Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13638daa-5928-4ed3-9c42-94d6c5a25335.roa
File:                     13638daa-5928-4ed3-9c42-94d6c5a25335.roa (raw, json)
Hash identifier:          xvtgb1+UKlKMG3ez5QQE9+CMwb2SllmdEwC6cvCnVww=
Subject key identifier:   F9:F9:6B:ED:2B:94:7A:C0:5D:17:99:0F:52:7C:68:5B:33:E5:27:B4
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4BD482D14E1CE77F302A3CC09304630CF86CD96E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13638daa-5928-4ed3-9c42-94d6c5a25335.roa
Signing time:             Tue 18 Feb 2025 17:13:24 +0000
ROA not before:           Tue 18 Feb 2025 17:13:24 +0000
ROA not after:            Tue 25 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d4:82:d1:4e:1c:e7:7f:30:2a:3c:c0:93:04:63:0c:f8:6c:d9:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 18 17:13:24 2025 GMT
            Not After : Mar 25 23:59:59 2025 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:1f:fb:89:49:76:ed:51:9e:f7:b4:df:83:
                    f7:53:59:31:74:46:10:a9:40:69:84:7b:4c:8f:8b:
                    3a:a1:78:1e:dc:65:16:30:9c:49:f5:1c:f9:20:cd:
                    51:ea:16:f0:2e:e9:77:ce:72:eb:90:bf:d0:05:36:
                    73:f2:e7:8a:5a:b9:f4:21:2d:ff:36:a8:88:ce:01:
                    61:af:f9:e4:67:f9:0d:6b:07:d4:25:00:3d:7d:5a:
                    5a:4d:5d:78:04:a7:43:c8:f3:12:01:4b:3f:f1:89:
                    2f:ea:eb:75:0b:92:f0:3e:41:e5:46:7b:ca:b7:93:
                    6b:e7:03:d3:d4:57:b7:6c:9c:95:2a:49:44:84:b2:
                    58:cf:e3:b2:80:5b:d0:15:b5:ed:9c:09:56:bb:58:
                    6a:3d:c2:2e:24:ea:1a:4e:14:99:bf:e3:f0:f1:e6:
                    ea:c0:bb:7c:20:67:f5:58:75:c4:24:89:73:9f:5d:
                    cf:30:48:b5:e6:d6:5d:52:e4:42:8a:f9:66:bf:73:
                    39:70:77:b6:b1:d8:d1:31:3c:e4:89:7b:5d:ce:27:
                    e6:d3:f6:0d:37:ee:ce:a2:77:cc:e1:69:68:34:9b:
                    bc:81:f9:cf:07:1c:f4:09:68:b5:e7:3e:0f:b4:09:
                    b1:2f:aa:43:30:d7:8f:ad:5e:f7:01:45:32:28:c0:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F9:6B:ED:2B:94:7A:C0:5D:17:99:0F:52:7C:68:5B:33:E5:27:B4
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/13638daa-5928-4ed3-9c42-94d6c5a25335.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:23:79:c5:64:32:34:51:8b:87:3e:92:d7:d1:75:33:ad:ca:
         99:a1:f6:71:c5:b0:cc:c4:a9:c0:ad:ef:3b:34:3d:12:09:e5:
         d8:db:be:82:07:99:51:84:ad:0c:ec:3b:3a:b2:6c:90:33:78:
         16:0e:97:92:e2:32:4b:73:5a:a1:fd:74:a6:e9:1c:ac:ab:76:
         94:d6:b1:ba:d7:0a:17:40:3d:e4:6a:65:92:9e:ff:1b:4f:32:
         cd:11:6a:8a:12:ac:b6:3b:e5:b6:f4:72:9c:30:da:14:a4:a0:
         bd:aa:90:01:18:72:6f:2c:65:9d:b8:b9:3f:35:e1:39:69:6c:
         e0:6f:11:1a:22:7f:1e:9f:36:19:83:b8:9b:10:0c:dc:12:8c:
         dd:82:7e:f6:c8:e3:1a:cc:fb:ef:56:fc:fe:bd:7f:7c:63:f1:
         39:f4:03:40:63:9b:2b:3f:48:bc:47:34:89:39:ae:db:24:6d:
         00:89:57:fb:88:2a:2d:59:26:12:0a:84:5b:8c:0b:69:09:52:
         4b:2d:ef:ca:20:d2:69:ec:75:0a:d4:c3:bd:d1:db:0e:d9:c7:
         db:d4:af:f3:7a:61:f1:24:98:fa:89:a1:2a:ca:1e:3b:84:93:
         eb:5c:4c:57:c4:8a:da:21:a0:1c:9e:de:d7:24:47:33:c3:8c:
         cc:0c:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----