Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1ebb4-2671-4bcd-9424-0142e473277a.roa
File:                     aef1ebb4-2671-4bcd-9424-0142e473277a.roa (raw, json)
Hash identifier:          ej9/l+ruM9zqiE8dSVYJgUINftScq4Ut6h7PU9ynuPQ=
Subject key identifier:   AB:E5:52:1D:2B:E5:AE:C7:45:CF:3C:E8:61:38:F5:68:18:F5:FD:2F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3E6466E6F1D89026607149DD057B7D9F356E542B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1ebb4-2671-4bcd-9424-0142e473277a.roa
Signing time:             Sat 21 Dec 2024 00:00:00 +0000
ROA not before:           Sat 21 Dec 2024 00:00:00 +0000
ROA not after:            Sat 25 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:64:66:e6:f1:d8:90:26:60:71:49:dd:05:7b:7d:9f:35:6e:54:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 21 00:00:00 2024 GMT
            Not After : Jan 25 23:59:59 2025 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:2e:31:c2:8e:d2:38:e8:66:9d:7d:de:97:
                    b0:b9:09:99:95:51:11:1f:3a:d2:5a:f4:8a:6d:27:
                    ce:20:00:44:ad:8d:d8:37:d6:b0:74:39:3b:05:3b:
                    ed:61:a5:38:14:b4:14:7c:25:1d:44:be:f2:a3:12:
                    de:da:af:8b:e9:7e:98:6e:e6:63:ae:f0:18:8d:a7:
                    21:a6:9c:db:e8:d8:28:14:cf:b0:14:fd:50:22:e9:
                    15:7c:c3:dd:77:aa:61:f8:c5:76:6e:4e:c0:dd:74:
                    63:9f:fa:d4:66:f8:c9:49:f7:f6:45:5c:1d:7d:a2:
                    a5:0e:fe:fe:4c:1c:03:c2:08:b5:cb:e4:6b:a5:b9:
                    6c:6b:5c:10:c1:17:35:0b:e5:28:11:f6:3d:76:99:
                    ee:02:82:9b:ac:8b:37:a3:ad:6e:0d:7e:3a:cf:14:
                    8e:ff:4e:87:7c:41:95:c1:c0:ec:8e:9b:86:31:fe:
                    2b:d1:fe:21:61:3d:c4:4b:79:cb:83:b5:93:77:10:
                    e7:7f:73:de:6f:a7:41:c5:a8:00:2a:3c:91:22:b1:
                    f4:22:2c:3b:d7:23:eb:17:10:c4:94:a5:ba:5f:c9:
                    54:22:8a:ac:fa:a3:4e:55:f2:34:d0:83:1e:61:a6:
                    ec:4d:6e:e7:52:d2:3a:38:86:bc:05:c0:0e:76:8f:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E5:52:1D:2B:E5:AE:C7:45:CF:3C:E8:61:38:F5:68:18:F5:FD:2F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/aef1ebb4-2671-4bcd-9424-0142e473277a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:de:3d:ed:1f:64:79:b0:d5:fd:93:32:9c:78:fd:50:8a:4b:
         01:04:33:4e:86:55:09:18:3b:06:a5:55:34:e2:2e:91:db:1c:
         25:12:49:7c:6f:25:34:18:9a:b8:04:4f:60:0f:eb:3e:23:f5:
         81:2d:b9:f6:b6:39:84:58:34:e1:41:0d:40:ce:bf:48:da:96:
         c3:e7:78:60:c3:5f:03:b9:85:be:16:2a:bc:17:c2:8f:da:37:
         19:30:71:a8:0e:eb:cc:70:52:90:73:9b:ff:c6:26:1a:ef:23:
         1b:1e:fe:94:8b:2f:c8:ad:87:15:45:09:de:29:a9:b4:06:0e:
         41:2d:73:ea:cc:15:fb:9a:af:3c:f5:0a:11:21:e8:97:b6:cc:
         a6:65:e3:21:dc:82:87:1e:c9:07:7a:2e:c4:2b:ca:cd:88:6f:
         d7:b0:c2:90:e1:56:e3:b4:f6:e8:99:7d:62:ed:1e:ee:a8:98:
         38:31:3b:5c:60:a2:b1:2f:c3:87:e5:e1:fe:a9:22:fa:d7:49:
         d8:68:9d:86:88:97:f2:c1:98:61:36:fd:07:b0:d2:2e:b6:0f:
         d2:8c:9e:de:2c:e8:5d:96:b0:fc:f1:31:eb:90:8d:8a:90:e9:
         e2:73:c5:21:fa:d3:82:71:30:ad:61:01:01:ba:69:8c:3f:52:
         80:81:37:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----