Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe469718-26c7-4af2-90c5-b5bbd933cd3b.roa
File:                     fe469718-26c7-4af2-90c5-b5bbd933cd3b.roa (raw, json)
Hash identifier:          0+vwzXz72wPQSCm/XyX8gV38AgU8U+j12qkLzE9DpmU=
Subject key identifier:   EC:5C:6D:C8:C7:2E:EB:1F:5A:6B:97:65:0D:7C:7A:29:02:AD:73:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6CF3D1F645B67E3C9A8E9151A94E3CD689592016
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe469718-26c7-4af2-90c5-b5bbd933cd3b.roa
Signing time:             Thu 14 Mar 2024 00:00:00 +0000
ROA not before:           Thu 14 Mar 2024 00:00:00 +0000
ROA not after:            Thu 18 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f3:d1:f6:45:b6:7e:3c:9a:8e:91:51:a9:4e:3c:d6:89:59:20:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 14 00:00:00 2024 GMT
            Not After : Apr 18 23:59:59 2024 GMT
        Subject: CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:d1:91:37:40:af:bb:be:e6:ef:a8:c3:4a:
                    7a:5a:d3:a2:f2:60:42:52:b9:cd:cd:2e:c9:9a:6b:
                    66:6d:48:07:00:8f:53:12:1d:b1:a5:d3:cd:08:e9:
                    46:09:53:ca:36:5d:1f:94:27:ad:d4:b8:b1:37:76:
                    54:af:24:59:e1:75:3f:ad:74:d3:1e:5a:63:da:77:
                    a8:59:69:2a:ef:a1:5c:67:5d:05:eb:07:a3:ac:af:
                    62:b7:42:0b:af:00:e5:e1:8d:9f:92:62:1c:29:b8:
                    21:55:50:d7:d9:94:e5:a2:2b:8d:57:d0:4b:bc:cb:
                    5c:a2:4d:19:4f:da:f9:23:39:bd:1c:2d:e4:29:36:
                    d7:eb:d5:d1:4b:da:45:e5:7d:5e:20:02:97:71:4b:
                    8d:a5:e4:08:8f:eb:2d:72:15:a6:e4:6c:6d:17:bd:
                    3a:3f:b7:9d:22:6a:9b:0e:a2:13:ef:b2:6f:20:64:
                    e3:3c:2c:87:06:9a:c2:1c:e7:ba:ab:dd:0c:db:a9:
                    6a:e0:0d:88:d8:3b:4d:ba:89:1c:6b:ba:02:9c:dc:
                    83:ae:a1:15:c8:d3:22:21:3a:56:0b:84:b4:b2:2d:
                    0f:d8:1f:7d:e8:e8:0d:a3:f3:2d:62:99:a9:89:9a:
                    f5:4a:67:38:29:a7:7e:bc:37:50:a7:d3:78:bc:ed:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:6D:C8:C7:2E:EB:1F:5A:6B:97:65:0D:7C:7A:29:02:AD:73:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fe469718-26c7-4af2-90c5-b5bbd933cd3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:cd:fc:d3:26:51:34:b5:15:2e:91:4f:80:23:d3:62:97:e6:
         83:c2:8e:bf:43:41:ff:1d:63:bc:4e:ab:05:6e:b8:7e:e8:0e:
         ea:c2:eb:50:3b:ee:56:3f:96:ea:9a:32:5c:c7:72:77:49:3d:
         20:09:46:09:f2:09:be:71:8f:0d:9e:dc:ed:81:6c:08:e4:18:
         36:b2:e2:ab:f6:30:66:c3:28:46:9b:ad:b3:ed:68:6c:22:c2:
         1a:81:19:73:64:2a:2f:eb:cd:e5:6b:dc:07:d1:a4:d4:68:b1:
         cb:27:90:58:14:62:b1:a0:02:f3:73:cc:6e:7d:e0:20:11:0a:
         a2:8b:87:dc:2f:4f:dc:16:0a:11:8f:b5:dc:4c:b0:e4:72:ff:
         61:e8:80:e3:a0:f4:d4:cc:cc:26:21:a3:ba:41:a8:da:92:3f:
         cd:b4:de:45:26:a0:0c:06:a8:7b:1f:71:19:96:78:e6:d3:77:
         72:06:88:d7:5b:dc:92:ec:fe:92:33:ca:df:4f:d7:cd:cf:86:
         dd:a9:78:75:4b:94:6c:cf:41:40:67:6c:b6:b4:e4:3d:f5:9a:
         92:c0:22:55:80:ed:65:dd:b8:c4:1b:10:2e:f1:55:b4:67:03:
         e8:b3:01:0e:b4:71:36:23:37:bc:79:f0:27:ae:0a:d0:3c:e9:
         10:dc:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----