Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/410b261d-ada0-42dc-abb8-aed9b21a61df.roa
File:                     410b261d-ada0-42dc-abb8-aed9b21a61df.roa (raw, json)
Hash identifier:          fh6GNaYYaAG/BiuAMM39xwyAh9Qgrh35qUcQ0jJLprk=
Subject key identifier:   5E:95:46:1F:73:86:B4:8C:C3:07:E6:AE:09:A9:27:FA:C6:64:EF:7D
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       419840BA429011214678435BDC4DA8A1FAAAFA3C
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/410b261d-ada0-42dc-abb8-aed9b21a61df.roa
Signing time:             Mon 12 Jun 2023 00:00:00 +0000
ROA not before:           Mon 12 Jun 2023 00:00:00 +0000
ROA not after:            Thu 15 Jun 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:98:40:ba:42:90:11:21:46:78:43:5b:dc:4d:a8:a1:fa:aa:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Jun 12 00:00:00 2023 GMT
            Not After : Jun 15 23:59:59 2023 GMT
        Subject: serialNumber=2dfac3b152a034ed01469d431df68b024cba043ae63ebdbd66d70bfce796d037, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:2f:19:99:03:28:69:d3:f0:78:c5:b3:e0:
                    a2:54:94:b0:80:55:96:72:db:2d:ec:ce:96:37:e3:
                    c0:fd:91:07:c7:5a:df:a7:75:e1:46:f3:c3:ee:8a:
                    0d:b9:8c:ea:72:5c:8c:d0:97:d2:20:e1:bb:24:c4:
                    ac:79:ce:6c:63:f9:89:54:3c:08:2a:7c:3a:ee:2a:
                    08:a3:35:62:ca:53:5e:57:b0:e0:bb:7f:24:f2:c3:
                    e9:96:28:dc:58:db:c4:f8:12:31:62:b9:06:c1:ad:
                    bb:1e:6c:a1:99:bf:75:5d:64:0f:3e:66:7b:1f:b5:
                    44:f5:ea:88:d6:a5:7b:84:7f:d4:d6:6d:16:74:01:
                    e9:4c:08:18:19:9d:09:20:95:84:5f:77:ec:cc:b8:
                    bb:47:13:ca:21:93:72:4e:77:dd:77:bb:11:97:47:
                    ee:b4:1e:d4:fe:d5:88:5a:28:3b:ae:7d:31:45:1b:
                    06:a9:f9:32:6e:3c:94:eb:b1:27:1b:b0:bc:2a:e2:
                    ab:48:ee:81:c1:fa:b7:4e:e5:d4:b3:3d:c5:bb:23:
                    d9:b8:ab:9c:bd:11:ea:5a:56:66:2d:54:e1:b6:0d:
                    c2:fa:e4:09:91:aa:4b:2f:78:90:59:7f:84:4f:b7:
                    67:b0:ac:a0:81:53:18:09:af:e2:eb:9f:4c:14:6b:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:46:1F:73:86:B4:8C:C3:07:E6:AE:09:A9:27:FA:C6:64:EF:7D
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/410b261d-ada0-42dc-abb8-aed9b21a61df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:89:86:4a:90:9e:88:4a:ea:3c:3a:7b:8e:07:e6:94:ac:c1:
         f5:5d:85:f7:41:5f:5c:bf:20:3e:65:35:73:e1:3f:97:ba:80:
         3c:7c:48:84:ea:24:dd:df:b5:c6:4e:c6:3b:4e:89:00:c7:5f:
         6f:45:9b:f6:7a:8d:37:f9:5b:0b:14:46:96:ad:87:f1:ee:20:
