Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e72651b8-422c-4c74-90a2-0aee8e659796.roa
File:                     e72651b8-422c-4c74-90a2-0aee8e659796.roa (raw, json)
Hash identifier:          oax08cMXcZILxIDqxMXBgHUw2PFEH5BqejIvuW/l6MI=
Subject key identifier:   1D:DA:9F:CE:F5:99:07:41:A1:E2:01:70:84:BF:83:A7:56:46:EC:4B
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       7D9D54FBB6504A906C84C4C298CDDFF49ACED735
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e72651b8-422c-4c74-90a2-0aee8e659796.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf8:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9d:54:fb:b6:50:4a:90:6c:84:c4:c2:98:cd:df:f4:9a:ce:d7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: serialNumber=495af3a5512c066ebd387245e4df297fbd3c11577ed7e5e36c342241142fdea0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:94:45:38:21:02:5c:f6:91:f4:8e:ae:6c:cc:
                    7e:b3:e8:b9:f2:c2:fc:1e:64:74:ad:c6:ba:a4:af:
                    b6:d5:72:8a:e3:66:b0:7c:d0:76:d5:0d:05:b1:65:
                    a7:df:5b:70:d6:d8:1d:b5:25:87:93:43:22:d9:37:
                    17:66:68:78:32:65:b9:b6:e7:af:d0:36:18:09:2c:
                    7d:7b:1c:c4:b7:5b:b3:b5:f7:bd:5b:4f:04:84:99:
                    ee:82:fc:3f:2a:22:01:67:18:8f:ac:9c:f8:3b:12:
                    72:2c:89:e1:6b:f5:f4:d8:0d:ae:6b:d9:f0:be:72:
                    52:3c:08:d4:d9:15:14:7c:7c:36:be:8a:ec:6f:c9:
                    8b:30:06:90:11:b6:1f:bf:ca:b2:93:38:d6:d0:03:
                    f6:95:58:03:3d:05:28:51:aa:bf:f2:44:28:fc:85:
                    8d:66:0d:73:64:c3:c1:b5:df:ad:bf:ad:45:51:98:
                    16:38:46:3a:73:d2:0d:86:ad:42:5f:f2:83:25:a4:
                    ca:6c:bf:71:56:70:4b:db:b7:cd:e5:42:3c:b2:25:
                    97:4a:bf:39:25:11:84:ec:5b:5f:79:fb:2e:59:9a:
                    fd:9c:90:31:d5:77:d2:b2:77:31:f7:75:98:43:eb:
                    11:0a:ab:3e:36:ef:73:86:78:a1:9c:c4:1e:3b:95:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:9F:CE:F5:99:07:41:A1:E2:01:70:84:BF:83:A7:56:46:EC:4B
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e72651b8-422c-4c74-90a2-0aee8e659796.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf8:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:df:95:f9:8b:6d:31:75:ed:f9:cf:5c:85:60:3d:89:c4:25:
         5a:bf:af:e8:bc:d6:9b:83:00:1a:19:f1:f4:57:8b:d8:5a:72:
         7d:3d:e1:1f:24:4f:47:34:2b:5d:8f:63:89:8a:f2:fc:32:bc:
         a4:50:eb:5d:a8:74:c4:96:b7:3f:a0:db:b3:60:93:c3:18:e0:
         03:52:c9:6d:4f:d0:24:0a:54:e9:b0:49:17:54:0e:2e:19:a5:
         29:a0:26:ec:33:b0:43:b9:6d:0a:63:b2:97:4a:e8:dd:2a:66:
         01:bd:af:35:3b:a1:2c:19:fb:1d:04:98:2b:a5:e6:1e:71:2b:
         54:45:26:bc:5e:11:a2:84:42:ce:69:04:9f:1e:e8:e3:de:f0:
         77:b4:76:c8:88:27:17:73:c3:ce:6f:d7:bb:f7:b3:05:6e:cf:
         ea:f5:38:9f:5d:3e:d7:8f:4a:77:07:91:cf:6f:fd:26:b9:b5:
         39:8f:6a:86:2d:d9:77:81:4d:f8:ee:6c:e7:f6:9b:de:6d:71:
         84:df:ee:6d:06:88:dd:8f:1a:26:d4:5c:25:a7:ad:9a:59:ab:
         82:78:8c:27:c0:21:91:79:c8:ff:78:74:0c:97:dc:50:35:07:
         41:c2:ab:0d:e8:31:bb:ec:af:52:82:76:89:d6:e5:a8:51:58:
         b2:fa:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----