Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8da072-8392-4882-a7ad-eb6e89e0e42e.roa
File:                     3c8da072-8392-4882-a7ad-eb6e89e0e42e.roa (raw, json)
Hash identifier:          fBsqkw1xWmHXLH668j3dcich+kdRsJtxbzh3It5c6r0=
Subject key identifier:   E1:20:BE:6F:D4:F5:25:4C:50:F0:64:2E:23:5B:C4:9B:D5:D7:4E:51
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       B700078F51FEB140E5141F5A008071FA9397D2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8da072-8392-4882-a7ad-eb6e89e0e42e.roa
Signing time:             Mon 13 Jan 2025 00:00:00 +0000
ROA not before:           Mon 13 Jan 2025 00:00:00 +0000
ROA not after:            Mon 17 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:00:07:8f:51:fe:b1:40:e5:14:1f:5a:00:80:71:fa:93:97:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 13 00:00:00 2025 GMT
            Not After : Feb 17 23:59:59 2025 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:ae:a0:60:e7:75:c5:a8:f2:33:4a:49:58:
                    df:19:3c:31:6b:98:9f:50:ec:67:3e:1c:ff:7f:50:
                    ec:87:2b:10:82:46:01:7c:e0:57:e3:73:c8:16:9d:
                    be:df:83:27:97:0f:a7:a0:30:ee:42:43:67:ac:b2:
                    f0:8f:09:4e:64:38:35:a6:4d:f6:9d:ac:a7:b8:29:
                    ec:66:49:3f:fa:3c:13:be:bc:85:7e:5b:78:59:48:
                    2a:b6:77:51:ad:da:36:9c:8d:1a:cd:38:1e:a2:02:
                    3d:a5:5c:dc:67:ef:ce:5a:1f:60:fa:73:41:cf:cb:
                    df:e5:c8:39:b9:c9:cb:c8:79:26:dd:4c:31:b0:8d:
                    fd:a8:6b:c3:91:06:e7:f9:dd:8b:0b:d3:03:02:47:
                    78:19:5f:39:07:be:17:d3:e3:ad:15:27:ef:b0:90:
                    a8:a5:ec:c1:0f:58:68:ac:6f:24:e5:ae:df:6c:c9:
                    87:e9:5a:db:a3:d4:19:84:f5:f5:ca:3d:fd:2b:3c:
                    d5:34:15:43:95:21:70:ea:f3:fe:69:62:b5:a3:7e:
                    09:d6:80:f8:5a:a4:ca:6f:43:00:71:05:57:9f:2c:
                    07:e2:1c:71:a6:d0:20:6f:ca:a0:6a:11:1f:a8:36:
                    62:8b:35:10:33:b3:3e:87:52:4d:5c:cb:34:7d:e6:
                    ff:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:20:BE:6F:D4:F5:25:4C:50:F0:64:2E:23:5B:C4:9B:D5:D7:4E:51
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3c8da072-8392-4882-a7ad-eb6e89e0e42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3b:78:0a:0e:3d:55:83:40:a4:9c:0c:8f:44:75:ac:89:5e:
         cd:9c:29:a3:7b:58:3d:be:d0:97:95:c1:29:3d:15:4d:be:5d:
         b2:ec:f9:8e:28:21:5f:8d:6c:ab:64:9f:13:da:00:59:0f:70:
         60:b2:00:f4:5e:a2:a7:36:74:53:db:6c:05:5a:93:ae:a0:67:
         fd:38:59:ac:5b:55:bd:eb:fd:f5:fe:f4:c8:18:f1:a5:7d:f3:
         db:f7:87:2b:a5:3f:fd:3f:b9:91:85:7f:1e:c8:5b:31:bc:8e:
         5b:10:47:73:79:fa:07:16:5f:e9:18:1b:28:b1:41:cf:c7:2c:
         a5:1c:cd:a4:9e:b4:6f:9f:f0:fa:8a:17:b7:58:5f:74:66:be:
         27:93:e3:7b:0b:2a:61:63:a1:43:54:e8:c7:2e:b1:fe:75:c9:
         71:ba:7b:97:d8:d3:f7:25:98:ec:c8:ae:f6:7e:8c:59:13:49:
         7e:8a:f8:64:1d:51:83:29:12:25:8c:01:3c:88:c9:5c:f3:b5:
         95:22:1e:09:ea:16:95:25:24:d7:9e:78:67:52:c0:e7:4c:4e:
         98:f9:d6:f3:ba:3c:9a:9a:da:a4:c2:9f:9a:d8:36:c2:6d:97:
         c2:10:f5:9f:b6:89:85:a5:52:f9:d5:e1:52:0c:47:33:8e:e4:
         13:ca:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----