Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa
File:                     dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa (raw, json)
Hash identifier:          MdnbyEYS8WPXZSMaOQ5ULtgJ7lzw5IgkIx9CN5ohkP0=
Subject key identifier:   B7:0A:43:D1:F2:6D:87:5F:1F:E2:21:1E:F0:27:B3:63:90:B4:CF:2A
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       67F74A22CF6AA22C23CF6B2D0B0E44DA0423FDFA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:a0c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f7:4a:22:cf:6a:a2:2c:23:cf:6b:2d:0b:0e:44:da:04:23:fd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=5728292586d445ffb4236d406e612c50fbbec0b8af968b37fb719dc647dc0dda, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:64:83:28:85:e4:96:33:ac:fc:61:28:6f:
                    9b:a6:68:af:f7:04:80:eb:16:23:40:92:ef:a1:fc:
                    a0:84:b6:8f:76:89:d9:f4:cc:a5:9d:ea:be:ec:4d:
                    cc:12:10:6f:c8:1e:8a:91:7a:19:3f:49:0e:65:88:
                    44:4d:70:cb:11:ea:0a:31:8a:ee:aa:11:62:d0:f6:
                    ea:6a:ad:d9:00:f3:51:dc:99:9a:55:65:a6:f6:a5:
                    ad:ce:1c:68:9a:5f:88:be:90:1d:ea:3c:85:a3:fd:
                    3d:7a:09:8c:a4:9d:ed:e4:41:ad:59:2b:b3:b0:fb:
                    7a:9d:55:f6:b1:18:68:66:18:5a:ed:3a:78:10:83:
                    05:9a:8d:46:46:32:e6:51:35:38:ed:a8:dd:47:48:
                    13:06:28:10:08:8e:0a:46:2c:55:3c:65:02:6f:3d:
                    5b:a7:97:44:c0:d5:77:d4:b9:e5:ab:96:e5:3b:7b:
                    6d:8d:6a:44:62:89:17:cf:3a:ba:e0:29:32:cd:d3:
                    d1:06:c5:83:35:3f:97:bc:71:70:88:f9:df:89:7d:
                    67:ac:8c:72:c2:fd:93:b1:d6:55:f0:88:e9:fa:bc:
                    c0:0e:5a:d7:8c:c0:e5:eb:c1:cf:da:c3:41:7d:9e:
                    9a:58:73:b6:55:09:a8:3b:95:e1:db:12:3e:90:23:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0A:43:D1:F2:6D:87:5F:1F:E2:21:1E:F0:27:B3:63:90:B4:CF:2A
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dca0f327-3d17-47b3-9e0f-44a764e2e72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:a0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:fc:9c:f5:60:2d:4a:ef:68:cf:3c:be:2d:e3:2b:bf:1b:0a:
         26:dc:24:2b:4e:1c:2b:3d:2c:61:04:65:56:66:ed:fa:c6:4a:
         d5:15:ad:19:0c:df:bd:04:5b:a4:02:af:66:a5:b1:80:84:bb:
         08:cd:19:c2:b8:c3:d4:c6:b4:b2:cf:37:a8:7c:5e:ad:ed:32:
         fd:8e:98:ff:00:33:23:d0:2c:30:c6:da:ba:b1:b5:3f:a7:64:
         68:93:9c:cb:bd:a5:4d:00:ad:4f:63:59:be:d4:4c:28:e7:45:
         68:15:1a:cd:c2:82:3b:5b:67:99:fd:13:ea:e5:2a:e8:38:37:
         8d:b9:f9:73:37:2a:a7:39:b2:4d:37:4f:61:c9:63:07:f5:5c:
         cd:3a:5c:c7:fd:19:d1:7d:88:1b:69:e2:e7:d6:d0:3c:7a:71:
         11:c7:f6:bd:11:96:9f:ea:e0:bf:15:d2:f0:d9:9f:f0:52:83:
         a2:5f:3c:47:00:3a:15:1d:9a:ce:8a:0f:d7:48:e2:a9:e7:dc:
         c2:3e:53:77:6b:60:f3:87:d5:5c:ac:1a:38:c1:91:69:5a:0c:
         a0:5e:9e:96:c8:75:5c:80:f7:03:f6:2c:97:94:80:8d:1c:19:
         2c:fe:40:a1:58:a5:6b:7b:dc:bb:69:d7:a9:22:49:cc:80:89:
         c0:93:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----