Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7564d1cb-aed8-4674-804c-2d97239da7ae.roa
File:                     7564d1cb-aed8-4674-804c-2d97239da7ae.roa (raw, json)
Hash identifier:          aLVLPXhAAIne5ehGH8M/6meEkisGXiGItVhBpGuFjKI=
Subject key identifier:   B4:76:99:93:98:B7:06:1E:6C:18:43:CD:67:AF:11:88:B6:F7:4E:3A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       270CD96683D2723C965909297C28F104C0456B66
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7564d1cb-aed8-4674-804c-2d97239da7ae.roa
Signing time:             Fri 15 Dec 2023 00:00:00 +0000
ROA not before:           Fri 15 Dec 2023 00:00:00 +0000
ROA not after:            Fri 19 Jan 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:d9:66:83:d2:72:3c:96:59:09:29:7c:28:f1:04:c0:45:6b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 15 00:00:00 2023 GMT
            Not After : Jan 19 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e1:1d:e1:d7:2b:c4:a4:bd:ad:5f:5f:55:56:
                    5c:66:a2:54:fd:16:fa:b6:f7:ff:c4:96:07:d4:ed:
                    5b:6e:62:3e:3d:02:2d:bc:3c:29:6d:1c:0a:7f:8d:
                    c4:a4:4d:da:72:68:ca:a2:f3:bd:ac:cb:80:13:b1:
                    ec:b4:15:05:ab:bf:25:21:59:33:d6:74:57:7a:e1:
                    8f:26:8c:36:24:5c:1c:af:f3:e7:44:03:d6:56:fe:
                    14:b6:17:d9:80:53:bb:2b:03:c8:9c:2b:ab:91:da:
                    66:5a:2a:83:69:b1:f3:73:ad:ee:22:44:bc:9a:2f:
                    0e:66:54:f0:bc:4f:b5:1e:74:19:58:a9:ec:da:77:
                    1d:b5:f3:68:cf:b2:25:f1:90:93:11:0c:0e:06:ab:
                    f6:c7:44:d7:ed:83:23:e1:3a:05:8a:3d:4d:44:c9:
                    ae:b3:54:03:3a:b0:b4:07:cb:73:93:29:98:74:fa:
                    52:52:1a:a3:39:06:c8:52:e7:86:b0:0b:33:5d:cc:
                    70:1a:4b:cc:fc:28:52:69:c4:dc:97:51:7b:8f:8a:
                    32:57:b0:67:1a:71:7e:d1:77:cb:2a:17:83:16:2f:
                    94:d8:42:2e:f5:f6:99:a4:d7:23:56:12:46:ce:b8:
                    51:fc:b7:5b:11:0b:9c:1d:58:1d:77:c7:a5:67:f4:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:76:99:93:98:B7:06:1E:6C:18:43:CD:67:AF:11:88:B6:F7:4E:3A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7564d1cb-aed8-4674-804c-2d97239da7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:92:ca:33:1b:43:8e:ae:3f:b9:e5:45:a4:7d:fd:13:fa:
         d2:b6:45:0f:bd:08:01:57:de:5d:b1:0b:67:58:90:b7:98:30:
         88:45:37:d5:44:a0:17:ad:67:89:8e:29:5b:4c:27:42:87:d9:
         e0:d6:b2:6b:b6:85:b2:12:7d:17:11:70:83:fc:33:06:ce:01:
         5b:95:dc:3a:0b:e0:d2:41:bb:f4:9b:cb:a6:23:dd:4c:3c:24:
         e7:2b:f8:a7:ec:55:e2:63:21:f5:a9:97:a9:7d:44:55:8e:f4:
         bb:87:a8:2a:5e:c2:f2:b9:ad:9a:2c:9e:e0:3c:5d:a0:52:e1:
         97:85:f5:eb:80:37:d5:75:f7:2c:49:f9:bc:21:38:f9:da:70:
         4b:2c:36:8d:2a:cb:f7:e4:1b:c8:4e:82:56:98:2c:0a:f2:44:
         d2:6d:86:0e:d8:ea:01:ac:02:8c:b0:4e:c6:6c:a9:e2:b4:e9:
         8c:70:ea:bc:a0:e7:11:38:83:bd:d8:87:63:cb:e9:89:b4:2c:
         0c:7f:44:63:c8:3c:c2:ad:e6:e5:b2:20:bc:f5:58:49:51:dc:
         e4:6b:60:bc:d8:ef:47:48:97:64:83:7f:4f:cf:a2:36:54:42:
         5f:25:11:2d:52:df:94:7e:cf:d8:ae:8b:c4:51:8e:cf:fd:22:
         5b:c6:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----