Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa
File:                     f695f86c-1862-4357-8961-1e5b809c4811.roa (raw, json)
Hash identifier:          GAVpmMdD3toZPmRZX7z83ypA8lo/OSSbd0u/gDrpFho=
Subject key identifier:   42:47:36:26:16:A3:50:80:9F:DE:A5:4E:2E:B4:50:84:80:B3:D1:7F
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1AD777400ACA9FCC39B35C1162A91FCB59A0761E
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da00:a000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d7:77:40:0a:ca:9f:cc:39:b3:5c:11:62:a9:1f:cb:59:a0:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=9e27ef93096f07af79ec116d6c1ead9282b93fe90f2dcab00d700376294229b5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:33:d2:c3:99:62:0b:bb:23:37:1a:3e:fe:
                    44:fe:19:83:a2:cc:b9:eb:37:ef:fd:50:cb:66:8b:
                    39:30:2b:16:bc:5d:c7:00:c3:03:e6:93:a1:1d:9f:
                    eb:94:73:31:96:7b:e9:38:fc:a1:a9:25:0c:48:d4:
                    dd:de:c2:39:b1:cb:6c:6d:b1:8b:4d:da:cf:76:b2:
                    fc:73:76:a0:f3:ec:f3:07:35:57:20:e1:1b:c0:4f:
                    e7:fa:3a:32:31:a2:0c:dd:82:57:de:2e:6e:5d:8b:
                    2e:f6:24:26:f5:95:2f:c6:ab:b9:ee:61:c0:ea:52:
                    df:3f:7d:e6:28:94:3d:75:ad:f5:08:49:2c:91:e4:
                    b4:4c:71:d0:f5:00:08:51:22:76:88:79:6f:da:b1:
                    e5:a3:c4:54:dc:7f:c8:9d:e2:27:b7:87:37:16:8a:
                    4b:09:29:8a:c4:43:57:ed:24:b5:49:33:17:54:a2:
                    e5:35:6f:c7:13:43:e8:5d:0c:db:cf:55:fa:fb:4d:
                    77:5e:ce:bd:cb:ed:03:32:51:e5:6a:c0:61:9e:32:
                    60:fb:39:3a:f1:9a:ed:0e:03:93:dd:2e:39:99:84:
                    14:f6:26:6a:cc:8c:0c:db:23:85:ef:fa:d0:fd:4e:
                    36:5b:77:92:70:f4:8f:1f:c9:79:1a:a7:11:5d:de:
                    cb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:36:26:16:A3:50:80:9F:DE:A5:4E:2E:B4:50:84:80:B3:D1:7F
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f695f86c-1862-4357-8961-1e5b809c4811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da00:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:28:30:f1:c5:2a:92:13:6e:20:67:54:71:04:90:5f:5a:
         73:33:0a:a9:42:0f:3a:91:68:6b:99:67:55:69:9a:92:26:3c:
         cc:95:5e:e1:53:3b:0e:62:02:53:92:2a:25:eb:fb:a0:3d:3d:
         82:18:87:d9:bb:53:13:8c:97:7a:5e:da:f8:e7:7b:58:30:e4:
         82:7e:d8:d1:6c:94:64:a5:c1:53:4d:cb:e2:7a:e0:ea:c3:70:
         91:ce:40:53:48:82:5b:1a:4a:28:40:25:be:4c:08:b8:3a:81:
         9d:41:c1:fd:67:92:3f:7e:31:59:11:b8:d1:28:41:ee:d4:f6:
         c7:19:d6:63:52:40:5f:f0:fa:c7:af:7d:09:fd:73:4c:56:a0:
         18:ad:cc:8c:c8:6b:ee:0b:3a:dd:82:5e:e5:26:50:55:cd:10:
         1c:36:49:20:2e:39:aa:30:74:1e:a3:37:b5:ab:d0:59:d3:f3:
         ba:5a:ae:e2:1b:33:aa:20:4b:68:c5:cb:f2:37:21:bc:69:99:
         fd:4f:11:34:66:4e:9f:71:0b:70:9a:b1:4c:a7:94:96:71:f9:
         20:d0:50:29:c8:3a:d4:15:67:23:19:75:96:6b:3c:ae:5e:dd:
         4f:6f:1c:bc:cd:f9:76:45:d6:22:6f:42:22:69:62:fd:42:51:
         9f:2f:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----