Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa
File:                     cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa (raw, json)
Hash identifier:          yMnh9ut8xM0IySIP/BP8CQOj+L3xpe1VwNuKbmTV6XI=
Subject key identifier:   5E:8E:04:A6:11:9D:2C:29:9B:60:A5:2D:7D:6F:69:A0:08:BF:5D:92
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       2457DD688CE2679111DEC198FD3A79D341747ECD
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:1000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:57:dd:68:8c:e2:67:91:11:de:c1:98:fd:3a:79:d3:41:74:7e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=444a936217faca9b13bd870f1f76e06a921f774d7a5aac31d4eceedeffa3877a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:61:d1:7c:fe:25:72:4a:74:12:6a:68:65:58:
                    1e:ff:0e:42:6c:b3:30:c6:5e:98:5e:c5:23:16:19:
                    e0:9d:f3:fd:c4:39:dc:f6:b9:4d:2b:94:a0:78:6d:
                    de:65:43:b4:ec:99:9d:fb:f3:e5:70:25:4a:0a:0a:
                    eb:15:f6:28:1b:96:cf:84:4e:aa:65:f7:34:58:e2:
                    86:fe:9e:f6:85:a5:03:78:1b:0a:d4:a7:1e:9b:11:
                    bd:ee:94:54:94:aa:e7:c3:7b:fa:2e:f7:6c:46:a3:
                    51:ef:72:15:92:00:d8:72:6d:d1:ed:0e:d2:aa:f0:
                    df:88:be:24:22:d8:37:d0:f2:83:bb:69:c5:aa:0a:
                    5d:ca:b8:1a:39:5b:58:de:66:c9:af:2c:34:37:99:
                    26:6d:69:c7:d8:21:e9:90:a7:5b:03:60:29:e7:45:
                    8a:21:a0:08:eb:cf:2e:36:71:62:04:bf:6b:45:d6:
                    5e:d8:f2:6c:31:22:1e:2b:58:3c:60:8b:4a:a4:dc:
                    7d:5a:2b:57:59:a3:48:86:60:31:39:e7:e9:a9:dc:
                    75:b5:a1:a1:28:af:51:1f:20:57:c9:22:b9:38:55:
                    7b:81:f9:a3:10:69:48:a8:9c:46:77:09:73:1a:f1:
                    0a:8a:3e:6b:ac:f5:bd:65:47:6b:16:0d:9b:86:a0:
                    ec:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8E:04:A6:11:9D:2C:29:9B:60:A5:2D:7D:6F:69:A0:08:BF:5D:92
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cad0253c-e8ea-4a70-af97-ef37e7b915e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:6a:51:a5:ed:e1:64:83:86:a5:04:a3:fc:3b:49:f7:0a:37:
         59:47:c3:8e:f1:14:03:2e:92:18:28:24:95:d3:9f:88:12:6c:
         60:c8:c8:7f:01:8f:1a:80:50:20:b6:68:6b:23:f3:a9:18:a5:
         c1:d9:40:f7:8e:de:50:2b:3f:b8:da:2f:e0:d0:7f:54:fa:cc:
         21:d9:57:a2:de:8b:d9:98:45:74:09:17:ab:79:66:09:39:0e:
         72:88:e9:af:05:5b:ba:86:30:cd:6f:78:54:93:81:54:fd:c2:
         e0:d8:ff:75:a6:42:80:4a:6f:c2:14:34:13:19:57:7f:0b:6a:
         df:48:09:94:a9:1d:0f:3a:db:01:cf:ea:57:60:18:99:87:84:
         64:13:1d:61:32:27:d4:b0:f8:36:3e:75:12:1c:03:e6:66:de:
         e0:33:3d:17:c4:ad:71:ff:89:10:b6:cf:3c:6e:54:fb:64:c4:
         17:0c:10:d3:04:b8:d7:1b:09:65:ca:2b:fc:26:b1:b9:97:17:
         57:80:34:20:05:58:2a:00:84:70:b1:12:32:00:39:54:d8:35:
         0c:06:0b:b2:8c:74:32:48:37:b4:4a:f7:89:5f:33:65:f8:00:
         ea:38:e2:a2:e9:ba:23:8f:3c:9a:d7:77:9f:24:37:a6:25:00:
         39:45:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----