Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a55bec56-6b59-4c8c-9378-f55da7443849.roa
File:                     a55bec56-6b59-4c8c-9378-f55da7443849.roa (raw, json)
Hash identifier:          7KbouZOAaOzzRktUc1BDAVXXZFFaKv5pfUM5O97A/VI=
Subject key identifier:   E4:78:A8:CB:EF:DC:35:1A:F4:3B:54:37:B0:36:53:D8:98:CE:63:DB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       625773F40A4490B33E1E05A25273446783238D9C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a55bec56-6b59-4c8c-9378-f55da7443849.roa
Signing time:             Mon 22 Jul 2024 00:00:00 +0000
ROA not before:           Mon 22 Jul 2024 00:00:00 +0000
ROA not after:            Mon 26 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:73:f4:0a:44:90:b3:3e:1e:05:a2:52:73:44:67:83:23:8d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 22 00:00:00 2024 GMT
            Not After : Aug 26 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:9b:a6:35:b5:c4:20:e0:38:6d:73:3f:16:
                    4f:9a:e6:78:21:b9:a9:b4:c5:2d:a5:06:ea:05:13:
                    70:2a:ba:d6:91:49:be:79:5f:e8:4f:db:fa:f3:6a:
                    40:96:15:93:88:67:14:1f:a3:4a:e3:59:2d:a4:0c:
                    06:ba:2a:48:01:e2:22:87:42:df:55:6e:a7:4d:63:
                    44:a6:3e:09:6a:62:72:87:83:39:b8:75:41:1d:4e:
                    29:11:ce:b4:40:3c:5f:b8:bc:0d:81:bc:76:f6:81:
                    4a:8a:88:0f:f1:5e:b9:be:58:40:37:83:18:b4:60:
                    a5:33:c3:23:30:48:86:3d:e9:e7:71:bc:02:2e:7b:
                    f7:43:42:12:fc:0a:41:e8:bf:56:85:21:6c:02:79:
                    49:fe:70:b5:48:cc:0f:2b:f7:1f:27:61:fc:34:db:
                    5c:de:30:fb:3f:47:8a:d7:5b:a6:51:0f:f1:52:62:
                    a2:bc:8b:21:0f:3a:9c:e3:dd:47:f3:c6:a7:86:58:
                    89:09:6c:08:f5:4c:a5:26:5d:13:20:c2:65:a0:92:
                    7e:88:5b:99:6a:a2:0a:86:d8:47:aa:30:b7:30:c8:
                    52:02:c1:fd:e8:99:1b:6f:76:5b:46:27:76:fa:49:
                    fc:1e:8f:fe:68:34:ed:eb:a9:84:6d:17:64:bb:13:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:A8:CB:EF:DC:35:1A:F4:3B:54:37:B0:36:53:D8:98:CE:63:DB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a55bec56-6b59-4c8c-9378-f55da7443849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:14:d2:e5:20:fe:53:e9:25:61:b6:a4:5d:7d:e0:b7:81:07:
         55:86:b3:0a:a9:e7:16:10:da:4a:20:9d:84:a4:26:3e:3a:d6:
         28:66:c9:69:05:a3:19:5b:4e:51:3d:51:7f:93:c9:7b:d7:c1:
         7c:f8:d9:62:89:39:9e:03:8e:9f:6c:9f:4b:99:aa:67:3b:88:
         b0:85:66:f3:c8:01:bb:94:9a:10:5c:52:e5:46:50:33:15:d0:
         2b:8f:53:bc:e4:8d:48:4f:07:90:cf:da:55:37:97:60:21:30:
         04:78:64:73:fe:b7:20:1f:f4:52:25:c8:14:0a:39:59:9c:44:
         34:cc:8e:ab:af:50:6d:2f:59:29:64:3e:8d:71:2c:7d:43:f1:
         cd:c9:b9:0d:d0:39:ed:63:32:f4:68:91:85:0b:a6:25:fa:68:
         13:58:f0:e0:33:6b:fb:4f:f4:c7:07:30:74:f1:3b:3d:a3:a5:
         46:6b:ec:52:ca:fd:7e:51:b7:e5:db:91:a4:6e:c0:43:70:6b:
         f6:f8:a5:92:24:92:92:a2:d3:1d:64:61:34:28:3c:b6:ac:f1:
         6c:bc:9f:d2:9c:e7:a0:03:3a:7c:11:e4:b2:10:08:3b:02:5c:
         34:17:83:6c:19:7e:10:67:22:b1:fc:9d:ee:d3:e4:4d:e5:c4:
         23:ad:26:1c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYldz9ApEkLM+HgWiUnNEZ4MjjZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzIyMDAwMDAwWhcNMjQwODI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMzAwYWVjMTk0OTJiNWY3YzlhZjVkMGYwMGJhY2RmNWVk
YzJlOGVmOWY0ZDNlMzliOThhNjExNWM2ODg1ZTgzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJf5umNbXEIOA4bXM/Fk+a5nghuam0xS2lBuoFE3AqutaR
Sb55X+hP2/rzakCWFZOIZxQfo0rjWS2kDAa6KkgB4iKHQt9VbqdNY0SmPglqYnKH
gzm4dUEdTikRzrRAPF+4vA2BvHb2gUqKiA/xXrm+WEA3gxi0YKUzwyMwSIY96edx
vAIue/dDQhL8CkHov1aFIWwCeUn+cLVIzA8r9x8nYfw021zeMPs/R4rXW6ZRD/FS
YqK8iyEPOpzj3UfzxqeGWIkJbAj1TKUmXRMgwmWgkn6IW5lqogqG2EeqMLcwyFIC
wf3omRtvdltGJ3b6Sfwej/5oNO3rqYRtF2S7E3r9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5Hioy+/cNRr0O1Q3sDZT2JjOY9swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2E1NWJlYzU2LTZiNTktNGM4Yy05Mzc4LWY1NWRhNzQ0Mzg0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAAIU0uUg/lPpJWG2pF194LeBB1WG
swqp5xYQ2kognYSkJj461ihmyWkFoxlbTlE9UX+TyXvXwXz42WKJOZ4Djp9sn0uZ
qmc7iLCFZvPIAbuUmhBcUuVGUDMV0CuPU7zkjUhPB5DP2lU3l2AhMAR4ZHP+tyAf
9FIlyBQKOVmcRDTMjquvUG0vWSlkPo1xLH1D8c3JuQ3QOe1jMvRokYULpiX6aBNY
8OAza/tP9McHMHTxOz2jpUZr7FLK/X5Rt+XbkaRuwENwa/b4pZIkkpKi0x1kYTQo
PLas8Wy8n9Kc56ADOnwR5LIQCDsCXDQXg2wZfhBnIrH8ne7T5E3lxCOtJhw=
-----END CERTIFICATE-----