Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa
File:                     8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (raw, json)
Hash identifier:          ExNwT0Hb/1xwB1rWgjTsRI+WJ7eC69X7Nl14d1/IBmw=
Subject key identifier:   19:33:6A:04:A1:92:69:4A:8C:76:9B:44:D4:25:BF:D9:D4:12:A7:C1
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       57E04CD7EC8B82B373666CE1436CADB27C6832EF
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa
Signing time:             Tue 14 Jan 2025 00:00:00 +0000
ROA not before:           Tue 14 Jan 2025 00:00:00 +0000
ROA not after:            Tue 18 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2400:6500:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e0:4c:d7:ec:8b:82:b3:73:66:6c:e1:43:6c:ad:b2:7c:68:32:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jan 14 00:00:00 2025 GMT
            Not After : Feb 18 23:59:59 2025 GMT
        Subject: serialNumber=f24a0ffb4e97a4471bcbc3eb6408b154afb17f2bd7a054b334e7fec303238dcd, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:e8:f3:2b:1b:28:82:50:b2:5a:09:a7:18:
                    ea:82:ce:21:a6:75:05:87:eb:57:f9:b9:a7:cd:9f:
                    49:bb:73:2f:a4:a4:ec:83:8b:4d:b0:6a:a1:98:9e:
                    71:17:b9:69:50:ee:02:7b:45:f3:bd:d4:3a:62:13:
                    bd:b2:a0:1f:5c:b3:5f:f0:10:df:d8:38:dc:56:f2:
                    e0:bd:97:0d:85:53:7f:6a:cd:ac:e0:26:84:f9:48:
                    bd:68:b4:56:77:51:69:30:45:c7:19:a6:c3:00:e7:
                    16:13:23:fd:9a:f8:cd:4f:17:a9:07:a9:17:6f:46:
                    57:41:79:36:e1:19:1a:57:95:b1:70:73:b1:c7:aa:
                    27:b3:6d:b5:e1:44:60:b8:e8:e3:86:3c:a0:ca:6f:
                    9b:a0:a2:5f:f5:1f:56:61:3b:0b:70:24:ce:25:d5:
                    df:a2:ab:f5:80:19:79:55:cd:c2:6f:87:32:84:8d:
                    6f:d2:7f:73:d8:4d:3b:f6:e4:7c:87:61:c5:96:c5:
                    4d:53:77:d5:22:4b:82:07:7d:43:56:b1:45:19:92:
                    26:6b:17:61:1b:2b:49:dc:da:df:e0:d3:0f:5c:c5:
                    73:23:3a:2c:84:71:f6:d9:20:38:8e:0a:5e:9f:b9:
                    75:ab:c6:2f:95:f7:4f:10:7a:42:60:1d:b2:a7:48:
                    b1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:6A:04:A1:92:69:4A:8C:76:9B:44:D4:25:BF:D9:D4:12:A7:C1
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/8c170584-7c9b-414b-8cba-a934a0a79bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6500:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:62:57:a5:ed:0d:2e:cc:48:37:25:5f:fb:a7:fc:a1:c6:0a:
         54:62:d5:47:44:e9:0c:10:7b:a7:c3:e0:cf:e1:6e:1a:fc:6a:
         ee:0b:9e:d4:bd:74:62:77:32:d6:ce:ac:03:85:3b:03:a1:7c:
         b0:e3:c5:3b:01:31:f4:1f:f9:de:b8:bb:d8:c3:51:12:49:b0:
         c5:96:3a:79:aa:53:91:a4:0b:0b:73:f8:97:48:7d:40:db:0d:
         43:7e:b5:14:94:60:d1:40:10:c3:2f:9a:a0:48:52:eb:6d:15:
         ce:3e:75:f4:7f:f1:61:9d:12:75:7f:bc:1a:b6:c5:bc:c2:7c:
         17:ff:1f:bb:4d:67:32:4d:0f:4e:4e:2f:70:4a:2c:26:af:9a:
         87:ee:64:f9:0c:0f:8c:de:95:a1:50:ff:e9:64:69:36:d5:59:
         86:d5:6d:bc:6a:06:ef:ce:64:3f:62:20:b2:9f:fe:5a:1c:7d:
         33:a3:b8:33:85:e3:4c:1f:7a:09:c7:e5:c0:bf:0f:0f:ce:83:
         0c:98:37:b5:be:36:74:43:c2:80:c2:2b:6b:88:53:b6:a9:4f:
         6b:96:11:7a:89:db:ae:61:dc:65:66:12:cc:ef:39:1c:b9:cf:
         10:63:0e:8a:8f:33:8b:e5:d6:9d:d5:ce:e4:f8:96:34:e9:4e:
         ce:15:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----