Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cdc5de5-df73-4b65-b901-e2370dba6583.roa
File:                     0cdc5de5-df73-4b65-b901-e2370dba6583.roa (raw, json)
Hash identifier:          uy1WlocyC3bBSZxlsu/DenZFe/6aQt28c0oGC3ftl9I=
Subject key identifier:   7B:5F:4D:BA:3A:AF:08:E8:37:5F:E5:4F:9F:1B:11:57:D4:51:89:25
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       0A5FE2796DCAFECA76345E142A783CC43BDE6F6C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cdc5de5-df73-4b65-b901-e2370dba6583.roa
Signing time:             Tue 13 Jun 2023 00:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:00:00 +0000
ROA not after:            Fri 16 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5f:e2:79:6d:ca:fe:ca:76:34:5e:14:2a:78:3c:c4:3b:de:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 13 00:00:00 2023 GMT
            Not After : Jun 16 23:59:59 2023 GMT
        Subject: serialNumber=efa047cd29f3799018cb9e45a7014d77c7da14505f55640e6fbc3fd2a04d2eed, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:c6:c9:ac:ce:a1:48:03:7b:0d:5b:a0:7a:
                    24:9d:57:7f:66:05:55:fb:cb:bc:b3:73:fb:6d:0f:
                    98:60:05:92:10:8c:56:71:02:34:cc:3e:91:b0:73:
                    c2:9a:d6:c9:a1:42:c3:61:1e:e5:77:3b:11:50:55:
                    12:17:78:4b:1b:74:e9:e2:13:f1:62:5d:2d:14:4f:
                    ac:96:72:41:ca:de:eb:a8:1a:a1:b5:14:cb:c2:19:
                    1b:92:dd:8d:10:dc:13:5c:3a:ab:12:d2:8d:bc:1f:
                    2b:18:75:d6:44:8e:76:9f:d5:b5:6b:4f:df:0c:d0:
                    67:e6:05:82:06:98:0b:57:81:ac:a2:75:96:6b:0c:
                    76:39:eb:2f:1e:0b:f3:87:82:66:49:4d:1f:39:e2:
                    4a:3d:99:4f:ae:31:31:f0:b4:d0:8b:fb:21:c4:de:
                    80:5c:68:da:e7:27:67:81:3b:df:31:c3:38:47:ed:
                    b5:b4:91:98:a5:21:ad:30:f8:e4:a9:c5:57:56:2f:
                    46:c8:ce:a7:40:bc:56:27:db:02:03:2b:1c:c8:21:
                    f5:2c:12:60:c4:f9:94:3f:86:c4:9e:cc:6d:59:8f:
                    22:b2:d6:9e:30:0a:27:13:25:a8:83:db:7a:5a:b6:
                    5f:0c:84:5e:09:bb:55:16:c7:49:39:86:b2:d8:cc:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5F:4D:BA:3A:AF:08:E8:37:5F:E5:4F:9F:1B:11:57:D4:51:89:25
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/0cdc5de5-df73-4b65-b901-e2370dba6583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:61:15:05:ad:62:98:5f:a7:5a:4b:36:2d:d6:58:82:c7:cf:
         c7:c9:08:27:30:af:32:20:46:6c:65:d0:e4:63:31:6f:0a:00:
         71:81:f5:f1:e2:94:a3:52:30:44:1d:c7:f9:50:61:5d:4c:c0:
         0d:d5:04:4a:0f:a3:5c:a4:bd:04:b6:d2:5b:4b:42:39:17:42:
         3f:42:12:05:0c:eb:0f:e1:ec:6a:97:0b:84:3b:21:d4:38:63:
         48:96:06:4a:99:c1:92:b6:3e:b0:6e:55:79:c2:70:01:54:ed:
         b8:d1:7c:20:64:d2:b0:25:73:6a:e8:17:e9:c9:6c:58:e2:27:
         e0:ba:37:1d:16:db:b6:a4:55:46:b7:e9:de:bd:89:d4:f7:39:
         ec:56:27:f6:a2:02:e6:41:3a:12:9e:f5:06:06:c3:cb:be:e9:
         d0:72:f1:7c:f0:aa:19:4a:02:2d:2f:23:35:70:c7:db:a1:fd:
         98:52:de:3b:00:69:e7:a6:5d:bb:0f:f9:15:c9:73:48:bd:81:
         f9:98:46:0b:dd:96:ee:27:aa:2c:bb:8e:e5:d2:7b:84:42:05:
         bc:ba:c6:2c:01:3b:9b:3a:e2:79:33:29:1f:68:10:3e:db:74:
         68:75:fb:39:e5:f3:33:0f:23:c0:ae:79:a6:23:0c:4b:dc:85:
         48:6a:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----