Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/003df262-a2b8-4d49-ac10-1d7ab3817e65.roa
File:                     003df262-a2b8-4d49-ac10-1d7ab3817e65.roa (raw, json)
Hash identifier:          xi6Kqs8aq5dhP9Kje7kfCrbHP1NOX8wJCNkLIo/e4rs=
Subject key identifier:   81:B4:CF:B5:91:14:77:1D:72:94:C4:54:F8:17:80:E5:49:9D:F4:65
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       7BE47A54B0A6EAC51E04DF8EAD89846DD71DDF30
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/003df262-a2b8-4d49-ac10-1d7ab3817e65.roa
Signing time:             Mon 12 Jun 2023 00:00:00 +0000
ROA not before:           Mon 12 Jun 2023 00:00:00 +0000
ROA not after:            Thu 15 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e4:7a:54:b0:a6:ea:c5:1e:04:df:8e:ad:89:84:6d:d7:1d:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 12 00:00:00 2023 GMT
            Not After : Jun 15 23:59:59 2023 GMT
        Subject: serialNumber=e84fb92be4f122482214d28039bd8397de17259dd4b75191e4ac756102747450, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:db:64:bf:1a:e9:48:8c:73:2a:4a:46:44:7a:
                    c3:a2:59:95:c8:dd:02:f2:ab:2c:78:fe:f5:79:1b:
                    3e:f3:8c:66:1c:87:1e:9f:fd:a8:30:79:15:55:8e:
                    cf:b6:60:24:5e:f4:90:d1:64:a9:c6:45:d7:e6:c2:
                    13:94:db:cb:fd:d0:1d:62:5f:92:b3:03:46:ef:07:
                    db:a0:15:27:4c:73:72:87:64:d5:0d:4c:32:99:3c:
                    7e:8c:ed:dd:36:b5:a1:f5:7b:ab:b8:90:2f:4a:b9:
                    5d:d3:3d:9d:2c:d5:a4:1b:53:c4:20:39:5e:28:b4:
                    e3:12:b2:93:18:21:bc:f0:3e:16:e1:f3:e7:ff:fd:
                    5f:04:94:a2:8f:27:15:93:8a:aa:35:6b:7a:46:75:
                    b2:3e:2d:8d:67:29:66:d2:50:c1:ba:d6:69:90:ef:
                    99:38:ca:07:33:da:ad:3b:d7:2d:62:1b:f7:47:b4:
                    92:70:c6:6f:34:a2:52:04:83:2b:de:14:07:5e:0f:
                    dd:7c:10:c2:07:8a:4f:bc:56:13:6e:90:f6:fb:23:
                    4f:0d:6d:61:1b:c4:86:03:0a:5a:88:52:d4:fc:70:
                    99:c6:d3:a1:d9:23:e9:4c:f0:46:23:44:57:74:10:
                    4c:f8:d1:63:0c:66:f4:5c:f4:7c:3a:a3:65:6f:ba:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:CF:B5:91:14:77:1D:72:94:C4:54:F8:17:80:E5:49:9D:F4:65
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/003df262-a2b8-4d49-ac10-1d7ab3817e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:93:79:63:9a:41:27:b3:0a:38:eb:44:8f:ac:9d:20:3b:32:
         51:bb:44:ad:4f:c2:86:46:01:ea:00:74:c7:1e:53:4a:18:c0:
         9f:aa:05:3e:f9:e0:5c:ac:e2:a5:8e:82:0a:4c:9c:b4:19:cf:
         6e:80:10:40:6c:da:47:29:f3:05:ee:bd:0b:c7:0f:05:79:1d:
         3b:64:df:e6:fe:86:4e:3f:96:1c:7e:c6:7c:35:35:62:61:9d:
         56:08:76:8a:40:21:bc:83:c1:4f:4a:83:72:af:2c:38:89:86:
         d5:32:82:b4:cc:22:5c:37:87:90:ba:13:d3:e2:d4:40:71:d7:
         ef:fa:d8:68:f1:7d:c2:7f:3b:07:57:68:6e:20:19:13:c2:22:
         bc:61:39:c0:17:ea:b0:3b:1c:96:93:d3:c0:88:6d:a7:03:59:
         51:39:cc:a9:e3:25:b4:0c:42:48:47:ca:ae:c6:1d:52:de:68:
         cf:57:ac:3e:b4:07:0c:fb:66:7d:e4:a4:1c:32:c5:23:53:be:
         13:99:3f:59:48:db:04:e3:1a:df:f2:fa:c7:e5:4e:56:62:39:
         38:d9:16:f8:09:77:d9:d0:ab:86:37:af:43:3e:6b:4d:b1:60:
         1e:f5:ca:f8:d4:c7:c1:3b:3c:78:3f:7f:1d:37:29:09:d7:f3:
         84:9f:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-ams.rpki-client.org