Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/befcee8a-bad2-4b96-ae9c-28e0292c481e.roa
File:                     befcee8a-bad2-4b96-ae9c-28e0292c481e.roa (raw, json)
Hash identifier:          NPvvdk6Yfb8OmgwPqMc7ksiPBq/goudMYRbiZxJRKnc=
Subject key identifier:   6A:1D:2E:3E:A7:86:D5:DB:41:CE:B3:54:F7:CC:C3:B3:55:62:49:21
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1ED99439C5172BA325E5F612D8A8C38726C18896
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/befcee8a-bad2-4b96-ae9c-28e0292c481e.roa
Signing time:             Sat 18 Nov 2023 00:00:00 +0000
ROA not before:           Sat 18 Nov 2023 00:00:00 +0000
ROA not after:            Sat 23 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d9:94:39:c5:17:2b:a3:25:e5:f6:12:d8:a8:c3:87:26:c1:88:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 18 00:00:00 2023 GMT
            Not After : Dec 23 23:59:59 2023 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:0c:1c:c9:d2:4a:b4:da:00:0e:44:a8:ce:
                    74:f8:57:e1:9f:f2:5c:8d:14:70:07:df:2d:c2:63:
                    5f:6c:7a:26:37:09:12:32:24:e1:d3:ad:d3:b9:9b:
                    4d:7e:a0:71:9b:a2:5c:1a:25:74:56:c4:cb:02:59:
                    19:64:78:ce:79:e6:36:9a:5c:79:18:d2:07:7b:bf:
                    d0:ed:87:ca:3c:24:b9:4c:af:04:42:0a:54:67:ed:
                    1d:12:69:e5:eb:dc:ab:9f:94:40:96:4d:a2:93:7e:
                    0f:0d:dc:82:aa:14:22:ac:03:4f:7a:99:fc:7b:d2:
                    e5:f9:c4:65:f6:d0:74:a4:3a:d5:2c:22:29:56:45:
                    84:c4:e7:bb:be:06:32:c3:c2:a7:b8:93:68:d7:cb:
                    67:21:f0:08:61:06:89:8e:a0:82:7e:75:2f:4b:3b:
                    dc:3f:db:b0:6f:cb:2c:31:2a:2f:21:ba:74:2d:d9:
                    e7:c7:a6:de:64:1b:be:de:6b:64:00:4f:5b:6d:c2:
                    d4:f9:2b:f5:42:6a:9c:11:ce:34:ba:6f:85:fe:41:
                    34:b5:6a:08:7c:d2:76:f0:58:50:e9:b7:30:77:2f:
                    5e:e5:fa:5b:4a:1a:b5:f0:cc:1e:e1:5f:47:d1:96:
                    6d:44:7f:a5:60:19:8e:d1:fd:2e:c7:5e:7d:9b:42:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:2E:3E:A7:86:D5:DB:41:CE:B3:54:F7:CC:C3:B3:55:62:49:21
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/befcee8a-bad2-4b96-ae9c-28e0292c481e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:29:51:04:6d:d5:09:13:99:6e:19:a0:69:b2:43:1f:86:e0:
         4a:83:98:43:ff:c4:9c:ea:14:4a:d0:29:25:bd:42:1c:eb:a3:
         b7:bc:7a:b7:4f:2a:b5:99:e2:3c:ae:56:53:72:4f:e7:20:e3:
         78:e8:2e:1a:68:d1:ac:20:09:c6:eb:f9:4c:d5:8f:b6:94:f8:
         e9:7e:da:15:b3:e3:d0:61:c0:61:b5:45:32:82:70:08:67:2f:
         da:15:b8:ad:9c:69:7a:a8:ee:e0:15:c7:0b:40:19:37:34:eb:
         a9:79:04:aa:eb:13:d0:95:da:06:06:9a:c8:bb:3d:b4:56:32:
         bb:9a:7d:0a:6f:e1:c2:8b:2c:84:a4:66:32:5c:ae:85:f9:50:
         b8:e7:96:09:d5:cd:11:32:a4:7c:f6:b5:eb:f7:17:53:1c:d4:
         31:b9:76:ca:cf:81:0c:51:47:f2:54:59:ea:d1:97:c8:10:66:
         35:12:d7:29:f8:47:e4:11:24:2c:92:51:84:61:f9:61:6a:a2:
         76:27:bd:c4:43:29:92:0d:23:30:81:35:30:60:0f:a9:62:c2:
         44:e6:ad:02:f9:49:f2:5d:42:12:75:82:47:42:9e:e2:db:f1:
         a8:b0:70:03:13:5c:3d:da:7b:15:e5:dd:36:b7:6e:39:76:1b:
         8b:fd:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----