Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ab7781d-4626-4224-9e0c-b2b347d77e13.roa
File:                     5ab7781d-4626-4224-9e0c-b2b347d77e13.roa (raw, json)
Hash identifier:          shA+hDrxP1+z7ubbS1ZVMmGMQau7Lz+kdq2H8Q9nipM=
Subject key identifier:   1A:F8:79:6B:94:E4:04:42:6F:22:48:8B:02:61:68:D8:DF:AC:3F:06
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       1C6D3F8674D0345B263642902C24F73273BDACC7
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ab7781d-4626-4224-9e0c-b2b347d77e13.roa
Signing time:             Fri 21 Mar 2025 00:01:42 +0000
ROA not before:           Fri 21 Mar 2025 00:01:42 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:da60:c000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:6d:3f:86:74:d0:34:5b:26:36:42:90:2c:24:f7:32:73:bd:ac:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000
        Validity
            Not Before: Mar 21 00:01:42 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:3e:34:a4:c4:f8:b5:51:0b:d7:dc:70:0d:
                    f5:0e:bb:d8:78:d5:3c:26:7a:7f:fc:1f:64:ae:b4:
                    64:4d:1a:55:71:df:7d:0b:99:c6:72:e9:55:2c:ff:
                    1b:28:ba:5b:01:ad:56:08:61:7c:3a:a4:7b:03:21:
                    fa:7c:97:71:13:cc:2b:77:c8:3b:67:d5:5d:0e:1e:
                    41:99:b9:42:2b:84:44:eb:0b:e2:4d:6b:07:cb:7f:
                    3e:08:cc:0b:55:e6:1b:1b:12:70:23:74:f0:5c:1c:
                    3b:d7:18:19:9e:62:7b:07:a8:99:35:6c:a3:0d:c6:
                    81:5a:eb:68:b5:82:84:39:e0:57:2a:0e:d9:82:6a:
                    ba:82:34:ae:a9:35:58:65:c9:b4:ed:2c:f6:0a:dd:
                    e1:0f:5d:82:79:c4:42:dc:b6:ec:6d:2b:04:dc:7e:
                    92:46:f0:8f:8f:92:33:66:33:5b:89:17:8b:f0:87:
                    92:57:3c:89:6b:e4:e1:73:85:a5:96:7f:48:c2:09:
                    b7:00:13:7f:e9:95:04:dd:50:78:53:99:72:42:22:
                    34:57:0f:8b:27:08:e1:5a:c3:18:72:e5:78:7c:13:
                    7d:06:4f:49:ef:fb:5c:31:97:25:ab:b2:b6:dd:3b:
                    57:52:72:ef:52:06:e3:34:b2:e9:85:09:ba:9b:2f:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:79:6B:94:E4:04:42:6F:22:48:8B:02:61:68:D8:DF:AC:3F:06
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5ab7781d-4626-4224-9e0c-b2b347d77e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:da60:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:b2:a5:33:3d:d4:44:19:31:ae:4d:a6:9d:74:6b:39:84:f4:
         f3:08:28:79:0d:f1:88:32:cf:d8:62:d0:13:b6:57:25:0b:fa:
         e9:10:f6:7c:2f:44:26:51:9e:22:b6:27:fa:15:ee:d4:87:e9:
         93:9e:ef:e0:0d:75:77:c0:00:75:b4:db:0a:01:83:84:6e:98:
         3d:91:ce:5f:37:9b:97:86:b0:45:a4:ff:2f:6a:e1:dc:e6:ce:
         30:9e:2c:31:0c:05:9a:c2:22:cf:6a:37:ec:47:9d:c1:41:fb:
         25:7d:3d:18:28:45:a5:85:cf:62:61:af:97:3e:6d:7a:02:48:
         f0:a3:39:b4:09:f9:ae:b3:12:6c:54:7f:47:ba:2e:83:8f:e2:
         31:6d:6d:a2:37:6a:44:25:c0:7d:16:9e:2a:a6:58:71:61:0c:
         bc:df:e7:95:fc:01:30:45:73:fc:99:57:33:2c:01:e8:2f:91:
         70:cd:bb:f5:2c:55:d7:4b:72:92:0c:2b:88:de:4b:fd:e5:9d:
         b6:8b:2d:d1:7d:54:39:16:41:a4:9b:ce:e4:57:fb:63:19:f8:
         f9:be:fa:d6:76:2a:18:0d:dc:91:4c:e2:00:d6:b5:3f:ac:49:
         8b:f6:bc:af:bf:f3:b8:b8:d1:89:6b:75:4d:b6:ef:a4:66:1a:
         80:00:35:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----