Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef9ddd9a-9ca9-428f-ac4f-d7f26d008249.roa
File:                     ef9ddd9a-9ca9-428f-ac4f-d7f26d008249.roa (raw, json)
Hash identifier:          e8sBLn/tnSDrOdtuSM+VYExzqOk+ezalFGFg1x/GWwQ=
Subject key identifier:   57:50:7E:A9:0A:67:AD:65:7D:41:26:23:5D:65:0B:7D:D7:E2:BE:95
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       3983551A96C31E61CCF5904F1CFEBF9D974E1243
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef9ddd9a-9ca9-428f-ac4f-d7f26d008249.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:83:55:1a:96:c3:1e:61:cc:f5:90:4f:1c:fe:bf:9d:97:4e:12:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=8bc6516d727d991563fc5fcfa544cc40280c4b97448856c13f5a2ce4b88d3677, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:78:22:26:cb:20:71:5c:f6:9d:39:74:8c:5d:
                    52:c7:d2:f4:1d:00:ba:2d:fc:0f:fc:7d:58:35:1d:
                    b3:eb:cb:9a:ab:8e:14:b9:41:76:f9:8d:9d:47:dc:
                    ff:58:ed:d6:e9:88:1d:2e:3b:3a:86:6f:51:8e:8a:
                    1e:87:dd:64:fe:ba:82:6a:c0:f9:5b:bb:e0:8a:c7:
                    39:f6:01:73:03:74:0a:9d:9b:93:d5:c1:b7:a4:67:
                    dd:3b:54:b1:a8:5f:89:18:1d:8a:92:20:ac:14:53:
                    05:83:78:b7:05:d3:ac:19:06:72:4b:d4:ed:c7:73:
                    05:38:4d:d4:53:72:d7:36:08:59:8c:28:24:86:48:
                    d4:15:c5:8a:6a:f2:20:3c:8f:2e:ab:f5:70:6f:51:
                    05:6c:88:9e:8d:d0:ef:a2:06:ef:75:88:bb:04:77:
                    1a:c0:44:40:7d:44:2b:af:92:b8:77:ff:d5:6d:02:
                    81:c8:06:68:b2:bb:2b:f2:28:2b:c0:bd:16:36:25:
                    1b:05:3d:6f:a9:39:75:c9:3d:3b:5c:0f:fe:8c:fc:
                    46:e2:51:f3:69:dc:34:0c:f4:7b:61:20:4b:16:6f:
                    52:fa:c9:12:89:87:b7:19:ea:ff:22:28:1e:4a:cc:
                    d3:dc:23:d7:db:7d:d9:e4:8a:f3:c7:90:7a:ca:7b:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:7E:A9:0A:67:AD:65:7D:41:26:23:5D:65:0B:7D:D7:E2:BE:95
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ef9ddd9a-9ca9-428f-ac4f-d7f26d008249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:26:b5:74:de:36:e5:ec:64:b5:45:da:65:3c:59:8c:ed:
         27:9b:5b:c8:ac:41:a9:3a:97:d0:e5:d9:77:a4:31:6b:2d:58:
         fc:b9:13:bd:5e:26:7f:b5:5f:95:7a:22:50:27:58:d8:f4:a1:
         6c:18:c9:c5:97:52:e8:b1:9a:bc:2a:be:36:67:a2:97:ff:d5:
         6a:ff:67:93:e7:42:5e:13:1b:ba:f2:40:70:02:51:cc:4c:5f:
         0e:3e:80:b4:2c:33:9f:9e:e2:31:34:1c:c0:9e:0a:11:ff:36:
         1e:6f:be:35:50:44:c4:49:6f:2d:3c:f3:09:9e:6d:34:25:ea:
         55:36:a0:50:97:31:67:3e:76:bb:4e:15:58:12:45:a2:0e:cc:
         06:8c:14:5b:f7:fd:fd:7d:56:34:c9:f6:d9:1d:38:65:d1:dc:
         c7:8c:19:d1:d8:4a:18:12:5b:14:35:a9:76:51:9d:7f:01:32:
         f8:89:58:92:a3:82:7e:cd:b2:77:5e:bc:e4:50:7b:f5:b8:c9:
         ec:dc:48:f1:75:7c:4e:13:52:55:e7:f1:a5:b5:4b:e6:e7:7b:
         c1:4d:85:e1:c0:90:dd:01:c0:9c:cc:fd:99:12:e8:97:f4:3d:
         84:0d:6f:5f:3f:b5:2c:2f:1a:9a:af:61:e7:13:be:8e:09:af:
         c5:ab:b6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----