Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa
File:                     e15e0f8b-7883-42c9-bc67-a15e702594e3.roa (raw, json)
Hash identifier:          ts2NyBSF1jEQeZ4E/JNw6M//Fqa921uLvd1Fhiw91dw=
Subject key identifier:   22:66:7A:D9:8D:03:37:F9:9D:47:1A:64:ED:8A:90:7D:B1:61:6F:C6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       46DCABD271A8CB82D03C5B372A10207A3EDD04E6
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da38:8080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dc:ab:d2:71:a8:cb:82:d0:3c:5b:37:2a:10:20:7a:3e:dd:04:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=5f1060e35287a8143caa8a712197f9134daaa24da074f92d2ef94c3cd27d025b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:d7:4b:01:42:db:fa:ec:53:e5:5f:1e:72:
                    99:a4:a5:07:1d:55:dc:87:e3:fd:e3:6a:ca:e8:93:
                    35:ba:4e:1c:63:80:68:05:45:d4:30:4a:75:f1:95:
                    6c:f3:eb:36:f6:b8:5b:ab:f3:f2:9a:89:1c:4e:a6:
                    8b:7f:12:23:41:40:24:a9:72:25:e4:1c:f7:af:f0:
                    b8:05:b9:f5:8f:d2:e2:93:a6:fd:04:b6:9b:dd:22:
                    07:c8:0c:03:d5:9f:ca:fb:84:68:78:37:b8:f1:4d:
                    e3:a7:6f:e3:0d:53:ac:82:49:c8:53:74:60:8b:45:
                    17:36:45:3f:7e:15:c9:6b:b3:71:04:ff:6d:53:aa:
                    a5:ba:e5:e1:c5:3d:ec:92:58:a7:0b:89:d2:67:2c:
                    4f:80:71:12:34:12:75:af:e3:23:92:11:19:ed:65:
                    e7:cc:72:7f:2a:c2:31:9e:29:30:6f:99:f7:84:bf:
                    db:17:ae:0b:33:81:62:b9:57:b6:b4:d6:2e:8a:e8:
                    82:97:e8:d6:9f:2b:f4:bc:f7:34:02:01:1f:d6:7b:
                    ff:c0:8a:cd:11:6a:eb:ef:bf:e8:84:c5:bd:55:5d:
                    8f:6e:e3:af:71:57:85:10:5d:87:b5:b6:99:50:e1:
                    3c:4e:ad:9a:71:b3:81:50:66:2c:df:2d:f7:1c:d4:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:66:7A:D9:8D:03:37:F9:9D:47:1A:64:ED:8A:90:7D:B1:61:6F:C6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e15e0f8b-7883-42c9-bc67-a15e702594e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da38:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:f7:79:ad:38:a5:90:5d:09:32:83:f0:a8:be:4d:e3:f3:
         56:81:ab:79:37:2c:2b:b9:ae:0b:35:c7:db:f1:37:55:02:1b:
         16:7c:ec:9a:70:a9:1a:a4:39:68:58:f0:3d:88:91:b2:b1:fa:
         e0:2c:d6:31:8a:db:ff:92:39:35:93:9e:00:c4:9e:73:6f:3f:
         fe:b7:3c:37:2f:4e:b4:1b:dd:6b:d5:c4:49:4c:f8:d0:b3:6d:
         35:a5:e4:57:db:c1:f1:9c:99:15:7b:0a:9c:35:6a:57:a2:44:
         e6:66:67:11:db:27:4b:25:14:61:f6:03:fb:3a:2f:4f:d4:b8:
         fe:09:79:a4:5c:72:2e:6e:76:aa:08:9b:8c:98:26:f7:60:7a:
         91:d2:93:67:b6:4a:f1:fc:fe:88:a6:f6:79:a7:93:79:bd:5d:
         51:fd:53:0c:eb:38:9d:18:44:47:da:13:3b:34:94:ae:69:d5:
         d1:ff:51:23:15:cb:56:01:4a:21:35:c9:58:31:cc:5e:93:24:
         9d:22:3a:8c:33:3c:dc:00:0e:70:ee:86:8b:76:f2:72:be:3f:
         24:95:a2:01:f0:31:54:ff:b8:c8:d6:d3:20:45:b1:8d:db:77:
         16:23:30:90:e6:5b:a7:74:6d:3c:e8:51:9f:07:f8:91:ee:d0:
         26:70:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----