Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa
File:                     f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa (raw, json)
Hash identifier:          phAQAT+HijhUPOgbnP70GSsvpRM+OcBfyqgRetaIFx0=
Subject key identifier:   F1:E5:D9:7D:A7:D7:AB:5B:DA:FA:30:9A:2A:D7:67:EB:F4:03:01:63
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       137389940C898B14E976D5FAC3F0A1AAC3FA04D2
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dafc::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:73:89:94:0c:89:8b:14:e9:76:d5:fa:c3:f0:a1:aa:c3:fa:04:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=0113cc68ed37aaec102a0ddb36f7016f370ae205548b0936a33ace965807a37c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:ed:0f:92:29:88:1a:f3:78:aa:b4:87:e9:
                    0a:1b:be:74:4b:39:c5:d8:e7:79:b5:c4:f9:e7:c7:
                    e9:d0:fb:66:34:c2:16:df:97:37:ed:f2:05:2f:ac:
                    13:f3:14:f1:0a:6c:4f:a7:54:89:73:76:68:72:b1:
                    38:d0:d1:83:29:b0:79:c6:87:87:3c:b4:60:17:7b:
                    cb:95:7f:7f:33:fb:0c:90:72:3e:e7:22:3c:bd:f4:
                    13:76:6b:6a:f1:aa:5c:71:8a:ae:51:52:31:64:37:
                    a9:5e:6b:ac:88:e9:86:d1:ff:5e:d6:d5:29:c4:90:
                    e8:25:5f:24:98:f5:44:f1:b1:ea:09:fe:f1:79:8f:
                    0f:8c:c5:a7:b5:b9:8c:14:6c:e4:b0:6e:e5:1d:d0:
                    18:6f:d1:1d:56:a7:73:fa:70:93:bb:d4:bb:d3:29:
                    6e:cd:b3:5f:55:1a:57:80:d1:6a:69:aa:87:28:e8:
                    1f:35:01:8b:1d:a0:d8:82:47:8e:0a:74:87:7e:62:
                    33:99:8a:9e:33:49:ef:15:80:b0:c8:e3:96:b2:25:
                    1b:ea:86:3d:59:af:07:7e:c2:42:24:43:6d:32:14:
                    b0:45:ee:12:85:21:ab:8f:b1:a4:2c:4b:6a:7e:ff:
                    10:6d:31:9c:77:0e:e2:a0:83:0f:32:57:9f:2c:1c:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:D9:7D:A7:D7:AB:5B:DA:FA:30:9A:2A:D7:67:EB:F4:03:01:63
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f68129ac-b29d-42ca-8a07-31e4f470e1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dafc::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:26:bf:10:39:a1:b6:88:5e:0b:38:28:f8:11:21:e9:85:36:
         1b:41:13:cb:29:5d:d6:72:a6:f2:fb:0d:ac:7a:43:70:5e:14:
         c0:49:bb:4d:9f:7f:6e:8f:33:bb:a1:4c:ee:63:ee:86:8a:6d:
         78:77:73:a0:74:7e:99:42:97:d9:c2:2d:f4:02:a4:e8:30:d2:
         9e:2f:5c:6b:e4:ce:9d:f6:58:b8:21:9f:50:cb:aa:47:b3:48:
         1a:5f:1f:ec:0d:41:47:f6:6c:b1:1a:09:83:6d:35:d0:2b:d0:
         3e:dd:dc:3b:48:0f:49:39:a9:ec:ba:de:67:91:ff:31:a8:d3:
         68:78:0f:33:94:fb:9a:cf:bc:da:09:91:83:00:5d:88:72:60:
         86:5a:d9:d7:35:f7:b5:e2:99:d2:f7:01:70:5b:76:e6:72:c1:
         ca:d2:fb:ef:83:e2:70:c7:f3:0e:ed:ee:31:06:e2:06:a5:a5:
         01:86:54:da:20:c8:98:d7:ab:89:fb:47:61:50:3c:95:bd:3a:
         45:46:88:8c:72:57:d9:fa:bb:ba:1f:0e:93:6f:ea:21:d7:b5:
         e5:47:c7:21:f8:27:9e:89:64:59:17:4e:bc:20:4e:73:73:2f:
         e7:62:94:ae:05:9a:36:61:32:b0:63:96:00:a2:6a:19:c8:af:
         b7:b6:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----