Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa
File:                     c0276322-5c62-450c-9379-22ba77895050.roa (raw, json)
Hash identifier:          Rj9Q/zR8R/ztUDjrJcsoStGP+mj0bKAX1bLDmbkSXEQ=
Subject key identifier:   EB:FE:C2:27:B2:DD:5D:38:62:59:6B:EE:CB:1A:38:80:9D:6B:5B:24
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       122D36054F84AFABBAA16E5F80A76652AA18E1EA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da1f::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2d:36:05:4f:84:af:ab:ba:a1:6e:5f:80:a7:66:52:aa:18:e1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=1a4c24b3256f427946759558b8d92b87ca8ed695db06c1b968884d52f580b6f1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:9d:99:b4:4a:14:7e:f5:b3:0d:7e:09:d5:
                    74:f1:3e:03:58:1e:e0:c2:50:b6:4b:35:1f:ae:f7:
                    c6:42:cf:01:ff:bd:6c:89:e6:00:21:73:37:1e:a6:
                    23:57:8b:d0:f1:27:4c:e0:23:d2:eb:6b:13:7e:d0:
                    f1:e6:94:6b:e2:5f:fe:52:f0:d7:f3:f8:4f:ad:f5:
                    0f:83:f0:5b:9c:fc:50:fe:7d:b8:e4:9a:a4:57:73:
                    65:3a:c5:7b:16:a2:e0:b4:4a:a8:ad:a5:f1:25:4d:
                    62:d5:fd:f0:e0:f2:56:23:d4:e9:77:43:5f:e3:dd:
                    ac:9b:4a:46:91:9a:a2:47:6a:92:ec:a7:3c:71:5d:
                    63:43:81:2d:21:54:4a:d9:a8:ca:d2:ca:e9:68:11:
                    bb:bd:e2:c0:8e:d0:75:b8:9e:ce:d2:4b:1f:fc:1d:
                    2a:c3:08:56:91:af:b7:d0:d4:b8:ad:32:d5:c6:3a:
                    13:22:de:bd:94:af:cf:d3:cf:61:a5:5b:d8:2f:d5:
                    05:99:3e:7c:e2:76:34:bc:02:0a:1f:b0:7e:53:4e:
                    79:1b:06:62:12:df:74:bf:ee:79:7a:a4:8d:ba:ca:
                    01:7f:55:ad:1d:ee:db:6a:1d:1a:7a:87:1c:72:8f:
                    d0:14:54:82:14:83:d9:86:98:e6:db:a8:ef:ff:4e:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:C2:27:B2:DD:5D:38:62:59:6B:EE:CB:1A:38:80:9D:6B:5B:24
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c0276322-5c62-450c-9379-22ba77895050.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da1f::/38

    Signature Algorithm: sha256WithRSAEncryption
         23:5c:4d:f3:88:48:d6:d1:aa:a8:f8:08:c0:05:39:5f:56:b1:
         ec:fd:9d:7d:9a:79:fa:69:76:9d:78:be:f7:4c:80:a5:d1:7f:
         b7:7b:a5:12:a4:8a:49:57:85:98:e9:db:c5:ca:8c:6a:bb:5a:
         f2:19:ec:2e:ed:46:e3:32:9f:58:37:27:6f:ee:13:83:42:5d:
         7c:61:d2:e6:9c:f5:12:3a:bf:3b:f7:f3:4e:ae:65:5d:d9:28:
         68:0d:77:1e:f2:7f:1c:c0:cf:5c:9a:38:ce:62:1a:12:ad:61:
         09:28:45:0d:59:57:5c:8f:df:0b:dd:16:95:b4:63:77:e5:b0:
         50:0c:5a:59:25:ec:34:94:a5:60:39:0a:3d:76:e6:11:dd:32:
         5a:3b:c6:70:58:31:09:5d:70:9a:7a:57:3b:8a:16:1e:94:5e:
         6b:3b:0e:16:a8:4c:eb:57:3e:53:ff:12:29:8c:d7:c7:b6:6a:
         00:6d:b4:57:48:51:80:ea:0b:c1:48:7f:1c:c5:c0:84:50:a2:
         e4:cb:a8:e6:4a:89:17:20:19:ee:51:98:6e:5b:21:d3:bf:9f:
         69:aa:e9:9b:0f:40:c9:14:9e:9e:0c:0e:92:b4:71:46:38:a3:
         ed:53:80:5f:2f:59:08:4d:a6:b0:2e:b9:06:89:79:1d:51:5c:
         d7:27:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----