Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/272f38af-1e44-4cdf-8836-e9c27839802d.roa
File:                     272f38af-1e44-4cdf-8836-e9c27839802d.roa (raw, json)
Hash identifier:          XiA2ddMAseFoY8G34DheD+BPxzVuGGylv2b1Kx7Yl1I=
Subject key identifier:   94:06:CE:C4:84:2E:E7:EB:0C:A4:44:EF:44:28:F9:22:7C:72:F6:6D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       3E158E9DBB111ECCBD091E167A03FE5083332FA3
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/272f38af-1e44-4cdf-8836-e9c27839802d.roa
Signing time:             Tue 13 Jun 2023 00:00:00 +0000
ROA not before:           Tue 13 Jun 2023 00:00:00 +0000
ROA not after:            Fri 16 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:15:8e:9d:bb:11:1e:cc:bd:09:1e:16:7a:03:fe:50:83:33:2f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 13 00:00:00 2023 GMT
            Not After : Jun 16 23:59:59 2023 GMT
        Subject: serialNumber=f2280903ab576878e4b47e0811f4339ab97225bdfa2cf6b97655d72b243de4da, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:e2:0a:a9:2c:d5:65:bf:dc:8f:e6:30:92:
                    e5:ea:03:95:2b:a3:28:43:b1:26:a7:3d:96:00:83:
                    d9:75:41:e6:d0:37:4c:44:dd:37:30:80:a9:b3:22:
                    59:73:d4:e3:75:34:ef:33:b8:f0:30:5d:29:dd:40:
                    3b:ea:35:d0:be:1f:21:c3:cf:68:86:b3:3a:81:9d:
                    6b:00:df:d5:12:6f:47:c3:13:7a:9d:7f:2d:a3:f3:
                    f6:9e:fb:39:18:e5:33:94:3b:35:7e:8e:80:d0:11:
                    b3:cf:d1:5b:87:6e:1a:ae:1e:da:a3:0f:66:76:b0:
                    5f:f8:8d:32:6a:16:97:1c:d7:b0:9a:9e:f4:fb:2c:
                    43:b1:e7:86:b1:3c:28:3b:77:9f:43:b9:ab:7d:57:
                    30:18:f3:52:56:55:f9:3e:1e:7d:4e:af:e0:a9:96:
                    c9:90:b8:86:75:d8:93:21:f3:d6:5f:37:61:ed:20:
                    79:fa:42:50:ab:a0:d6:80:7b:f2:e4:6e:b9:78:b7:
                    43:79:4f:cc:a1:3c:04:3c:89:10:c0:3b:7e:6c:d1:
                    40:08:c8:bd:70:78:4a:4d:e8:cd:ae:9e:ad:2a:a9:
                    97:0b:58:8c:2c:57:d2:72:cd:fb:ad:df:59:8f:8e:
                    83:6f:8c:7b:cf:9a:68:6b:db:38:a1:7a:a7:cc:f5:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:CE:C4:84:2E:E7:EB:0C:A4:44:EF:44:28:F9:22:7C:72:F6:6D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/272f38af-1e44-4cdf-8836-e9c27839802d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:db:9a:f3:0e:4f:78:ca:d5:b0:58:19:35:cb:4d:26:4e:
         76:66:a0:47:2d:45:9f:9d:11:8c:7d:53:27:5e:02:e9:46:91:
         27:e5:bd:28:d0:df:bc:3b:7f:e3:c6:d0:be:27:2f:3a:17:85:
         72:b9:31:2c:5e:3a:ae:da:d0:5f:9c:5f:30:d8:a5:fb:1c:ef:
         8f:32:23:d1:cf:c4:d2:c7:a6:64:4a:26:58:14:9f:da:7c:e0:
         9d:7c:28:40:63:66:7a:2b:9c:ce:97:a3:bd:f7:19:ae:9b:60:
         06:81:d8:57:66:bc:47:56:66:fb:c3:92:4b:95:ed:ad:bd:ce:
         d6:66:09:54:65:6d:32:58:3c:54:91:df:8b:91:7e:ed:42:ff:
         0d:5c:14:30:56:3b:17:79:ce:ae:b5:e8:14:f1:3e:6a:e2:8c:
         43:5c:cc:52:73:2b:25:7a:49:25:f2:d9:b6:2b:84:40:f5:d0:
         f2:85:21:b3:e7:22:a7:95:b3:d7:95:cc:0c:b9:e7:03:08:08:
         81:23:af:96:3b:1b:e8:fd:45:4d:d0:71:f8:c5:63:48:3f:85:
         47:92:9c:4a:7e:3e:87:02:db:6d:86:09:d9:aa:95:49:ba:62:
         a9:16:28:59:80:59:c5:e5:84:46:22:3f:e9:49:51:10:4f:1f:
         35:8f:37:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----