Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37607959-ea7c-41f1-bdff-035f576e3ee5.roa
File:                     37607959-ea7c-41f1-bdff-035f576e3ee5.roa (raw, json)
Hash identifier:          bOxLBhvrrmZhprzgDB3MzMjhLrKiXRZyhWUGwkywwH0=
Subject key identifier:   2D:05:F2:70:F8:47:77:99:8C:AC:23:2B:B1:D7:E4:FC:B2:D6:ED:01
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       234A9CA81141134A112F589F5F273D3DAE5EB413
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37607959-ea7c-41f1-bdff-035f576e3ee5.roa
Signing time:             Sat 10 Jun 2023 00:00:00 +0000
ROA not before:           Sat 10 Jun 2023 00:00:00 +0000
ROA not after:            Tue 13 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:9c:a8:11:41:13:4a:11:2f:58:9f:5f:27:3d:3d:ae:5e:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 10 00:00:00 2023 GMT
            Not After : Jun 13 23:59:59 2023 GMT
        Subject: serialNumber=8ca391673d5b185f855b015f5d3cd96eef50b90957f8bb64fcf0c378e49d07ea, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b8:8f:d3:b5:e0:45:fd:a6:9e:3e:54:4a:03:
                    78:aa:5c:3a:53:09:e9:ed:67:c0:5e:24:ef:b9:08:
                    ac:f1:a7:f7:78:ce:52:82:41:5d:8d:0c:e0:4a:77:
                    6f:c6:b7:33:34:26:8c:88:8d:dd:ca:30:7e:50:e7:
                    df:a3:83:5d:b0:15:40:2b:ea:ac:34:69:aa:ab:e3:
                    63:d4:f6:02:09:bc:19:05:de:58:4b:e3:ce:fe:a1:
                    5a:ef:ec:f2:25:1d:68:ec:66:da:9f:23:6e:4e:c4:
                    88:7c:d8:17:72:68:78:8e:d9:2e:df:2b:04:2c:ae:
                    2d:4b:21:d6:fe:1c:19:0b:61:50:b2:22:7d:f3:8a:
                    97:55:fb:af:6e:44:18:4e:ef:de:30:1b:e9:f7:21:
                    64:39:03:ce:72:82:b0:3b:db:4d:9c:a9:65:cb:35:
                    54:c8:7c:9d:0f:85:83:10:13:62:f5:a3:f7:27:6f:
                    fd:9a:47:fa:6e:d7:5c:bb:9e:55:f3:a9:20:b7:04:
                    f5:74:53:3d:5a:ba:9e:89:c1:94:46:18:98:ab:29:
                    d1:90:7e:61:68:2b:92:d3:b4:34:67:03:98:3f:85:
                    8b:ed:ea:05:ad:de:16:4c:5d:48:ba:3d:ba:5c:5b:
                    9a:fd:99:a6:1a:99:4f:a8:9a:58:c6:03:56:27:65:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:05:F2:70:F8:47:77:99:8C:AC:23:2B:B1:D7:E4:FC:B2:D6:ED:01
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/37607959-ea7c-41f1-bdff-035f576e3ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:ed:99:28:4e:d2:90:6d:e0:8f:bd:b9:6c:23:18:b0:e4:06:
         e8:e1:0e:7b:8d:5f:fa:b3:a5:a0:5f:19:ab:ca:34:f1:4a:3a:
         dd:e4:83:14:0f:b5:85:10:0a:df:24:41:b5:dd:69:1b:84:65:
         dc:ae:39:cd:12:03:28:97:fa:6b:7c:78:0d:bc:61:98:70:cb:
         07:5f:5d:ce:b3:bf:3a:9a:d0:5c:74:ba:e7:cd:7a:9a:c6:ec:
         32:42:25:31:6a:33:0e:c0:7a:13:54:77:14:80:76:d1:91:97:
         03:b5:3d:f5:e8:8e:69:cc:53:b8:e6:80:e6:71:b9:d6:f1:1a:
         a7:42:b3:3c:9e:84:3d:3c:47:2d:7d:04:1e:93:59:4e:f8:61:
         ec:7a:62:d8:db:1d:97:7e:f4:5b:33:ae:c8:8a:fb:bd:e4:f8:
         2c:7b:39:bd:61:a9:56:0a:7a:9f:46:aa:46:55:0a:7f:58:47:
         c6:9f:5b:21:f7:60:a6:da:7c:45:0e:1d:c0:55:e7:dd:21:f5:
         3f:e4:c7:70:f9:92:11:a1:ed:26:2c:61:3f:d9:99:5d:71:f5:
         08:c8:4d:1b:d9:f1:ec:03:c6:da:92:54:4b:ba:ac:90:9f:61:
         e6:bd:f5:60:d7:d3:51:33:7f:a1:7e:c3:51:bd:66:15:1b:93:
         da:b5:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----