Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02df496b-8f95-45d3-9e79-1fdde5ddfed8.roa
File:                     02df496b-8f95-45d3-9e79-1fdde5ddfed8.roa (raw, json)
Hash identifier:          ilqxpKh1HGxm9MA+T2bkoSvjc+AS67mC4EonOglRRYY=
Subject key identifier:   96:AC:ED:C7:F1:AE:A1:78:B3:1B:5D:E7:E8:02:D9:83:77:A4:DF:13
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       62AA1D609373625A32805F9BBF129504E826EB5A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02df496b-8f95-45d3-9e79-1fdde5ddfed8.roa
Signing time:             Sun 24 Sep 2023 00:00:00 +0000
ROA not before:           Sun 24 Sep 2023 00:00:00 +0000
ROA not after:            Sun 29 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:aa:1d:60:93:73:62:5a:32:80:5f:9b:bf:12:95:04:e8:26:eb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 24 00:00:00 2023 GMT
            Not After : Oct 29 23:59:59 2023 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:de:d2:04:a4:07:7f:43:ae:13:e1:46:01:
                    8b:7b:83:55:a6:b6:d6:ba:53:bd:e5:b3:ae:4a:07:
                    f4:76:7f:76:90:33:9c:62:99:2a:6e:f1:0c:c4:91:
                    b6:cf:c3:ad:4a:2d:e8:91:15:84:06:74:7d:25:d8:
                    11:87:e3:3c:cd:59:cb:c9:27:37:05:53:70:92:f5:
                    e5:dd:b5:f2:09:51:7b:7f:b3:61:18:42:72:90:62:
                    9f:01:89:90:a1:24:a0:b8:c2:49:bc:0d:66:e0:e4:
                    7f:d0:76:d8:24:81:09:d5:91:0c:98:fb:71:e1:29:
                    c4:23:2c:eb:e9:34:96:19:eb:f2:82:91:b7:46:1b:
                    21:9f:e9:de:83:d9:c7:6a:33:0b:ea:20:88:14:8b:
                    1c:0c:63:81:b5:b5:22:9a:4b:2b:8a:63:f4:08:6e:
                    1b:9d:40:b8:c4:d9:60:db:9e:f5:c0:68:34:46:a3:
                    79:fd:31:5e:fe:1a:84:36:81:fd:3a:40:cb:e1:9f:
                    50:bb:46:ce:30:38:ad:8a:50:55:8e:d1:61:e1:a1:
                    d9:d3:d2:53:4c:77:41:14:33:91:27:e5:0b:16:78:
                    3b:ea:e2:d0:6d:91:bd:61:02:bf:3e:3f:95:87:7f:
                    92:ec:f5:00:6f:35:0c:f4:6d:da:4e:81:9a:fe:5d:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AC:ED:C7:F1:AE:A1:78:B3:1B:5D:E7:E8:02:D9:83:77:A4:DF:13
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/02df496b-8f95-45d3-9e79-1fdde5ddfed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:70:14:84:98:41:3b:04:0a:23:c3:6e:77:c8:34:3c:22:
         e0:88:7a:b1:b6:e3:1c:90:8a:d5:90:26:46:2e:da:d2:5d:74:
         3f:9b:ee:6b:86:b3:d4:5c:3f:75:79:25:ae:91:72:31:6e:af:
         bf:1c:74:1d:b8:03:ee:ae:af:e0:c6:98:c1:bb:53:9a:58:8f:
         25:4b:0b:86:b2:76:9f:cf:5b:71:67:0f:10:cb:1d:a6:26:b9:
         a1:02:89:8d:ca:55:c1:b8:b7:1e:2d:60:93:73:be:33:ee:cb:
         5c:17:1b:e7:cd:91:e8:a6:67:3e:83:85:43:49:5c:06:b1:68:
         6c:94:d5:c7:a9:02:1a:8b:0d:e6:ec:21:0d:8c:b1:a0:78:5a:
         27:01:5a:d6:9b:57:c3:23:cb:68:7e:41:25:3b:5a:5b:e8:6b:
         79:98:00:0f:47:95:6d:bd:d8:c4:7d:09:13:90:ab:fa:9f:e7:
         fc:8b:8f:96:09:ac:00:67:24:df:c7:d2:5a:0d:af:67:51:df:
         01:65:31:74:ca:56:09:56:26:29:a1:17:d5:b4:29:60:54:5b:
         d7:43:68:3b:80:74:eb:61:07:a6:8b:cd:ed:a6:d2:dd:c0:9f:
         7c:99:05:9d:fc:54:13:7c:97:20:ad:2a:21:c9:b7:cf:70:6a:
         c9:bc:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----