Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa
File:                     dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa (raw, json)
Hash identifier:          XPAuuusaIltxoGU83UQLvhuBHhCjSDKL7Pkq+m7OWn0=
Subject key identifier:   E1:43:4A:B2:6B:64:B7:1A:70:B9:32:FC:E0:DC:AC:7B:F5:2B:B1:60
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3348E9F6F8116E3E56C12446AC9E7600894DEBAA
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da61:10c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:48:e9:f6:f8:11:6e:3e:56:c1:24:46:ac:9e:76:00:89:4d:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=09a2655b8cc338552e8ca4466cb48fc30234c3593f21ba0b21a17db64390f73d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:c4:69:9c:c9:90:4d:20:20:7d:a6:69:9f:
                    12:3c:3a:95:86:bf:99:11:78:17:d1:8f:2a:64:56:
                    e4:da:b3:80:7d:01:44:90:79:0b:c2:d8:a6:4a:8d:
                    ae:ca:4a:99:97:87:bc:a7:22:d6:31:45:b4:61:2e:
                    4c:a8:b6:4e:43:78:c0:5f:7d:b3:3d:10:28:4f:b5:
                    ab:04:52:90:99:d5:83:ad:64:8c:09:72:14:79:9b:
                    50:e7:bc:af:12:21:f1:89:b8:1e:35:1f:2a:d6:03:
                    f4:87:73:5f:ce:bd:0f:fa:bc:15:2a:31:34:8f:1a:
                    61:78:b9:18:35:3c:b3:c9:fc:fc:e9:94:4a:89:56:
                    b6:41:8f:e6:9c:ac:5d:15:ad:e9:9b:51:21:b0:1e:
                    d6:e7:59:f8:89:ef:03:a3:23:86:90:84:15:c3:fe:
                    33:7e:de:5f:a2:50:ae:22:ba:62:9d:08:c6:81:28:
                    4a:ca:dc:b4:22:42:3c:c9:db:46:61:b9:c4:7b:d8:
                    7f:ce:7c:9a:30:b1:b7:63:f9:10:83:2f:31:4d:4e:
                    8b:7d:1b:33:1a:a2:43:55:47:bc:12:71:63:5b:c4:
                    59:19:d0:ef:8b:8d:0a:bb:e4:10:f7:0a:ab:18:b8:
                    74:2c:35:c4:e9:3d:f2:ed:41:f3:6e:78:46:96:71:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:43:4A:B2:6B:64:B7:1A:70:B9:32:FC:E0:DC:AC:7B:F5:2B:B1:60
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dfeb39ad-2644-4f2a-b23e-18f51ccd49e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da61:10c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:8f:71:a4:47:71:df:ac:73:c5:f5:31:ec:08:73:6e:d3:
         48:ef:84:bb:81:bf:ac:a8:04:88:aa:12:87:1a:3a:23:35:ca:
         0f:39:95:7b:ae:30:5c:df:44:ea:10:70:cb:90:6c:9c:cc:6a:
         63:34:da:bd:51:7f:3d:1e:f8:d5:d7:e0:1d:5f:c9:4b:33:1b:
         c7:54:3d:53:3d:c8:c4:a4:cf:2e:07:ab:63:6a:c4:06:e7:da:
         99:14:1f:df:6a:cb:0c:e6:0f:2d:ca:61:c1:56:0e:27:d1:7d:
         1b:89:d0:5f:ad:16:6f:d1:cb:74:67:98:72:49:dd:6c:38:ff:
         fc:22:c7:5b:a5:a7:a6:c4:fc:12:4e:78:1b:37:69:ab:54:aa:
         2c:0d:b3:22:38:29:88:df:4f:eb:e9:b1:4b:17:3e:09:a6:0b:
         be:18:b0:eb:19:05:7d:d7:e9:7f:3b:72:80:fd:fe:14:2d:72:
         79:fa:4c:96:fa:ab:8d:9c:5e:54:38:34:d4:3a:b3:78:51:2a:
         f5:f6:d0:79:52:56:0f:9e:d3:f3:15:c1:71:3c:90:42:34:8c:
         da:eb:5d:e0:0b:ca:3f:a5:79:65:fa:73:fc:0a:b5:36:f2:35:
         67:43:cc:61:ab:de:bf:b3:f0:83:71:a7:dc:66:05:e2:77:ff:
         58:fd:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----