Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa
File:                     e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa (raw, json)
Hash identifier:          IHBMzgJW8VhHLgwwTRVoYf6MdliXC8DCnInYRlt3J2E=
Subject key identifier:   16:4B:5A:AA:B0:9E:02:22:10:B7:EF:3A:D1:8C:3D:59:22:F6:C1:32
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       78F8FFC96F86C9B063D21B03B2214D53115ED767
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daff:a080::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f8:ff:c9:6f:86:c9:b0:63:d2:1b:03:b2:21:4d:53:11:5e:d7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=32c362d32169a0441ec01eef5bfabd20a563bbb92f5cd309e80f872fc48b9ef6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:50:91:d3:71:53:19:a9:b5:1c:1b:20:93:
                    e6:00:72:3c:58:ff:10:5e:21:04:2d:1b:46:bf:7a:
                    24:9c:5a:0b:5e:0c:30:88:05:33:ec:7f:74:7d:90:
                    94:02:a9:75:17:f6:2d:f5:d6:25:af:c9:da:54:1d:
                    a5:55:b2:f8:6e:52:0c:de:3a:ea:ce:2b:08:46:83:
                    21:1f:52:07:58:43:90:78:03:19:4e:e5:15:90:e2:
                    c0:6a:de:6f:13:5b:6f:0b:05:23:12:fa:3d:78:b1:
                    6f:3f:69:8a:c6:d7:78:c7:ee:9b:3e:ab:19:3a:b0:
                    78:f6:93:7e:89:a7:3e:94:db:d3:69:ce:78:35:c2:
                    a2:7f:a4:14:d0:45:87:fb:b2:48:4b:41:76:3d:64:
                    a6:d0:68:3b:9b:5a:5c:b6:09:e7:57:1a:58:7b:ea:
                    7a:8b:ff:a6:70:38:7e:a9:e3:4f:5b:2b:9a:a7:9b:
                    f3:60:08:78:26:ab:7d:5f:71:e2:38:83:41:32:88:
                    bf:1f:a1:f1:12:d3:93:ee:2d:14:87:5d:6b:55:52:
                    5c:91:1c:56:c6:06:bc:af:85:1d:ce:22:48:f6:b9:
                    c8:4b:82:b4:a9:5a:ec:a1:bc:66:39:39:31:d2:1c:
                    27:52:7e:eb:6d:43:57:90:57:67:6d:60:c3:77:c4:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4B:5A:AA:B0:9E:02:22:10:B7:EF:3A:D1:8C:3D:59:22:F6:C1:32
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e8d98555-8cba-45bc-a7cb-74d7b44bfbf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daff:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:36:03:f2:84:8e:68:37:1e:d0:1e:63:7c:14:03:cb:d9:e6:
         76:df:a3:0a:47:c7:b0:85:b5:cc:15:e1:7e:cd:6f:50:04:8a:
         af:d4:1e:77:b2:38:79:c0:7a:2d:ef:ba:85:9f:08:fc:83:0e:
         8a:79:f2:a2:df:f9:34:59:9a:1f:f1:57:4f:bd:3c:c4:4e:25:
         93:27:09:98:17:92:81:cb:4f:54:82:5b:c2:6f:c0:a8:fb:b8:
         ce:e1:6c:93:a0:2d:04:91:25:66:29:de:44:ec:4f:ed:e2:9c:
         90:05:e1:c3:58:67:3c:05:99:e6:e0:ab:7f:b8:f2:9b:1c:30:
         d3:9c:30:71:5c:e3:0b:55:c8:94:25:84:3a:b0:c4:5b:38:9a:
         94:64:a4:ee:3d:9d:b1:df:58:00:f8:ae:0d:9a:34:c5:db:f2:
         74:25:f4:ae:07:9e:72:2f:ba:85:fb:85:fd:6d:b6:d7:c4:a5:
         70:ba:6a:90:0a:77:ae:ec:99:31:8b:d7:b6:a5:c7:fb:e5:60:
         01:c6:33:e0:3a:bb:bc:7e:04:35:cb:a3:b1:cf:fa:1a:41:d5:
         28:f5:92:eb:0f:b8:1b:98:68:7f:ab:13:66:e4:94:2e:93:a3:
         a4:ab:4c:44:1f:6f:dc:ca:9b:9e:ad:df:b9:fc:cc:29:f3:cc:
         86:1d:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----