Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa
File:                     f28ef137-0acd-4efd-b9ee-b352810a3e96.roa (raw, json)
Hash identifier:          A626gzhTkOdT3YDOpkUIsvuRhfaR6jTxIAvc77/WAoc=
Subject key identifier:   0E:37:0C:7D:66:DA:2E:20:67:3D:A0:5E:07:4B:99:1E:56:13:85:71
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       458A9D761C12DA1AB06C0AEFA14A7FE855316A67
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:e080::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8a:9d:76:1c:12:da:1a:b0:6c:0a:ef:a1:4a:7f:e8:55:31:6a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=cbd97968b7339d561059569e3f76f0d0d291d82eb6e1c99cf7a8bcd86bc20383, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:e8:7b:5a:d1:e5:66:60:58:0c:50:5e:ef:
                    6b:39:1c:d6:13:d1:8f:22:b3:4f:6b:f0:88:02:1f:
                    58:a1:82:f1:1e:a3:94:6e:80:6c:7d:91:38:10:90:
                    d9:fd:3c:c7:db:16:f9:c1:50:e7:0b:18:4f:b7:c2:
                    f2:18:ab:b6:d2:40:83:0b:38:82:d0:4b:4b:8b:3a:
                    d4:ee:36:40:3e:08:42:73:63:87:c0:75:f6:82:aa:
                    a9:62:db:bb:a6:a7:8c:6c:69:0d:50:34:41:25:f2:
                    7b:c4:e8:78:37:c8:13:34:57:4b:84:c0:e3:37:b2:
                    7a:78:21:91:f6:38:7a:12:bc:db:c3:ac:5f:7b:eb:
                    ec:30:8a:35:d5:ca:c7:57:b4:3a:b5:12:d0:8a:60:
                    4a:90:9c:4c:eb:10:74:fd:2a:9e:3a:6d:86:ee:f7:
                    71:e3:98:fc:38:9d:36:15:2e:4b:e8:93:76:66:28:
                    69:ad:95:4a:0f:b7:4d:fd:31:47:af:45:13:f7:a9:
                    84:4f:6b:bb:ca:6d:58:c6:b8:a8:fa:a8:41:25:2e:
                    88:d7:0c:87:b1:7b:9f:95:98:e5:d7:d6:fd:24:02:
                    4b:36:34:fb:93:23:d5:f3:0f:d0:13:02:eb:2a:d0:
                    cd:21:2f:39:4d:1f:58:dd:e4:e2:10:bc:6f:54:48:
                    1b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:37:0C:7D:66:DA:2E:20:67:3D:A0:5E:07:4B:99:1E:56:13:85:71
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f28ef137-0acd-4efd-b9ee-b352810a3e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:e080::/46

    Signature Algorithm: sha256WithRSAEncryption
         ba:88:a9:71:82:f9:04:12:94:77:ae:45:6c:07:c1:79:e7:b5:
         81:aa:8b:fa:b1:d0:8e:71:ab:89:16:09:7f:87:87:a0:5d:c2:
         22:f6:4f:f9:11:9a:c4:b6:c8:72:59:89:75:b0:66:ab:2c:0b:
         33:94:fc:20:6a:15:f1:61:31:bb:db:61:02:ca:b8:49:4c:71:
         da:29:62:1a:6d:57:f5:d2:58:24:59:c7:89:6c:bb:62:58:5e:
         05:b8:00:49:3d:e9:01:40:f5:29:23:0b:0d:bf:98:b5:f3:37:
         4e:b1:21:a0:13:62:b8:cc:0e:a0:9e:68:4a:8b:90:59:32:df:
         3f:b1:52:ba:19:a0:0f:5b:e7:85:c4:1b:ec:22:b7:81:af:c2:
         39:eb:45:10:ee:ff:76:d5:34:8e:de:71:15:b5:a7:67:01:ae:
         c5:78:89:a7:61:d0:c1:84:cc:b2:aa:d6:88:84:81:a0:2a:d2:
         86:9e:ad:f7:bb:55:cb:55:b1:da:f6:e0:0d:60:4c:ff:4a:b6:
         25:17:96:15:3a:84:00:7f:f3:d8:db:6f:a8:eb:5b:8b:00:ff:
         89:da:78:0d:5a:34:bc:e4:bc:e3:db:b9:a2:89:3c:c4:53:f5:
         49:23:9e:76:27:31:39:a8:bd:29:ed:8f:e2:6f:b5:0a:fb:50:
         20:b3:1d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----