Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa
File:                     d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa (raw, json)
Hash identifier:          6Y5RiLMe6WSGAz3po5fPCS2IOUSFLqre0lqXeva1X5E=
Subject key identifier:   28:CF:2F:A9:FB:19:10:BE:5A:FB:20:9E:A4:B0:A5:50:FB:BE:AA:C7
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       0BAF0B125F3A7D5AB51FA1CB223BD5E8F1F8C76B
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:c0a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:0b:12:5f:3a:7d:5a:b5:1f:a1:cb:22:3b:d5:e8:f1:f8:c7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=ef3965faa01168ae1d9301dea5f87e10f30dfe2e882958fd9e22f5bf80547f26, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:ca:6b:93:3f:a0:5f:21:b1:5a:ad:98:04:
                    f8:c6:2c:c6:53:c0:5e:ce:58:5f:65:8d:99:c9:0a:
                    61:20:e7:b5:2b:40:4a:f5:01:29:dd:e0:83:75:c2:
                    de:4a:f7:83:33:de:41:60:3a:75:ab:e5:86:17:da:
                    a9:ce:22:17:16:2b:31:1a:e1:a0:d7:99:20:66:3f:
                    8a:9e:eb:00:48:17:79:9b:81:46:b4:a0:b9:02:4f:
                    62:c2:89:e8:46:0a:3f:7f:0e:3c:1e:d8:12:51:e0:
                    6e:8f:7d:10:18:57:b1:27:29:64:63:51:cd:35:30:
                    3f:96:43:75:fb:28:bb:9c:5a:53:c5:d8:0d:01:b7:
                    87:61:ad:54:9e:22:f1:7f:c1:6f:1d:21:00:07:36:
                    46:76:2f:e7:72:01:85:3c:8e:27:13:8a:c0:a4:d2:
                    f1:92:91:22:1a:e3:75:78:e2:a6:c0:cc:b5:32:95:
                    8d:5d:42:09:c0:ad:90:59:db:4a:aa:67:d0:1d:ef:
                    e2:b5:e8:d1:a6:96:2f:bd:fc:05:4a:ed:d1:47:e6:
                    60:ff:fb:97:78:96:71:39:2e:4f:ce:1f:e4:be:26:
                    ba:2f:7a:dd:49:4b:fa:cf:6e:9e:dc:24:9c:3a:cb:
                    9f:b3:4b:93:2a:64:14:41:72:76:a7:b6:a2:2d:08:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:2F:A9:FB:19:10:BE:5A:FB:20:9E:A4:B0:A5:50:FB:BE:AA:C7
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d3435dbb-5d1e-4948-8027-e6433f72bfc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:c0a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:c4:5c:20:0e:f3:e3:41:c2:55:4c:e9:8b:a7:99:ad:6f:
         39:86:3c:87:a4:fb:38:2d:8c:6b:e7:b5:d7:ad:2b:47:b8:1d:
         df:50:78:37:27:7b:69:00:a5:c6:03:d6:03:f8:a3:4c:ad:99:
         c8:4e:e8:b4:a5:55:46:49:86:e8:cf:66:eb:f1:a3:19:7c:7c:
         7d:52:98:84:c5:8e:0a:00:1b:a1:fa:cc:07:e3:37:39:71:0a:
         c8:29:95:3e:38:fc:3c:37:47:ac:9c:ae:e9:d2:76:ba:da:17:
         cf:c0:57:98:6f:9e:16:41:ca:01:9d:5c:89:66:ce:f6:1b:2d:
         69:3c:5f:bb:4a:26:80:1e:e9:64:d2:b7:f7:32:0b:77:37:8e:
         9b:64:23:3f:2c:73:27:75:5f:40:a1:f6:bf:b9:2a:16:65:8c:
         39:75:e8:5e:8c:5e:68:d0:b5:be:c1:9f:22:58:9b:84:fe:88:
         16:a9:19:ef:9e:b8:3b:f2:1a:9a:26:25:b3:87:77:d6:89:a7:
         3a:23:3a:f9:72:57:50:c1:9b:db:65:60:c6:c4:f2:b6:e9:9b:
         2a:65:6b:be:53:a1:0d:65:27:c5:44:5f:7f:b0:9b:dd:ac:b1:
         79:7c:11:2a:cc:e8:68:0e:bd:29:84:61:e5:79:12:64:6b:61:
         f4:ca:69:9d
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUC68LEl86fVq1H6HLIjvV6PH4x2swDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZWYzOTY1ZmFhMDExNjhhZTFkOTMw
MWRlYTVmODdlMTBmMzBkZmUyZTg4Mjk1OGZkOWUyMmY1YmY4MDU0N2YyNjEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbfKa5M/oF8hsVqtmAT4xizGU8Be
zlhfZY2ZyQphIOe1K0BK9QEp3eCDdcLeSveDM95BYDp1q+WGF9qpziIXFisxGuGg
15kgZj+KnusASBd5m4FGtKC5Ak9iwonoRgo/fw48HtgSUeBuj30QGFexJylkY1HN
NTA/lkN1+yi7nFpTxdgNAbeHYa1UniLxf8FvHSEABzZGdi/ncgGFPI4nE4rApNLx
kpEiGuN1eOKmwMy1MpWNXUIJwK2QWdtKqmfQHe/itejRppYvvfwFSu3RR+Zg//uX
eJZxOS5Pzh/kvia6L3rdSUv6z26e3CScOsufs0uTKmQUQXJ2p7aiLQgqnQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFCjPL6n7GRC+WvsgnqSwpVD7vqrHMB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2QzNDM1ZGJiLTVkMWUtNDk0OC04MDI3LWU2NDMzZjcyYmZjMS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAba/8CgMA0GCSqGSIb3DQEBCwUAA4IBAQCyJsRcIA7z40HCVUzp
i6eZrW85hjyHpPs4LYxr57XXrStHuB3fUHg3J3tpAKXGA9YD+KNMrZnITui0pVVG
SYboz2br8aMZfHx9UpiExY4KABuh+swH4zc5cQrIKZU+OPw8N0esnK7p0na62hfP
wFeYb54WQcoBnVyJZs72Gy1pPF+7SiaAHulk0rf3Mgt3N46bZCM/LHMndV9Aofa/
uSoWZYw5dehejF5o0LW+wZ8iWJuE/ogWqRnvnrg78hqaJiWzh3fWiac6Izr5cldQ
wZvbZWDGxPK26ZsqZWu+U6ENZSfFRF9/sJvdrLF5fBEqzOhoDr0phGHleRJka2H0
ymmd
-----END CERTIFICATE-----