Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa
File:                     eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa (raw, json)
Hash identifier:          aDM1pJkWMaVxUrt/7noxoYC9CGTX61XB/kaPFPn1m0Q=
Subject key identifier:   5E:F6:3A:E7:0F:16:59:9B:F3:0E:5C:E0:42:0B:E0:CA:DA:3C:3F:4E
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       591EFA1757DD0B67B480CC58DF8ABDFD5494D011
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa
Signing time:             Wed 08 Jan 2025 00:00:00 +0000
ROA not before:           Wed 08 Jan 2025 00:00:00 +0000
ROA not after:            Wed 12 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:daf1:4000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1e:fa:17:57:dd:0b:67:b4:80:cc:58:df:8a:bd:fd:54:94:d0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  8 00:00:00 2025 GMT
            Not After : Feb 12 23:59:59 2025 GMT
        Subject: serialNumber=6f7b829e46ee16af2254e3125df67dd900f2199db4ccab1183d745781940b7d4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:4f:bb:b9:af:7a:ce:a3:f1:1c:88:ad:20:
                    2b:20:ad:70:29:0c:89:5c:ca:83:c0:94:63:3b:10:
                    89:ba:5b:8f:9b:25:28:fc:0e:1b:32:1f:85:0b:e9:
                    c8:aa:2c:a7:fc:be:dd:78:a1:5a:bd:c4:17:e9:cd:
                    89:40:af:9d:b0:56:e7:1b:0b:cf:d0:00:ff:b7:6c:
                    cd:ed:fd:53:6a:fc:3f:0d:b8:bb:c5:a2:bf:a0:cb:
                    a5:ec:87:a8:d2:b1:07:01:14:17:27:71:56:9c:67:
                    3e:31:c1:d7:bf:c6:85:b0:a1:25:3c:6a:2e:61:81:
                    f4:4b:db:0b:0b:3e:a9:7d:5a:03:37:88:41:d8:17:
                    8d:29:c3:0a:47:44:02:96:6c:73:e1:7b:37:52:4a:
                    c5:28:58:95:bb:d0:b5:60:8f:b2:24:94:b3:c4:27:
                    1d:97:ed:81:1f:ec:03:ea:4f:af:7d:aa:bf:18:a5:
                    62:b1:fb:11:ee:43:58:b3:12:11:cc:a3:41:78:ba:
                    04:71:aa:b7:cf:6b:e2:5f:9d:98:fe:0b:ea:97:d2:
                    80:ea:10:44:f2:4b:77:81:64:98:de:00:d6:40:66:
                    58:02:54:a2:81:fa:0b:01:79:a9:09:50:71:8f:b3:
                    90:84:a4:83:70:f3:74:45:d9:19:32:29:8f:bd:92:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F6:3A:E7:0F:16:59:9B:F3:0E:5C:E0:42:0B:E0:CA:DA:3C:3F:4E
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/eb147b0a-93ac-4ab7-8c40-1df2c88725a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:daf1:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:b3:2d:3b:e6:b7:4c:3f:26:f5:36:da:bf:3d:09:1d:80:33:
         3f:80:f5:94:64:ce:e1:f1:36:d8:c4:70:f7:92:d9:2b:1e:4f:
         88:7c:28:ba:38:9b:33:69:20:ad:a9:8d:5b:b6:94:ed:e1:86:
         1b:8d:4d:c8:d5:c8:d9:70:87:04:fe:70:3a:2f:9c:50:69:e5:
         19:b3:29:39:43:37:7b:42:94:0b:92:45:91:47:d2:48:b7:15:
         43:5d:91:84:ba:45:71:6a:4b:9a:1f:6c:eb:23:58:01:64:07:
         03:c9:a0:58:45:25:31:4f:74:77:41:04:a0:39:a8:9e:c7:8e:
         34:e1:f0:e1:93:71:b4:05:39:7e:10:8b:f8:1a:6d:17:73:d1:
         48:34:f2:e1:e0:f9:7d:fa:35:71:f6:d6:f3:56:1d:4a:8f:0e:
         6c:2f:2b:9e:c2:ed:23:39:02:5b:78:95:b8:6b:d1:db:b1:de:
         e1:26:23:cf:f2:75:60:14:b3:1a:14:25:02:5b:27:18:8d:19:
         56:31:31:60:01:ce:c0:48:14:a9:b5:2d:da:22:62:a5:bb:96:
         b9:93:27:60:ec:14:4f:5c:10:83:1d:96:15:a2:22:4e:01:9b:
         27:aa:bc:f2:b0:88:3b:fd:9c:2e:b1:c5:66:d8:6d:bc:25:fe:
         01:32:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----