Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e205982-e057-4252-8aad-3159436eb8ee.roa
File:                     5e205982-e057-4252-8aad-3159436eb8ee.roa (raw, json)
Hash identifier:          iksk2ztRB50LbfdcH53SdNFNEi9tHAQKEeTPDctWVAQ=
Subject key identifier:   9C:09:6C:A9:2C:DE:56:69:68:32:0A:6E:D4:56:8E:B3:43:EE:43:A7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       55FDDDBC6E5593F4F5D81466E46D705253A3E732
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e205982-e057-4252-8aad-3159436eb8ee.roa
Signing time:             Mon 17 Mar 2025 18:23:17 +0000
ROA not before:           Mon 17 Mar 2025 18:23:17 +0000
ROA not after:            Mon 21 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:dd:bc:6e:55:93:f4:f5:d8:14:66:e4:6d:70:52:53:a3:e7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 17 18:23:17 2025 GMT
            Not After : Apr 21 23:59:59 2025 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:09:d7:d1:3f:37:c4:ac:a0:48:84:f0:1c:
                    a6:67:fc:3b:19:09:23:74:05:fe:29:31:d8:52:1d:
                    7a:6c:95:cb:8f:a6:37:ed:33:fb:3c:cf:cc:e5:10:
                    a9:c4:fc:31:33:8a:74:a4:d6:65:47:cd:ae:33:de:
                    40:96:f6:c8:89:16:e9:82:04:6a:81:c0:f5:13:81:
                    e8:c2:fe:06:77:ef:6e:c6:6e:98:e8:82:cd:9f:f4:
                    80:de:c6:d2:0b:bc:45:db:3d:f4:e8:35:97:aa:4e:
                    e1:04:2e:37:01:dd:11:22:32:1d:7e:40:f3:0e:6c:
                    6f:82:af:65:67:37:ed:50:1e:3c:84:8b:05:71:be:
                    a2:20:4f:5c:59:54:94:3d:75:4f:47:d4:56:9b:5f:
                    d7:92:c7:af:6f:fd:e0:5f:28:20:0c:c1:a6:f3:05:
                    58:81:74:bc:8f:9a:8a:73:4f:91:97:f7:92:a9:9c:
                    37:e3:7a:15:9f:84:16:47:e3:f1:62:b3:a3:bf:da:
                    9b:30:b0:a3:69:ac:1b:66:39:9d:9b:a7:03:04:b4:
                    ca:e2:b4:fd:10:76:b5:99:d4:7b:df:c5:d2:0e:36:
                    17:63:ae:84:a1:6f:fc:02:e7:8d:f9:d6:79:81:13:
                    35:c7:04:49:62:21:29:a5:16:85:ec:3b:ec:aa:86:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:6C:A9:2C:DE:56:69:68:32:0A:6E:D4:56:8E:B3:43:EE:43:A7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5e205982-e057-4252-8aad-3159436eb8ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a5:be:61:53:e3:1b:90:de:05:04:a4:b2:10:ef:f1:90:84:
         b6:78:18:28:16:ae:3d:f2:05:bf:70:2e:95:20:31:b8:13:20:
         98:69:4c:f0:9a:70:4d:8c:65:ad:6a:7c:aa:a2:fc:7e:e9:04:
         cd:a6:d0:ba:b2:d0:09:3a:45:64:a8:ff:2e:89:f1:68:62:d1:
         78:d4:77:bc:2d:de:af:a3:69:f4:15:78:36:97:32:80:28:ea:
         f1:20:3f:95:12:db:c3:25:3f:89:56:3d:67:43:36:7e:95:25:
         fb:8f:ec:2e:e6:ab:31:05:4b:f2:c1:df:c9:31:96:1d:8b:7c:
         9b:42:2e:5a:cf:7f:af:33:f0:32:1c:ec:09:e1:7c:3d:e7:af:
         81:c0:96:72:e0:7d:93:aa:9c:74:ec:46:a1:34:07:22:03:82:
         30:ac:37:59:96:89:b1:3b:ad:93:cb:72:4a:05:e8:aa:02:8e:
         81:80:23:68:54:fb:86:ed:1f:b5:71:9e:05:c6:db:e9:da:da:
         c1:82:93:a4:3e:05:35:7e:ca:9d:54:d7:1a:fb:15:56:f0:75:
         69:11:9e:ec:89:3b:d7:ca:6c:c9:1a:84:d7:fd:b0:8e:38:90:
         2d:c2:ac:07:c1:67:51:8f:3e:cf:8f:b6:67:a4:2f:cc:ba:00:
         51:03:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----