Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa
File:                     3537691c-1a10-4699-a8a0-4cec50a35534.roa (raw, json)
Hash identifier:          vTHcb61ZApOJYfOlkZIitOatVx7kXjqqlEnWSDh5nts=
Subject key identifier:   72:01:6C:1F:5F:60:64:C3:CA:D4:8A:A1:1A:72:03:1F:9F:3E:41:99
Certificate issuer:       /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
Certificate serial:       757F8945029821FDEF8991C37B582D1E598AC302
Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa
Signing time:             Fri 10 Jan 2025 00:00:00 +0000
ROA not before:           Fri 10 Jan 2025 00:00:00 +0000
ROA not after:            Fri 14 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        240f:80fa:8000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:89:45:02:98:21:fd:ef:89:91:c3:7b:58:2d:1e:59:8a:c3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883
        Validity
            Not Before: Jan 10 00:00:00 2025 GMT
            Not After : Feb 14 23:59:59 2025 GMT
        Subject: serialNumber=68bb84ca77ce591e5387b36358c4513f976b4018011cfeb0abbc08084e41f51a, CN=4257e925-715f-47a2-893e-0e3f97ec7e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b8:1f:0e:5b:aa:94:50:1d:79:51:4b:a6:8f:
                    c6:02:32:18:8c:36:46:54:4f:25:ba:50:f9:57:c3:
                    f3:41:e2:e0:9d:85:c5:2a:a7:48:03:4b:43:14:e7:
                    e6:3a:21:7b:87:44:d1:5e:33:0d:c2:55:0d:72:27:
                    b6:4c:c7:39:a3:60:19:76:e3:3a:02:0f:15:08:36:
                    f9:9f:4b:2a:8e:b4:b2:dc:7a:d9:fa:81:26:f2:f2:
                    65:41:41:b3:62:12:8f:bf:5b:df:60:36:8a:3a:91:
                    fe:e2:e2:0d:68:eb:29:9f:65:eb:64:86:8e:fc:68:
                    9c:86:c7:8c:83:fc:68:ad:82:21:04:ba:a1:a8:33:
                    88:f9:d8:60:e4:38:37:45:01:eb:44:b4:af:b5:f4:
                    79:ba:0e:29:e9:d6:29:b9:f9:51:c2:3e:63:df:a1:
                    b3:de:f8:d5:a2:4b:0c:35:d7:7d:e7:c1:a6:0c:8c:
                    5f:3b:3b:fc:53:6b:15:4c:b4:ac:6c:2f:b4:ab:b7:
                    b6:cf:0e:0d:2f:cc:af:c7:b0:c1:70:ba:49:8c:f0:
                    6c:87:0a:34:b3:70:c0:4b:b5:da:76:e2:7f:a2:b2:
                    df:4c:a3:bf:22:10:29:07:07:fd:30:d6:b1:6f:75:
                    33:24:f0:fd:6b:56:b0:43:f6:17:5a:2c:b1:bd:4c:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:6C:1F:5F:60:64:C3:CA:D4:8A:A1:1A:72:03:1F:9F:3E:41:99
            X509v3 Authority Key Identifier:
                keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/3537691c-1a10-4699-a8a0-4cec50a35534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:80fa:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:de:8b:01:03:98:f8:4f:3c:2a:9c:bf:24:93:6d:50:1d:
         54:92:7c:6c:21:b9:9a:37:67:90:5d:1e:16:17:3e:d2:60:a0:
         8a:2c:24:8e:27:dc:0e:4d:d0:fc:6d:98:37:b0:2c:a3:e1:a9:
         57:1e:44:2d:d9:6d:75:84:8f:7e:d8:54:a9:92:f0:5f:7b:2a:
         13:88:71:b3:f1:5b:11:df:e3:11:77:66:dd:63:4a:05:62:f1:
         50:a1:c9:06:83:eb:ef:2a:14:83:44:59:e9:1d:ad:82:00:9c:
         57:fc:85:d4:fc:0c:ad:e5:d1:8b:14:22:96:f9:91:0b:c4:bb:
         e3:c9:2c:92:20:14:4f:ab:9b:be:be:5e:c1:da:04:bc:65:25:
         cf:24:ac:17:72:75:32:13:52:ac:dc:64:88:5f:27:b0:85:84:
         3b:84:2e:21:93:18:39:b6:54:3c:98:24:91:53:1f:2f:b5:be:
         ff:b2:9e:b0:9f:2a:b9:78:4e:9d:81:cd:05:07:e8:9b:b2:b7:
         e5:50:fd:d5:21:59:27:a7:38:8c:5c:bb:b6:d2:f0:59:93:e2:
         df:0b:c2:45:78:ee:67:9c:5d:8e:b3:0b:5d:12:61:fe:7a:6e:
         37:97:2b:0f:7d:6c:49:16:6f:7a:ec:c0:a1:85:a7:8e:cb:31:
         a3:b0:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----