Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/49b0ffda-0661-4d19-8b89-d3757df6b91a.roa
File:                     49b0ffda-0661-4d19-8b89-d3757df6b91a.roa (raw, json)
Hash identifier:          VDIWRC2U0cV9fFY15nb9QpRzL0/GPWf9APr64SAsXsw=
Subject key identifier:   71:77:D8:98:DA:6F:B2:51:42:06:F6:A1:F4:EE:26:2A:9E:7C:5C:AA
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       01103420164C295C83835F55096218B8BA7429F7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/49b0ffda-0661-4d19-8b89-d3757df6b91a.roa
Signing time:             Mon 14 Aug 2023 00:00:00 +0000
ROA not before:           Mon 14 Aug 2023 00:00:00 +0000
ROA not after:            Mon 18 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:34:20:16:4c:29:5c:83:83:5f:55:09:62:18:b8:ba:74:29:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 14 00:00:00 2023 GMT
            Not After : Sep 18 23:59:59 2023 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:67:fd:18:68:32:96:82:52:ef:b4:dd:55:
                    32:fd:fb:8d:7f:1d:d6:a1:60:4f:69:3a:2f:7a:5b:
                    e8:d1:61:84:dc:a5:e6:a8:30:e1:ad:d3:bd:89:c6:
                    6a:1c:85:68:24:a6:c9:43:30:fa:3f:88:d7:ed:42:
                    ed:cf:9f:d1:11:74:ad:99:5d:78:95:67:61:39:5b:
                    6f:3a:40:35:84:f4:d7:83:62:df:c3:18:4d:3e:e3:
                    70:8e:ff:39:ff:51:fa:3f:38:30:ae:7f:07:7e:65:
                    70:51:4d:40:c8:08:25:05:8c:1e:a4:ad:bc:2a:cb:
                    f9:7f:2f:a1:ad:94:72:54:fc:1b:6c:fc:c8:59:71:
                    e0:de:a9:89:d9:04:a9:3a:a0:a8:55:fc:01:3f:7f:
                    dd:6e:1e:d9:d2:c8:72:1a:b8:24:5c:d0:0d:df:57:
                    3d:5a:95:d2:e1:82:86:28:d3:9d:43:4d:da:4a:81:
                    47:3f:94:4e:4d:f6:a6:bd:18:44:d8:0d:0e:16:29:
                    f7:3d:bf:58:f3:1a:6b:42:a6:17:4a:94:db:c1:c3:
                    1a:55:0e:ac:1d:b7:81:73:b1:15:85:68:28:20:a1:
                    03:27:22:29:76:bc:ef:f6:63:99:cb:70:8d:af:b3:
                    a2:8f:ec:9f:2a:3c:19:3a:7b:e4:e0:4c:d1:f9:31:
                    57:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:77:D8:98:DA:6F:B2:51:42:06:F6:A1:F4:EE:26:2A:9E:7C:5C:AA
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/49b0ffda-0661-4d19-8b89-d3757df6b91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:b0:e7:c0:96:d1:1d:03:2e:6c:b6:88:3d:a5:38:70:9d:
         fb:99:54:18:7d:cd:55:40:ae:30:6e:82:2a:57:46:37:87:8d:
         50:60:3d:c2:0d:ca:d7:55:ea:a2:36:3f:47:fb:ce:5b:e1:06:
         e3:46:8d:f2:3d:c8:1d:10:24:4f:5d:22:7c:18:02:ea:29:4b:
         fa:35:0c:b0:0e:fd:f6:2e:ad:23:62:ee:c5:3a:4e:d2:5d:86:
         08:28:da:d0:1a:4b:7a:bf:e7:47:8a:93:c1:62:a4:b7:71:20:
         7b:71:73:d3:7f:3e:6c:43:a4:93:c0:a3:2d:6f:a1:da:01:5b:
         2c:32:38:39:8c:c5:ef:63:78:d7:c5:26:38:77:c3:af:8b:57:
         61:4e:cf:ec:7c:c6:61:62:31:2c:0c:fe:67:cb:cb:94:e8:50:
         9c:7b:ab:da:4d:fe:ee:6f:ce:3c:66:45:dd:99:01:dd:ae:ea:
         6f:b7:26:e2:06:e2:0f:0e:15:a8:76:62:98:65:24:af:3e:ec:
         91:a2:d8:8d:e4:37:b3:8a:89:5a:46:fd:cb:5d:56:67:38:ed:
         f6:98:be:30:3a:f9:87:c2:62:e6:95:6d:bf:ee:89:2c:bc:14:
         67:ee:0e:f0:04:2a:bd:49:44:bc:ae:a8:25:a1:60:9b:ad:5c:
         08:99:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----