Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6f03c4f-1a21-422d-9676-a62798546d0f.roa
File:                     e6f03c4f-1a21-422d-9676-a62798546d0f.roa (raw, json)
Hash identifier:          dmcxb2bAVI1BmkkNet9pgFpnIZCNj/F+LsBk2HP2/nE=
Subject key identifier:   C5:13:82:24:DA:6D:92:46:DA:3E:5E:DA:41:31:BC:51:59:5C:DF:F6
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       37BCE8C97306FB42AFD0DB7F17CD9CFABEAC7F21
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6f03c4f-1a21-422d-9676-a62798546d0f.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafb:c800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bc:e8:c9:73:06:fb:42:af:d0:db:7f:17:cd:9c:fa:be:ac:7f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=50097c9673ee8da64946671b86c62702cceec2e4d8143f95846050176c8ec718, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:27:4d:7e:76:a4:73:c6:4d:7a:ad:55:ac:
                    a5:e5:27:3b:8a:20:d7:fe:a3:11:8c:a0:86:4d:2f:
                    1d:8d:65:1a:2d:0e:31:dc:b2:5a:3b:48:99:39:18:
                    4d:2c:54:a1:23:fe:d5:ef:73:d6:26:5c:0b:fb:54:
                    49:00:1c:3b:f9:f7:57:b9:38:25:88:0a:d5:8d:28:
                    4b:7d:b8:69:57:1d:5c:e9:80:d6:a2:15:a1:0f:1d:
                    dd:82:15:1b:e3:93:74:74:c3:2e:16:41:d9:77:ec:
                    a4:67:24:57:e1:e0:b8:55:1d:c5:76:c5:7a:d4:c7:
                    67:2e:d2:bc:86:38:37:3c:d8:c2:90:31:6c:fd:c9:
                    c7:3a:93:93:97:10:0e:19:18:8f:72:20:f2:9e:56:
                    9e:c1:ae:51:94:ab:9b:4f:c1:fc:ea:a6:f5:a7:cc:
                    75:7c:fc:ff:9d:16:37:62:a3:a3:22:d7:92:52:fe:
                    7b:f1:f2:ba:13:ba:d7:75:34:b3:58:ec:6b:2f:44:
                    87:b5:72:1d:36:13:c0:12:64:32:e5:bc:b5:9f:1c:
                    1a:c2:f3:ae:71:8a:1e:e5:89:e6:17:b1:ee:02:fd:
                    94:ef:4b:58:ed:a2:0c:b4:52:70:bc:8a:0f:09:94:
                    c7:eb:bf:f4:68:4b:bb:66:2a:13:31:d1:bc:a2:90:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:13:82:24:DA:6D:92:46:DA:3E:5E:DA:41:31:BC:51:59:5C:DF:F6
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e6f03c4f-1a21-422d-9676-a62798546d0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafb:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:db:7c:40:60:33:ef:b3:40:d1:7c:61:7a:cf:5d:0e:ae:fe:
         88:eb:37:4c:8b:eb:61:3d:52:a5:61:dc:03:71:4d:36:9e:88:
         a6:f5:88:44:f0:33:25:9b:8e:61:81:8a:a4:9b:85:96:46:e9:
         1a:b9:56:9a:2d:96:c8:c1:41:80:e1:81:80:3c:c0:10:02:b1:
         ae:99:cf:68:11:0a:22:2b:aa:af:37:0f:dd:4d:05:94:db:dc:
         24:a7:f9:80:d3:45:88:fc:32:f2:a1:b2:69:c9:60:20:14:91:
         26:6b:9f:fe:fb:f1:0b:2a:13:ad:3f:92:a0:05:ff:50:ea:dc:
         ce:ab:b0:63:da:31:82:9b:94:b2:4e:86:7b:8a:de:2c:2e:a1:
         c2:e3:11:10:00:35:4f:a0:35:e0:77:32:44:41:b3:29:7a:ca:
         2d:eb:0a:80:fb:7b:1c:c3:c6:f4:d2:e6:fc:da:29:f3:5a:36:
         29:ab:44:f8:66:60:89:98:df:28:56:98:72:6b:3b:17:69:e3:
         2a:5b:27:06:f3:4d:d4:87:f2:0f:cc:e7:e5:87:5c:c2:0c:18:
         16:d1:59:e2:16:44:3b:64:db:e1:b5:63:3e:ec:d4:7d:8d:94:
         5d:c4:2a:e6:eb:a6:94:10:1b:8f:7b:f7:1c:5e:cb:b5:ab:f1:
         cb:2b:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----