:A5:05:F3:E1:2E:B7:F4:0F:7B:37:9C:4F:82:8D:5C:37
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a86cb5-be63-483d-92d7-e04128bbd6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:8880::/46

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:2f:aa:d0:c6:39:d1:bf:5d:1f:39:ed:62:79:13:64:d5:
         5e:6d:1f:06:e3:d4:29:91:a9:a1:9d:a3:4d:db:0f:2e:24:cf:
         64:21:35:fd:14:b7:7a:0c:f9:8c:bf:6e:f0:3d:e4:2d:41:c5:
         93:d4:57:79:81:ef:9d:ba:17:bb:78:f7:a8:4f:12:5f:c8:03:
         23:7b:ae:c1:7f:29:52:35:df:35:36:f0:16:7d:6a:68:86:84:
         70:e8:5f:6c:92:3d:d6:5b:22:a1:24:44:7c:b0:77:ff:8a:73:
         d3:55:ec:59:68:1c:04:b7:2e:98:63:26:36:8c:5b:2f:df:c8:
         64:7a:a3:1a:21:65:f0:3a:b9:2c:c8:3b:66:8e:d3:e5:8e:d1:
         d9:42:ac:a7:ed:4f:5f:20:e8:1e:98:bd:22:bf:ec:26:9a:35:
         cc:92:45:ec:89:74:fa:9f:e3:44:f6:9a:18:b4:73:78:32:93:
         45:da:45:44:b1:e9:03:9a:ff:3c:56:59:d9:d5:88:3b:6e:52:
         23:43:32:e0:11:66:d1:74:69:7d:0c:0d:60:b4:1f:26:40:a6:
         ff:79:9b:2a:69:23:cd:7e:8c:d1:f1:7c:4b:f2:35:da:f7:e8:
         5c:11:d6:ac:69:ff:b6:60:3a:ca:85:c2:12:61:10:98:f1:b1:
         6d:8b:db:ad
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUfrMf8/C3qcVNks+FRIv8L8z5fwowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAMjEzYWI4ZGIzYzZlNjdiMmI4M2Zl
Y2ZiMmUyNGMwYTc1MjliY2UzYjE5Y2VmNTViNzc2MTVjZjBlNzgzNTgxZDEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC/qrLF2WAQD7s7js2JfnzEK2g0o
5CuTp3oIVgL+56cAdqeBT/8V+CwOIKQ5GANehDkdImPbtfVFD97h+5QT3oHN5L2a
W/naTxVaDumE8zevvqQUI4wo8j4WmbMNg29fkeeQ3rkQQTK/BtD+gD6VTi4sIzZ+
JtzrxYW5M0PaOOcojwqMiZm2D6J9H1NpKzbQXBzHTq7N4RcJPArAqxn69b29YJRC
Kj5DuEjTcKM6daG+iHgwzk3uGJdYhZ+MzvRb0ZmUrTro9bR0kCikixsaVVDRo/27
8qCrfoRyJXg0A1qFP00CwlLeGqU0sYdH3x8EMRLpztf2mh0/8I5H8LX6yQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFIAKhvSlBfPhLrf0D3s3nE+CjVw3MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2IxYTg2Y2I1LWJlNjMtNDgzZC05MmQ3LWUwNDEyOGJiZDZkZC5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAbaaYiAMA0GCSqGSIb3DQEBCwUAA4IBAQBOIC+q0MY50b9dHznt
YnkTZNVebR8G49QpkamhnaNN2w8uJM9kITX9FLd6DPmMv27wPeQtQcWT1Fd5ge+d
uhe7ePeoTxJfyAMje67BfylSNd81NvAWfWpohoRw6F9skj3WWyKhJER8sHf/inPT
VexZaBwEty6YYyY2jFsv38hkeqMaIWXwOrksyDtmjtPljtHZQqyn7U9fIOgemL0i
v+wmmjXMkkXsiXT6n+NE9poYtHN4MpNF2kVEsekDmv88VlnZ1Yg7blIjQzLgEWbR
dGl9DA1gtB8mQKb/eZsqaSPNfozR8XxL8jXa9+hcEdasaf+2YDrKhcISYRCY8bFt
i9ut
-----END CERTIFICATE-----