Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa
File:                     debc584f-82ae-4052-973f-96282869d7c9.roa (raw, json)
Hash identifier:          ZbJjY1MW43WJ8PaJ90m2fLvvt5pkd6KiOUyFnFp/V2c=
Subject key identifier:   89:99:48:1F:F8:93:32:B7:43:C6:CA:A3:9E:34:1E:3C:85:8B:5E:38
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3C66B103D62342FE22A0D59E859B02B205EEF69C
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:20c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:66:b1:03:d6:23:42:fe:22:a0:d5:9e:85:9b:02:b2:05:ee:f6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=e37538f671b2c07f7a2bb1961edec8885b587ad3ae0cfd1b13d1e5ef6e8f7af9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:28:51:9b:d8:f1:1e:78:58:78:a5:5b:8b:
                    a0:01:22:54:2d:32:0c:a4:56:87:b6:e7:f2:ad:71:
                    84:19:4a:f6:11:d9:86:c4:d9:a4:52:74:d7:8f:7d:
                    e0:fa:48:07:ad:c5:c9:9d:51:dc:10:dd:d8:15:2c:
                    97:07:02:b3:97:8b:c8:c6:8f:be:cf:10:ec:0f:19:
                    dc:6d:cd:bb:f9:2c:e1:7f:45:48:9e:f0:9b:ec:37:
                    70:85:c1:93:9d:4a:1c:6f:f3:2c:a9:df:1b:2e:0e:
                    93:ab:6f:a4:bf:b7:97:f4:15:ca:5a:72:7b:b2:fa:
                    8d:20:be:a5:1b:c6:02:15:96:4d:f5:e4:6e:29:49:
                    cd:d0:d3:f0:6e:0f:46:70:8b:6b:b3:94:00:7f:9c:
                    69:2f:16:b8:e4:2f:30:a4:81:ec:ba:96:44:cb:94:
                    2f:89:91:a0:3b:d0:45:44:cf:d8:43:ae:bc:d2:49:
                    83:b9:ac:8c:9c:0b:d9:89:bf:4a:44:b6:08:9b:b3:
                    ff:c6:69:09:32:91:1e:4d:dc:fd:73:a7:ac:ec:a4:
                    20:5c:5d:d3:b7:fd:ed:b9:0b:d4:cb:d5:1a:cc:61:
                    4c:0d:0f:ff:e0:47:53:a8:3b:f7:dd:36:a2:db:3a:
                    8f:5d:35:30:10:22:66:b0:ec:77:b4:2e:f3:2e:c1:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:99:48:1F:F8:93:32:B7:43:C6:CA:A3:9E:34:1E:3C:85:8B:5E:38
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/debc584f-82ae-4052-973f-96282869d7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:20c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:de:1b:65:fc:4e:bf:5c:09:1f:25:b4:af:3e:7a:23:77:9d:
         57:70:23:c2:9d:32:28:ce:e4:69:af:fd:cb:d9:12:b9:7d:d3:
         f0:70:08:69:a9:93:51:1e:db:f6:63:52:9d:72:ca:3b:06:d1:
         c5:86:67:20:6f:bb:99:ae:1a:58:e9:a6:16:df:da:b3:0b:db:
         9a:3a:14:95:b9:43:32:25:6c:26:98:06:d0:43:5d:13:35:5e:
         ca:0d:b9:9d:12:09:1c:35:e2:b7:40:8d:54:3a:f3:f0:68:ad:
         24:a5:cf:b7:85:91:50:63:5a:81:6f:e7:93:11:ff:fe:1b:cb:
         d7:09:e8:f9:6f:43:7f:54:9f:e2:1d:84:0f:ab:74:78:65:6a:
         6f:f8:d2:8a:6a:09:65:a6:27:31:38:cc:29:a4:87:d3:29:13:
         15:77:34:ea:82:a6:b7:e4:bb:aa:a7:cd:95:66:31:6d:be:3d:
         1b:95:5e:35:01:1e:c4:e0:3d:40:00:c3:4d:3a:f8:99:b5:a1:
         9c:61:95:c7:2d:07:43:81:93:00:16:86:54:f8:7e:01:60:ea:
         2d:7b:e1:a2:43:e7:2b:81:30:5d:73:27:13:ae:cd:14:35:19:
         6a:77:1b:ab:5d:25:e6:28:4f:97:22:2c:9a:d9:06:38:35:f1:
         e0:04:f7:c4
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIUPGaxA9YjQv4ioNWehZsCsgXu9pwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0
RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDEwNzAwMDAwMFoX
DTI1MDIxMTIzNTk1OVowejFJMEcGA1UEBRNAZTM3NTM4ZjY3MWIyYzA3ZjdhMmJi
MTk2MWVkZWM4ODg1YjU4N2FkM2FlMGNmZDFiMTNkMWU1ZWY2ZThmN2FmOTEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtIoUZvY8R54WHilW4ugASJULTIM
pFaHtufyrXGEGUr2EdmGxNmkUnTXj33g+kgHrcXJnVHcEN3YFSyXBwKzl4vIxo++
zxDsDxncbc27+Szhf0VInvCb7DdwhcGTnUocb/Msqd8bLg6Tq2+kv7eX9BXKWnJ7
svqNIL6lG8YCFZZN9eRuKUnN0NPwbg9GcItrs5QAf5xpLxa45C8wpIHsupZEy5Qv
iZGgO9BFRM/YQ6680kmDuayMnAvZib9KRLYIm7P/xmkJMpEeTdz9c6es7KQgXF3T
t/3tuQvUy9UazGFMDQ//4EdTqDv33Tai2zqPXTUwECJmsOx3tC7zLsGrxQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFImZSB/4kzK3Q8bKo540HjyFi144MB8GA1UdIwQY
MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU
U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz
LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx
L2RlYmM1ODRmLTgyYWUtNDA1Mi05NzNmLTk2MjgyODY5ZDdjOS5yb2EwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1
MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAbaYSDAMA0GCSqGSIb3DQEBCwUAA4IBAQAg3htl/E6/XAkfJbSv
Pnojd51XcCPCnTIozuRpr/3L2RK5fdPwcAhpqZNRHtv2Y1Kdcso7BtHFhmcgb7uZ
rhpY6aYW39qzC9uaOhSVuUMyJWwmmAbQQ10TNV7KDbmdEgkcNeK3QI1UOvPwaK0k
pc+3hZFQY1qBb+eTEf/+G8vXCej5b0N/VJ/iHYQPq3R4ZWpv+NKKagllpicxOMwp
pIfTKRMVdzTqgqa35Luqp82VZjFtvj0blV41AR7E4D1AAMNNOviZtaGcYZXHLQdD
gZMAFoZU+H4BYOote+GiQ+crgTBdcycTrs0UNRlqdxurXSXmKE+XIiya2QY4NfHg
BPfE
-----END CERTIFICATE-----