Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa
File:                     b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa (raw, json)
Hash identifier:          WaaVhtH05HnkXgQUMu+C/4KRMrx0Wk7JO2Po+2xFB+4=
Subject key identifier:   2D:30:50:D7:21:EF:C6:FB:89:49:F7:6E:A9:DE:13:5E:2F:81:52:47
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       6BB4370F2F9840E19C580F3C1F43717327C30290
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:8040::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:37:0f:2f:98:40:e1:9c:58:0f:3c:1f:43:71:73:27:c3:02:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9bde0ce9bf0c329008304966df294ea51830f91724d6863e11205f40d971d5f9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:75:6b:4e:77:85:9b:57:a0:a0:df:fd:5f:
                    a1:33:48:fb:e0:d6:e6:7b:72:61:1f:a5:6e:fa:2e:
                    50:c9:7b:3b:8e:fc:53:13:f1:ac:9c:56:33:65:da:
                    ed:1e:d7:45:af:c6:84:f9:01:3c:e9:29:9e:81:19:
                    30:6c:03:e6:de:b5:a8:a4:74:85:3a:33:64:56:10:
                    94:ae:c8:b5:09:9e:d5:38:8f:bd:bf:7a:3d:30:08:
                    52:50:5e:ba:3b:f0:bf:16:3e:1f:a8:f4:49:4d:09:
                    60:18:3b:9b:59:ab:bd:8f:67:76:10:f5:99:f3:6e:
                    c7:76:8a:47:c6:6f:f9:cb:2d:45:8d:4e:9d:a2:65:
                    3a:d7:39:83:9c:99:15:28:4d:d1:b2:1b:f4:7f:a8:
                    de:2d:0a:d3:f6:af:bd:ce:10:40:6c:e6:6b:31:d7:
                    71:66:33:cb:e2:7e:a4:94:5f:b1:c3:9b:f7:f8:1e:
                    75:89:d1:1c:1d:7e:da:77:fe:65:63:27:ca:44:ff:
                    35:b0:75:2a:05:ee:05:da:a6:ca:0b:c1:5e:56:05:
                    8b:b9:04:a3:90:69:0a:68:18:ee:ca:32:6c:a3:f8:
                    3c:db:6f:e5:9a:e9:d7:2f:07:c5:5f:34:ba:9a:9b:
                    8b:e7:49:72:f3:e4:91:76:78:75:e9:61:7e:72:98:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:30:50:D7:21:EF:C6:FB:89:49:F7:6E:A9:DE:13:5E:2F:81:52:47
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b716d6d0-0e74-471f-a802-3f22bceeaa5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:09:f6:2d:c4:08:88:5f:00:34:36:64:6e:e7:c4:1e:5b:
         f6:79:16:2f:da:3e:6e:eb:b5:97:bb:ec:c4:f7:15:93:cb:34:
         00:aa:7f:b6:77:98:93:b6:8a:1b:e0:4f:8d:fd:16:d3:31:08:
         57:91:e7:d4:aa:bc:66:1e:60:71:8e:1b:70:ae:ba:20:cf:24:
         fa:7c:e2:a0:af:8c:c8:89:ba:58:b7:c5:77:f2:9e:d2:81:de:
         5d:b7:fb:eb:e7:66:e3:9a:9a:b7:16:de:5e:01:c0:0c:93:29:
         19:1b:5d:28:67:28:17:cc:3f:3b:0f:d7:d0:8b:ad:34:49:45:
         d0:6d:73:cd:14:84:06:9a:f2:b0:89:fd:c4:6b:51:c8:c8:6f:
         5b:63:04:20:aa:b9:b2:7a:56:74:a6:32:c4:7f:fe:39:c9:e6:
         16:70:e6:44:db:1d:8f:49:9d:d9:ec:ae:08:43:cc:4f:1b:e5:
         7c:64:e2:a3:b5:1a:07:1e:3b:e0:3d:c2:b7:5d:5e:3d:65:26:
         56:96:aa:5c:02:90:b1:5d:0c:9f:f0:51:1a:29:26:21:03:3f:
         20:f9:54:79:2e:e9:2e:20:33:5f:8c:a6:a6:8b:83:57:56:ec:
         96:ba:d7:74:f8:47:43:1c:7b:17:ab:b9:94:6c:e7:4e:a0:75:
         7d:77:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----