Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71e10386-9def-4f80-8a36-12fda0f021a0.roa
File:                     71e10386-9def-4f80-8a36-12fda0f021a0.roa (raw, json)
Hash identifier:          YxOOb5FR/wznmz9SRX2YY8yCIwkculms+1JDqaP6cmw=
Subject key identifier:   8F:FB:8F:0C:10:2F:99:3C:29:B4:E8:6D:0A:E1:A3:E4:64:1D:1A:37
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       38C1924C483CDEE97F104797BC8A495E22F7D3B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71e10386-9def-4f80-8a36-12fda0f021a0.roa
Signing time:             Fri 21 Mar 2025 19:08:19 +0000
ROA not before:           Fri 21 Mar 2025 19:08:19 +0000
ROA not after:            Fri 25 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c1:92:4c:48:3c:de:e9:7f:10:47:97:bc:8a:49:5e:22:f7:d3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 21 19:08:19 2025 GMT
            Not After : Apr 25 23:59:59 2025 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:e5:73:da:c5:f2:67:b8:cb:f4:67:ea:83:
                    35:7f:47:e0:8c:e8:7e:6f:f2:63:68:6b:b8:75:bc:
                    b5:e2:88:da:a4:eb:c9:b0:1b:a8:95:b8:b2:c9:7a:
                    f2:a4:22:9b:8e:a5:27:d5:36:64:57:16:9d:5b:d9:
                    30:8d:c8:29:06:1a:14:1b:a0:af:bb:40:62:9e:15:
                    d4:bb:a5:e7:de:56:f5:ff:1a:dc:70:55:d8:30:a9:
                    aa:7b:77:10:4f:34:b6:64:85:3d:d0:fd:c1:8d:7a:
                    0c:ed:aa:e6:fd:07:03:9e:5b:de:1b:4e:90:1f:6e:
                    df:c2:13:7d:fc:81:b9:9d:bb:f0:69:66:c8:cd:52:
                    07:ae:7f:3f:9b:67:29:2d:9f:eb:6b:45:66:ec:0d:
                    97:eb:22:c8:ea:f8:51:4d:f1:1e:93:1a:3d:4e:c2:
                    4b:d5:16:72:d5:9f:28:64:f8:0c:3b:82:5e:ac:96:
                    b6:f1:2c:62:08:b0:00:bf:c2:88:f0:1e:50:e9:01:
                    45:16:91:b0:de:b8:53:da:8a:cd:c5:7e:d0:8e:e2:
                    e4:67:b6:83:7c:2f:6c:b6:76:b9:06:23:54:29:da:
                    ce:70:78:98:b9:b6:8c:85:fb:b8:93:fc:a7:17:3e:
                    0b:94:9e:af:78:17:71:a3:b3:85:33:7c:4d:54:c8:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FB:8F:0C:10:2F:99:3C:29:B4:E8:6D:0A:E1:A3:E4:64:1D:1A:37
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/71e10386-9def-4f80-8a36-12fda0f021a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c6:db:83:bb:d2:3a:04:20:fe:8e:cd:a7:57:ac:8c:da:2c:
         65:2f:c4:d9:dc:bf:77:a6:e5:b8:cf:64:5c:c8:cb:df:ca:9a:
         b3:68:23:c3:49:c1:2f:f8:e4:24:2b:e6:8c:16:5a:61:1f:47:
         63:c5:8a:a2:d2:09:72:30:dd:4d:ba:e6:37:57:7a:b0:36:97:
         10:39:d7:b5:b6:cf:6f:f7:43:dc:33:1a:8a:6e:5a:3f:25:2f:
         84:f7:74:4a:f4:30:df:be:45:67:b9:8a:15:29:0b:68:7e:94:
         eb:5b:6c:0c:fd:4d:73:e7:ea:9a:fb:83:cf:f4:46:56:1c:7a:
         f0:95:90:25:b1:75:4c:36:95:37:70:80:f8:24:3c:f6:40:b2:
         11:3f:56:76:2d:03:93:aa:62:50:79:02:80:b2:fb:89:92:24:
         fe:7b:e3:ad:24:dd:f6:31:61:a5:6e:2a:cf:ad:7f:0b:a7:40:
         e1:46:70:af:e8:9c:3f:d0:78:43:41:e6:89:1e:8e:93:15:ea:
         17:78:65:4e:00:de:66:7c:5a:d5:c6:44:9c:87:8e:50:57:42:
         1d:c0:85:4a:d4:94:6a:8d:91:fc:66:ec:80:59:c9:bd:fc:45:
         7f:ee:32:bf:72:7f:3f:f3:3a:7b:93:04:55:dc:59:e9:79:72:
         04:cf:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----