Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aca4a52-0db9-4c02-821a-8490033a259d.roa
File:                     9aca4a52-0db9-4c02-821a-8490033a259d.roa (raw, json)
Hash identifier:          urM6StuKF/blmt/+MeKIm20ShztnYC6JD2LrXGT//aY=
Subject key identifier:   C6:BD:1E:FE:21:CB:02:8B:3A:EF:D8:4B:FC:F1:EF:C7:86:F1:E4:18
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       78E00274ECDAB5E84E36A83DE0E522488645B7E4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aca4a52-0db9-4c02-821a-8490033a259d.roa
Signing time:             Wed 15 May 2024 00:00:00 +0000
ROA not before:           Wed 15 May 2024 00:00:00 +0000
ROA not after:            Wed 19 Jun 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e0:02:74:ec:da:b5:e8:4e:36:a8:3d:e0:e5:22:48:86:45:b7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 15 00:00:00 2024 GMT
            Not After : Jun 19 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:18:5c:f1:f8:dc:04:aa:fc:b6:0b:64:19:
                    46:a6:e9:eb:34:2c:91:c0:d9:2d:e9:d3:4b:b1:f1:
                    90:50:9f:ac:df:4f:40:85:e2:2e:85:70:8a:01:49:
                    f1:23:2b:84:18:7c:6b:6c:75:6b:7d:b4:b5:a4:42:
                    67:69:be:93:90:e7:f4:c9:f3:42:ba:33:71:7a:85:
                    c1:9d:47:3c:1a:ba:e1:c0:a9:e2:14:ed:e0:af:23:
                    2c:e5:f4:a1:90:e2:33:06:47:20:9e:d8:3a:9c:0f:
                    fd:b2:40:2d:53:61:b0:48:c7:99:b5:ea:10:01:cd:
                    d7:81:4f:e0:b7:1d:95:93:4f:2b:51:b5:e1:84:08:
                    59:c8:20:18:01:1e:d4:a7:df:1d:f6:a4:2b:1b:de:
                    50:1c:e3:dc:7a:88:fe:26:af:d4:8a:46:6b:58:5d:
                    6b:92:db:d1:68:e7:00:a6:d8:69:3f:ee:55:ce:39:
                    54:d3:4b:b2:9e:ea:e3:85:95:06:cc:d9:c2:9b:dc:
                    68:ca:5a:b2:44:70:c9:3c:9c:d5:ac:71:b1:ce:5b:
                    28:2a:1a:1b:e8:12:9b:1d:37:ad:8d:df:e4:d1:37:
                    fc:b9:7a:35:6a:24:fb:70:97:34:e5:33:7c:b0:6a:
                    16:0a:50:0d:c8:ae:78:5a:3d:26:a8:14:e0:5c:55:
                    f8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BD:1E:FE:21:CB:02:8B:3A:EF:D8:4B:FC:F1:EF:C7:86:F1:E4:18
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9aca4a52-0db9-4c02-821a-8490033a259d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:84:9a:14:0d:3e:f2:d2:e7:c1:7b:ac:e4:c3:7f:d5:f0:70:
         e2:f1:f7:44:ec:2b:bc:eb:e7:17:7c:65:c2:e1:78:6a:2e:74:
         60:7b:64:48:bb:39:8b:1a:a8:8a:ad:8f:bb:66:3b:6a:64:06:
         70:da:48:8c:1c:fd:5b:58:71:2d:e8:68:f4:67:29:c2:01:be:
         f1:d8:b5:e9:de:26:30:2c:06:7c:0e:e2:e3:60:f4:78:05:a2:
         db:4e:93:d5:c1:87:fb:b4:e7:5d:28:f7:09:d4:b6:6d:11:72:
         4e:e4:1d:ff:81:c1:76:c9:dd:08:b3:5f:88:ef:a6:c9:6f:83:
         9a:8a:71:f2:fe:63:5a:b2:65:43:b9:23:db:4d:94:2f:e6:2c:
         59:52:87:24:3c:0a:7f:13:7d:2e:58:9b:44:d6:9f:89:a6:9e:
         a8:df:d2:7e:5e:11:e4:39:03:e1:14:e9:5c:80:9d:a7:3e:d4:
         1f:07:f7:de:00:8c:f2:1a:18:a7:af:59:06:e9:85:c7:eb:59:
         29:0a:b7:72:06:2e:be:99:83:e9:43:74:6a:0d:19:18:5e:f2:
         a2:71:ff:c4:4e:b6:6d:46:60:50:60:df:e6:f9:67:0e:a9:26:
         5a:d6:75:ac:e9:93:7b:bb:ed:d4:20:39:63:a8:4d:b4:e5:42:
         5d:1f:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----