Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa
File:                     f71bafd4-e9ed-4715-b38b-a57003e06da4.roa (raw, json)
Hash identifier:          Zk5k1tAmRfQV9qXndr6YLyXlUU6/qs5go/A6O48O3Pc=
Subject key identifier:   C0:DA:04:A9:31:6E:5D:18:90:07:D1:52:D4:FA:3D:99:51:12:E3:10
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       210E2C3CEDD6DFBE165FACDAD44C81217A61E6A0
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa
Signing time:             Tue 07 Jan 2025 00:00:00 +0000
ROA not before:           Tue 07 Jan 2025 00:00:00 +0000
ROA not after:            Tue 11 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da69:2000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0e:2c:3c:ed:d6:df:be:16:5f:ac:da:d4:4c:81:21:7a:61:e6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: Jan  7 00:00:00 2025 GMT
            Not After : Feb 11 23:59:59 2025 GMT
        Subject: serialNumber=3a32d42275842c41004507358c4668b474b6a67874211d37a38bf09503a46415, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:c0:f8:e4:f9:89:d9:49:99:de:30:46:de:
                    b8:85:8b:23:ef:b4:37:0f:a2:4b:5e:19:7e:d5:cb:
                    8a:1e:c5:59:57:1b:a6:b7:96:4c:c7:37:6b:18:ff:
                    e7:69:f6:c4:db:b5:e6:f0:fe:ad:3d:ec:3d:15:9a:
                    28:a2:4f:fa:1f:16:f5:06:95:2c:01:18:72:95:6b:
                    2b:3a:e0:ed:33:bb:44:51:72:a5:c6:23:ab:35:da:
                    ef:fc:bb:14:98:6b:68:b2:7a:5e:a9:38:41:0b:48:
                    09:76:2a:b9:d6:45:bd:bf:33:c6:6f:39:c9:34:79:
                    8c:d4:57:f3:21:48:da:89:7c:0c:91:57:8e:26:3b:
                    b5:1c:5c:52:72:7d:97:e5:4b:9f:0c:4f:02:9c:69:
                    0b:94:68:78:2b:96:77:91:33:5e:ba:d0:c2:cd:46:
                    69:93:eb:62:d3:bc:47:e6:cc:d4:b9:48:51:32:bc:
                    9a:df:64:b0:b2:9f:4e:84:2a:00:4e:3b:af:d5:2f:
                    4e:37:b0:6f:03:67:0e:eb:60:08:c6:17:19:e0:0e:
                    e5:5d:7c:50:67:07:b8:4e:9b:e2:77:d5:0b:b3:50:
                    2d:b8:44:36:57:ae:a6:49:84:c4:22:b4:a2:c0:88:
                    a4:01:b2:87:36:f1:8f:54:c7:4e:0f:4f:65:4f:21:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DA:04:A9:31:6E:5D:18:90:07:D1:52:D4:FA:3D:99:51:12:E3:10
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f71bafd4-e9ed-4715-b38b-a57003e06da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da69:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:55:c9:a0:e3:04:5f:40:24:49:ee:82:39:3c:a6:77:a6:67:
         0f:7c:b7:5e:bb:dc:84:4d:23:76:e1:07:1f:ea:de:7f:a4:4f:
         27:e5:f5:d0:b3:3f:60:15:1b:0b:2e:b8:6b:5a:52:e8:d7:90:
         c6:ff:19:bb:34:29:79:53:71:25:76:14:11:7a:b1:7f:01:c5:
         32:80:84:16:1a:de:48:87:1b:6d:a4:55:f3:22:11:47:9f:f3:
         b7:a2:5c:05:64:a6:5e:eb:c1:eb:6b:93:87:e6:e9:ab:36:47:
         47:61:68:de:0d:34:5d:a4:9e:6f:d4:63:59:7f:59:d5:45:ce:
         ca:9c:44:13:31:b7:8e:f5:4b:3d:4d:fc:8a:e1:34:07:40:07:
         b0:52:15:59:3e:00:92:bd:b0:88:8a:ac:34:ff:30:c9:37:12:
         ef:59:20:b9:91:b9:d4:5b:f4:6e:c4:4f:85:0c:8c:9c:bd:9b:
         9a:9c:7c:f2:37:f7:b0:2e:5c:25:8a:dd:e5:5a:07:dd:fe:7c:
         34:1a:7e:7e:66:df:72:1d:6d:ab:36:4b:89:be:64:0e:47:00:
         95:a9:ca:95:e0:c0:be:eb:e6:c7:33:b9:4d:89:e1:bb:a1:1e:
         94:32:77:4e:a5:28:31:6d:49:2a:4e:03:48:50:87:83:a0:4e:
         c2:15:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----