         92:97:cd:11:1a:5b:d8:4c:2d:5f:61:37:46:7a:6d:b1:a0:77:
         24:79:93:72:d1:5a:5d:3d:ed:de:ae:a6:1b:e7:a6:fc:73:63:
         92:a4:a6:c3:90:16:f1:7a:f1:ba:36:08:8d:bb:3a:12:6a:95:
         0d:d9:e1:b7:d0:73:8a:47:b0:a2:ce:5d:96:6f:18:52:88:96:
         ed:73:d8:49:c5:5a:7d:2d:56:ed:07:f0:54:05:45:93:9d:a6:
         5c:af:f1:8d:01:fe:e4:0c:35:da:6e:34:35:dc:fb:b3:60:6e:
         4c:10:d1:d8:9c:4e:89:61:2e:70:36:64:7a:95:32:b9:1b:42:
         47:b1:6c:73:60:95:56:98:4e:b1:e1:ac:b1:ff:85:7d:6b:46:
         cf:0d:b3:19:9b:33:07:4b:52:6b:fd:e6:4e:02:3a:5f:83:32:
         d3:08:ea:28:ed:5e:62:28:97:88:e9:d0:89:bd:46:11:51:e6:
         7b:a4:17:b5
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIUQZhAukKQESFGeENb3E2oofqq+jwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI4MzFiYjE4MjNiNTg3OTRiMDkyZDg2
ZmIxZDdhMGY3NGUyODE2MTEwHhcNMjMwNjEyMDAwMDAwWhcNMjMwNjE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZGZhYzNiMTUyYTAzNGVkMDE0NjlkNDMxZGY2OGIwMjRj
YmEwNDNhZTYzZWJkYmQ2NmQ3MGJmY2U3OTZkMDM3MS0wKwYDVQQDEyQ2YWU0ZTU2
Ny02MzQ4LTRjNGYtOThhOC0wNDIyYzRjNTJmZjMwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9Ty8ZmQMoadPweMWz4KJUlLCAVZZy2y3szpY348D9kQfH
Wt+ndeFG88Puig25jOpyXIzQl9Ig4bskxKx5zmxj+YlUPAgqfDruKgijNWLKU15X
sOC7fyTyw+mWKNxY28T4EjFiuQbBrbsebKGZv3VdZA8+ZnsftUT16ojWpXuEf9TW
bRZ0AelMCBgZnQkglYRfd+zMuLtHE8ohk3JOd913uxGXR+60HtT+1YhaKDuufTFF
Gwap+TJuPJTrsScbsLwq4qtI7oHB+rdO5dSzPcW7I9m4q5y9EepaVmYtVOG2DcL6
5AmRqksveJBZf4RPt2ewrKCBUxgJr+Lrn0wUa2SVAgMBAAGjggK+MIICujAdBgNV
HQ4EFgQUXpVGH3OGtIzDB+auCakn+sZk730wHwYDVR0jBBgwFoAUkUTtx6QO6ZC3
+jZv9uF9ea3Eg5cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2YyMWMyYi04
ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIvMjc4YWFiODc4ZjI4MzFiYjE4MjNi
NTg3OTRiMDkyZDg2ZmIxZDdhMGY3NGUyODE2MTEuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjY4YTMyZWUtNDU1ZC00ODNhLTk0M2QtMWE1
YmU3NDhiZmVhLzQxMGIyNjFkLWFkYTAtNDJkYy1hYmI4LWFlZDliMjFhNjFkZi5y
b2EwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVz
LWVhc3QtMi5hbWF6b25hd3MuY29tL3ZvbHVtZS9iNjhhMzJlZS00NTVkLTQ4M2Et
OTQzZC0xYTViZTc0OGJmZWEvNGJiOGFlNWMtMTI0Yy00MmYzLTg3ZmItNGYzNGU3
NGUzZGEyLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAxyR4MA0GCSqGSIb3DQEBCwUAA4IBAQASiYZKkJ6I
Suo8OnuOB+aUrMH1XYX3QV9cvyA+ZTVz4T+XuoA8fEiE6iTd37XGTsY7TokAx19v
RZv2eo03+VsLFEaWrYfx7iCSl80RGlvYTC1fYTdGem2xoHckeZNy0VpdPe3erqYb
56b8c2OSpKbDkBbxevG6NgiNuzoSapUN2eG30HOKR7Cizl2WbxhSiJbtc9hJxVp9
LVbtB/BUBUWTnaZcr/GNAf7kDDXabjQ13PuzYG5MENHYnE6JYS5wNmR6lTK5G0JH
sWxzYJVWmE6x4ayx/4V9a0bPDbMZmzMHS1Jr/eZOAjpfgzLTCOoo7V5iKJeI6dCJ
vUYRUeZ7pBe1
-----END CERTIFICATE-----