Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa
File:                     d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa (raw, json)
Hash identifier:          QUhBEiF6N/mxAOwhxIG+JJptiZvpPw/dBURncvVDluo=
Subject key identifier:   EF:E3:EE:9D:11:5B:59:0C:76:95:66:89:52:27:8B:AE:1F:EE:5E:E8
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       67D01A15679DF906B164C8CB11F038B2220BF4E8
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:c080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d0:1a:15:67:9d:f9:06:b1:64:c8:cb:11:f0:38:b2:22:0b:f4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=32f7b26c0279f3fe5fdee79f72301b74726ca8743f8f4dce0ce80351d5466152, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:f4:4f:77:c1:4f:9b:83:2f:bd:3d:b0:e9:
                    7e:89:57:e5:bb:2e:5f:5b:a8:83:db:b9:86:35:aa:
                    df:b1:12:8f:92:de:99:37:66:f5:ea:d8:f3:93:81:
                    63:78:9d:43:f2:fa:b5:73:31:f6:9f:72:f6:62:0d:
                    93:82:df:f1:d6:42:2e:fe:6c:df:06:2b:88:be:9c:
                    23:1a:fe:9d:5d:da:e1:80:ec:bf:8b:bc:0b:c8:f5:
                    b3:c1:59:f7:88:33:d7:8a:d1:57:ee:3e:a7:fc:28:
                    f4:e3:d8:8b:25:29:05:39:fb:ae:3a:18:ca:49:8c:
                    6a:27:c1:47:d1:ef:0b:48:c8:1a:99:2e:cc:3d:09:
                    e2:15:8b:68:e1:24:c9:10:35:2f:97:d5:62:43:5d:
                    a3:c3:44:fb:29:70:5d:d3:22:2b:9a:7c:61:d6:c5:
                    99:fb:77:38:b0:b2:9c:cd:7e:61:45:cc:5c:cb:f7:
                    4a:6f:3a:4a:a3:3e:35:99:59:c4:c1:7e:b6:19:d0:
                    c2:55:7d:73:74:bb:90:65:72:10:53:db:87:4f:ba:
                    17:e4:b4:d2:1a:59:7e:06:99:75:13:c1:f6:e2:85:
                    c1:b4:3b:5f:4f:2d:e0:65:f2:94:79:ed:24:60:c3:
                    a8:50:5c:3f:2a:93:61:c9:45:b9:97:a2:0a:54:42:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E3:EE:9D:11:5B:59:0C:76:95:66:89:52:27:8B:AE:1F:EE:5E:E8
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d8ebfb4d-f771-4efb-821c-cd11d5a24a47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c5:56:1a:43:24:86:35:b6:c8:ed:2c:b2:75:aa:dc:e5:f0:
         6b:ed:ef:bb:c5:27:29:5c:e3:b3:a2:68:93:9d:e2:51:97:fa:
         63:94:ed:b8:50:c3:54:93:5f:62:a1:d1:73:99:ef:b1:fa:55:
         ea:b8:b6:b9:43:d2:1d:f0:9f:d9:bb:1c:3a:d2:78:dc:1b:15:
         6b:f5:43:12:8b:27:7b:75:51:f2:39:c0:90:07:8f:e0:3e:1d:
         81:aa:82:d6:c9:0f:1e:79:17:5d:5e:d3:48:e7:a6:ab:04:51:
         91:50:50:26:8c:d5:c1:3e:f6:6e:1c:65:53:d6:9d:97:5e:f2:
         a8:a7:cc:52:1f:67:83:8f:78:03:d8:93:27:7e:dd:21:08:f3:
         09:3e:d4:93:65:f5:a4:f5:62:50:10:a0:5a:45:b4:71:05:de:
         e9:e5:27:43:4d:f6:2d:e6:97:f1:9d:c6:85:a3:74:ee:8e:ec:
         f1:e4:74:f4:21:38:c1:b1:43:b9:80:5b:de:4f:66:a6:5a:b6:
         34:c7:e2:94:c7:c0:f5:87:5d:35:c9:43:03:9d:7f:53:3e:af:
         c5:70:62:ed:bb:9f:f7:a7:19:fb:49:23:32:1f:55:25:d9:f8:
         8b:b6:1b:4d:a6:0a:71:e1:e9:73:eb:7f:97:55:e8:d6:ad:ab:
         d4:93:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----